[psa] Wynn Enhanced Not Safe

I personally have already changed my password and uninstalled the mod.

Edit: Wynn Expansion is safe, just to clarify

Photo credit @AlexisPlay

 

Free for you :

________________________________

Someone created this account but never did anything ? XD

 

I see. Fuck

 

ugh i knew i should've listened the first time , i cant freakin un-install it

 

that the previously not endorsed by wynncraft's modpack or is that the other one?

 

the same one

 

wait, is this a new statement or the old one? becouse last time i checked people searched through the soucecode of the mod and found no malicious content

 

This is very recent. They discovered the third party proxy yesterday.

 

this question may be dumb but i want to be 100% sure: the speech is about the twitch curse thingy and not about the forge wynn expansion thing right? correct me if im wrong but wynn expansion is safe isnt it

 

new

 

hmm. so did people find anything wrong in the code this time?

 

Common misconception: expansion is safe

 

wynn expansion is safe as far as we know

 

yes admins did
read what salted said

 

Not staff, but I looked at an earlier version of the code, and I found some red flags that the modpack isn't designed to be up-front about what it does.

The owner's name hardcoded everywhere.
Windows-specific code to prevent the mod from running if you're not using the Curse Launcher (also causes tons of problems with macs).
An intrusive version check that will not run the mod unless you have the latest version.

These were only a few of the problems I saw, and I didn't even dig that deep. Disappointing, but I'm not surprised.

EDIT: Clarification

 

I.. Still don't see how thats malicious?


It's just something that only makes it run with Curse and the latest version?

What compromised info is there?


PLAYER USED CURSE. INFO COMPROMISED. DELETE IMMEDIATELY.


I mean Kirdow coded most of it, Unknown_ [although I don't know much] might have just screwed it all over now lmao.

Edit: just asked Kirdow he has no clue this even happened or what's going on with it. He says the mod hasn't been touched by him since October of last year, so whatever new thing they found he's curious of what it was. So whatever new thing was found it's been in there for a while....

 

I've seen the code myself (at least an earlier version), and while those things aren't malicious, they show that the modpack isn't up-front about everything it does. I think that ThaUnknown_ might have added some malicious code later (the forced update code in earlier versions comes in handy here) without Kirdow's knowledge. I'm just saying that given the way the modpack is coded, I'm not surprised it's malicious.

 

I don't think Unknown had access to the modpack for a while, believe he just told Kirdow what to code and whatnot and added the UI.

I blame Unknown for... being.... unknown I guess about everything but I don't think Kirdow would have coded in malicious stuff, and Kirdow did most of the coding.

 

Is anyone in contact with Unknown about this?

 

im gonna uh

take a swift look at the code of enhanced super fast


i already have experience with finding out labymod's bs so uh

edit: oh fuck thats a lot of stuff

theres the proxy and then there's what the guy above said