Just Want To Get This Off My Chest...

I used Enhanced myself a lot and found this a very interesting read. Hopefully this can get sorted out. I do not know if or when wynncraft owned that domain, though it does seem like this could be a simple mistake. I did not decompile the code myself but iirc the third party domain was the only issue apart from unknown’s threats to Wynn staff...

The thing that does concern me is that play.wynncraft.org is directing players to wynn’s IP, and I feel that should definitely be investigated.

Finally, I wish you luck in the future and hope you continue with coding! Your talent can definitely be applied elsewhere and this modpack was testimony to your abilities.

 

Everything must come to an end. Thank you for your contributions to the community. I hope that you do continue coding, and that you don’t let this stop you.

 

While I don't deny any actions from unknown to wynn staff, I do have to say I did notice a lot of annoying behaviour from a one specific head moderator who now left the wynncraft team. Every time unknown started pushing forward with thoughts (which knowing unknown usually makes him very vulnerable to criticism while also not ready for it), pretz used to come and comment on the posts or act on them in ways that he knew unknown would not be happy with. This went on for almost around a year, and this really started to grow a real annoyance for unknown. Suddenly we were making our biggest feature yet and we needed help, we planned a post for 2 weeks, and when we made the post, pretzule comes back, and moves it to nemract's bar, which for most people I know is seen as a shitpost section. Having your very important and planned post in a shitpost section isn't really something you want, and this after seeing pretzule provoke unknown multiple times really often caused the outbreak of the stuff that happened next.

I'm not saying unknown is innocent, or that this was good, it's not, I'm just saying pretzule's behavior from my perspective acted as if he wanted to bait unknown a lot, and as far as I'm aware that's also against the rules, but it never got addressed as most people saw unknown in these situations, and resulted in pretzule managing to grow the heat a lot more.

 

I can assure you that was never Pretzule's intention. The thread was most likely moved because WynnEnhanced has nothing to do with official Wynncraft. It's an unofficial mod, that's why it was moved to Nemract's Bar, because that's where off-topic stuff goes.

 

Don't call Nemract's Bar a shitpost section ! We got our D&D stuff in here ! :(

 

And we do have actual discussions in there like this and this.

 

Oh well, though I'd have to say Your Work seems like a choice that would make both parties happy in this scenario but I guess pretz didn't think of that as he was just following his usual "work" if you get what I mean

After all the only thing we had seen of Nemract's bar was the compilations on youtube which as far as I remember was just memes and similar so maybe that grew the wrong image for both of us in this case.

 

Ummm... Could anybody tell me what the play.wynncraft.org IP actually DOES? I mean, apart from not being hosted by Wynn and directing you to Wynncraft. I used this modpack alot and it always worked very well for me. I also can't check the regular connection IP (main menu one) because there's no button to do that. However, the one when you disconnecc is the .org one.

Also when I google "play.wynncraft.org" this comes up:
http://wynncraft.org/
Idk if this has anything to do with Wynncraft, but I mean, what else could have that name?

 

It's a host that you can buy, if you can buy it, nobody own it to do weird things ^^

 

I mean, how could the IP be harmful? What kind of harmful stuff does it do?

 

First off, replying to Alexis message, note in my original post I said how wynncraft from my thought probably cancelled ownership of the domain, and thus now it's available to buy. Reading everyone's replies after my post, it looks like this is not the case. Since wynncraft never owned the domain, as said earlier in this thread, someone else owned it up until December 2017, and it was that third party user who cancelled the domain, thus the domain has probably been without use for the past half a year, atleast from the times I have tried to connect to it to see if it's up again.

Second of all to answer Oskhol1's question of what the IP does other than not being owned by wynn or redirecting to wynn.
So all this is just speculation other than the points Jp made a month back. If you own a domain like this, that's very easy to get wrong accidentally even for a user, you have in your hands a very powerful weapon, if you know what you're doing. This is where the term "proxy" comes in. A proxy, is a man in the middle, where it acts like a normal piece of wire, but it could leak out and insert data. This is where the word 'wiretap' comes from. With this, they could let people authorize with the server, and then redirect this authentication to the server as if nothing happened, and if all goes to plan, scan and steal the data being sent.

Note how Jp said that they found 1 user owning over 1000 different minecraft accounts. While I first was trying to figure out where this user could be, before I was sure it was this IP, I was doubting it since minecraft's wiki for networking, at the login section (as seen here ) shows that they use the Mojang API to hash/encrypt and secure packets during login, and thus never sending your session token to the server. This made me believe that one could never hijack this session token, and use 1000+ accounts from one single computer and connect to wynncraft, as the session token would never get sent to the proxy in the first place. This I later realized was wrong, and this was the correct target, as they're not extracting session tokens to join from another setup, instead the setup connecting to wynncraft with 1000+ accounts is the proxy itself.

However if we leave to a more generic proxy point of view, a proxy in general, could and is used to insert, and peek at sent data, while also keeping the data get forwarded to their desired destination. This, as most of us would admit, would never be noticed by the user, or the end target, unless the end target, check how many logins come from the same IP, which is exactly what happened in this case.

 

http://wynncraft.org/ I'm speaking about the website he linked, not the IP ^^

 

Aha

 

Well since you need to own the domain to domain, to change the subdomains and whatever the IP points to, my response still applies. ^^

 

Well, your statement is true, have nothing to do with what I said since I was speaking about something else completly, but it's not like I care much. ^^

 

Oh I thought you meant that since noone own the domaind, noone could have done all the proxy stuff that went down. Thus why I corrected and said that would only be true if it was wynncraft who owned it up until new year, instead of some third party which actually was the case. Nvm me then.

 

That's why I was speaking about the website Oskhol posted and not the actual IP that was the center of the thread x)