RedHerring
Simple non-invasive coremod to fix the 'exploit' in 1.8.x that allows the server to get yes/no answers.
介绍
Simple, clean server resource pack “Exploit” fix.
No external dependencies besides Forge.
The “Exploit” ONLY allows for the server to check if a file exists on the client or not.
And as a side effect cause the game to try and load the file as a resource pack.
There are currently no know issues with java’s zip file management that would allow for any extra malicious activity.
So any claims of people being able to steal your passwords/execute code/etc.. is unfounded. Hence the name RedHerring.
For more info refer to: https://ungeek.eu/minecraft-18-file-access/ Ignore the fear mongering bits like:
“Servers can check if a file exists on the player’s computer, enumerate users names but maybe even worse. See PHP’s issue with file_exists and phar files.”
Logo Found at TvTrops, CC-BY-SA-4.0, https://commons.wikimedia.org/wiki/File:Redherring.gif
常见问题
RedHerring 支持哪些 Minecraft 版本？
RedHerring 支持 Minecraft Java 版 1.8–1.8.9，共 10 个版本，可用的加载器：Forge。下载时注意选择和你游戏版本一致的文件。
RedHerring 怎么安装？
先用 PCL2 或 HMCL 启动器安装对应版本的 Forge，再把下载的 .jar 文件放进游戏目录的 mods 文件夹，重新启动游戏即可。开启了版本隔离的，mods 文件夹在 versions/版本名 下面。
评论
登录后评论和评分