Minecraft's Oldest Server Was FINALLY Hacked

Рет қаралды 1,290,892

Жыл бұрын

Today we're covering how Minecraft's Oldest Server Was FINALLY Hacked, and the insane criminal method utilized to do so. Get Raycon Headphones and support the channel! Visit buyraycon.com/fitmc for up to 15% off!
My Twitter: FitMC
My Instagram: fitmcsippycup
Information/Images/Sources:
Minecraftonline admins
Minecraftonline Public Discord
Lunar Logs: lunarlogs.com/2023/01/29/doub...
Gradle Security Team: blog.gradle.org/wrapper-attac...
Additional Music:
homieonice (Instagram), FFXV, FFX, Y7
If you enjoyed this video discussing how Minecraft's Oldest Server Was FINALLY Hacked I would appreciate if you would consider hitting that like and subscribe button!
This video has nothing to do with speedrunners, 100 days, hardcore, "minecraft but", 1.20, Camels, sniffers, hermitcraft, armor trim, suspicious sand, or any of those other topics.

Пікірлер: 1 900

@melon64_ Жыл бұрын

Him not saying it was "Minecraft's Oldest Anarchy Server" really threw me for a loop

@toino449 Жыл бұрын

@tranceman9670 Жыл бұрын

Same

@archiegorman349 Жыл бұрын

I know right!

@fujiwaranonekobiodrando1257 Жыл бұрын

I also thought it's 2B2T. turns out not :(

@Zedryx69 Жыл бұрын

@@DontReadMyProfilePicture.6 got it, chief

@lanecolvin95 Жыл бұрын

Imagine being in prison and they ask what you're in for Hacking a minecraft sever

@tornado100able Жыл бұрын

He's gonna be the boss in the prison, the fearest prisoner i imagine!

@helizteil2625 Жыл бұрын

Correction, he hacked a server that has not been hacked in over 13 years.

@Cipher_Nine Жыл бұрын

He's probably just gonna have to pay, i don't think he'll be staying in jail.

@razi_man Жыл бұрын

If he did go to jail. It would be a big flex though.

@francisbisuks4068 Жыл бұрын

@@razi_man nah. if you get asked what ur in for and say minecraft. u gonna get bullied badly

@shadowgodthegamer5738 Жыл бұрын

2b2t is like a netflix drama which is why I like your vids abt it so much. But a diversion every once in a while is nice as it keeps the channel fresh

@henke37 Жыл бұрын

Lets not insult the honorable players of 2b2t by comparing them to mainstream media.

@kreborno3490 Жыл бұрын

@@henke37 some aren’t that honorable,and it’s probably best it stays that way

@user-221i Жыл бұрын

Watch @ish minecraft civ videos. You won't regret it.

@andrewperkins7973 Жыл бұрын

@@spec2893 More “honorable” than the shit netflix puts out lol

@Itzriyo157 Жыл бұрын

Oot I found a mega base coordinates 19830, 69, -156

@chuckyzrevenge Жыл бұрын

Man, 13 years is crazy. Why cant big companies use this type of security for other games

@hollunk6969 Жыл бұрын

because big companies are full of idiots

@Significantharrassment Жыл бұрын

They need to start using a brain for a change in the first place

@RisingRevengeance Жыл бұрын

They do if it makes them money. Good luck trying to hack in lootboxes in some popular game, feel free to use aimbots and whatever else though.

@RisingRevengeance Жыл бұрын

@@hedge0 Look it was a quick example. I'm aware of the difference between server and client side hacks. My only point is that they only care about what makes them money in the short term. Look at gta online, an unsecure mess but I'm sure the cash shop still works fine.

@anarchosnowflakist786 Жыл бұрын

simple, security costs money, time and effort, a minecraft server exists for fun and therefore can afford to care about it, a company is run for immediate profit and growth, and therefore must cut costs everywhere that doesn't risk immediatly getting the CEO fired...

@blbean9462 Жыл бұрын

surprising that it took this long for the server to get badly hacked, considering everything thats gone down tbh

@thema8871 Жыл бұрын

Used to admin for a medium server back in the day and the amount of script kiddies youd have to deal with every week was insane. Serious props to mconlines backend guys

@paganathiest6349 Жыл бұрын

wasn't mojangs event server hacked on like the one day it was up for the voting? XD

@literallygrass1328 Жыл бұрын

@@thema8871 get anti cheat

@thema8871 Жыл бұрын

@@literallygrass1328 amazing idea wow!!

@literallygrass1328 Жыл бұрын

@@thema8871 thank you, thank you, I know I'm a genius

@doctorcloverr Жыл бұрын

Just wanna let you know your the only minecraft youtuber I consistently enjoy watching despite not playing the game often

@pewdiepiezzzzz124 Жыл бұрын

@Don't Read My Profile Picture i won't

@Echoicfire4u Жыл бұрын

Facts

@jaskrolor Жыл бұрын

same

@Ramej Жыл бұрын

same

@zihn Жыл бұрын

True asf I haven’t played in years I just rlly enjoy fitmc

@gevkrusty2906 Жыл бұрын

Imagine being able to do anything with your coding knowledge, yet you decide to face charges for pawning items in a building blocks game

@_M_643 Жыл бұрын

Most people don't expect it to lead something serious but in most countries committing a cybercrime is the same as a normal crime.

@doufmech4323 Жыл бұрын

Prob a script kiddie

@theperfectbotsteve4916 Жыл бұрын

they're just narcissistic A holes who don't like that other people can have fun

@iceneko9170 Жыл бұрын

creating fake items isnt anything offensive enough to face legal charges, but he did cross the line by stealing private information (like password data) which could be used maliciously.

@TheRandomshite123 Жыл бұрын

@@doufmech4323 did you not hear how he did it? That is well outside the reach of a script kiddie

@cassandranugent2443 Жыл бұрын

The fact that they kept the server safe for 13 years is quite impressive. Given it’s notoriety and the potential cache of information available, it would’ve been a high priority target. In this day and age, hacks are inevitable, so kudos to the dev team for their efforts.

@giles.9862 Жыл бұрын

Dev team????

@zion2123 Жыл бұрын

@@cellwithinacell fr

@doublehelix457 Жыл бұрын

As a member of the admin team of minecraftonline, I gotta say... great video and thanks for not giving us a hard time :)

@eyeofthepyramid2596 Жыл бұрын

You wouldn't destroy the weapons don't you, I mean it will be an another legend.

@1x3x23 Жыл бұрын

who was the hacker?

@ZentaBon Жыл бұрын

You weren't prepared, and honestly who would be? Your server's really chill and doesn't typically attract creeps like that. I'm sorry y'all went through that.

@NicoTheCinderace Жыл бұрын

@@1x3x23 It's going to remain undisclosed, Probably. No point in giving them attention.

@vindifrenzy1100 Жыл бұрын

Players can be crazy but you did the right thing to get the hacker banned and arrested for the crimes. Perhaps a video on destroying the builds the hacker made using backdoor access? Will be very satisfying.

@Wmann Жыл бұрын

It’s pretty surreal it’s that old already. Now it’s old enough to go through its rebellious phase.

@CrateSauce Жыл бұрын

I guess it did

@niko5008 Жыл бұрын

@@CrateSauce what it did would be the same as trying to do self harm for the first time

@StarOperator_ Жыл бұрын

@@niko5008 Was that really necessary? No one cares

@turgut1071 Жыл бұрын

@@StarOperator_ rawr XD

@AzamatSlowedAndReverb Жыл бұрын

@@StarOperator_ stop with the sensitivity people say things and you can't do anything about it, if you could that would be the same as playing or trying to play as God and you would ruin everything.

@donovanmcnitt8077 Жыл бұрын

You should do a series of 2b2t player profiles. We always see notable players, like iTristan, Hermeticlock, Jared, Redstoner, Popbob, Offtopia, and many others recur in your videos. They always seem to be involved in major events on the server and it would be cool to hear each of there stories in there fullest. As someone who doesn’t even play, there are quite a few players who’s names I recognize from hearing mentioned in so many of your videos, and it would be really cool to see there whole history documented.

@donovanmcnitt8077 Жыл бұрын

Players I can thing of off the top of my head that would be cool to see covered would be Clyde and Taylo. As well as that one player who’s name I forget, but who’s the best civil engineer on the server. There are plenty of others I’m sure you could make very compelling videos on.

@rekto5781 Жыл бұрын

"The hacker social engineered the admin, and gained total control by using an exploit" i think ive heard this somewhere before...

@aarongamerph Жыл бұрын

i heard it a bunch but not in Minecraft there has cases it in steam, roblox, ect.

@FreyrFox Жыл бұрын

its always social engineering

@Valery0p5 Жыл бұрын

In times like this it feels like it's not the server that's 13 years old, but the admins /s Jokes on their trust policies aside, I find it really hard for this to be the only incident in more than a decade...

@rekto5781 Жыл бұрын

@@aarongamerph I meant the nocom exploit

@Stevits11 Жыл бұрын

@@rekto5781 clearly didn't watch the vid

@Fraccy Жыл бұрын

I played MinecraftOnline actively for almost 2 years and made a town called Maltapple that was targeted by these guys. It caused me to leave the server entirely. My name is Fraccu for those wondering, and you did an AMAZING job on this video Fit, props to you!

@draconiusultamius Жыл бұрын

Bruh, you literally got banned on discord for harassing women, shut up please

@Fraccy Жыл бұрын

@@draconiusultamius I barely recognized your name but on top of this being untrue you literally posted photos of people undergoing surgery in multiple places that people didn't want to see them and refused to delete them. Quit acting so perfect as if you are fighting for "justice" lmao

@costa2k1 Жыл бұрын

@@draconiusultamius Fraccu based then?

@Fraccy Жыл бұрын

@@heart5021 I think ik who you are but under a slightly different name, but essentially the server has been fine for the most part outside of a few hotspots where these players would hang out. Considering fit didn't name them in the video, I won't be naming them either, but they for the most part were part of a base group called Heese69 and would get "the hacker" to distribute items to them and one of their very active members would use these items to make illegal bedrock builds and other bizarre things. They stole stuff from a lot of people echests including mine but I didn't even notice it since all my items were stored in shulkers I never checked. Eventually they used alts to grief attack my town and a few others and destroy all the chests with valuables in them, but other than that for the most part the server is unaffected and the community still stands rather strong. Just as always people come and go, and I assume MCO will make a full recovery from the incident.

@katincko Жыл бұрын

u gae

@cooper7240 Жыл бұрын

I would definitely like to see FitMC as my history teacher

@pewdiepiezzzzz124 Жыл бұрын

@Don't Read My Profile Picture i won't

@GoodKingDeejay Жыл бұрын

@@DontReadMyProfilePicture.6 Don't worry I won't.

@hampter3819 Жыл бұрын

I'd be getting better grades

@tiktok-mc2nq Жыл бұрын

Fun fact: fitmc was a school teacher at point before quitting

@c63w204W Жыл бұрын

he was a history teacher

@lezlienewlands1337 Жыл бұрын

Yikes. The mistake the hacker made was using it too often and leaving breadcrumbs and setting off red flags. It's for this reason that the Nocom exploit lasted as long as it did. They kept it quiet and on the down low and minimised any public action so as to keep the exploit working as long as possible. Still, mad props to the Minecraft Online team for getting this far without a breach. 13 years breach free in today's cyber world is not easy.

@melody3741 Жыл бұрын

Nocom was honestly pretty damn good opsec for kids playing Minecraft. They didn’t do everything right but it really worked for quite a while

@FrostDzNz Жыл бұрын

One of the sentiments that they push nowadays in tech is that the biggest vulnerability a company can have will always be is its own employees. Most people don't even realize how much hackers rely on social engineering as a method to enable them to even begin the technical portion. What's the point of wasting time figuring out vulnerabilities to a system when you can circumvent it entirely?

@infinityyworks Жыл бұрын

In infosec, they say that the weakest link in a system is the humans operating it

@comet.x Жыл бұрын

and sometimes humans are the only vulnerability.

@samsonsoturian6013 Жыл бұрын

This was technically a Mojang employee doing this.

@PotatotheTroll Жыл бұрын

This is especially true given that software security standards are actually pretty high these days. No reason to get complacent, mind you, but it is in fact quite difficult to accomplish anything without someone on the inside manually downloading and/or installing something.

@boslyporshy6553 Жыл бұрын

Do employees get paid to follow orders, or think independently?

@aaronmcneal1698 Жыл бұрын

Both my kids play and have their own server but I really never gave the game much thought until I came across your channel. Now I'm obsessed and awestruck about it's history

@draconiusultamius Жыл бұрын

I used to play on that server and was active when the hackers original account was. They seemed alright, not trustworthy in the slightest, but alright. I'm also kind of friends with two of the other people who were banned in conjunction with the hack. One was always a bit of a troll, but also actually isn't horrible. The other was a longtime player who was very close with the hacker on their original account, but I'm not actually fully convinced that they did anything. I did talk with the hacker for a bit after the news broke, but honestly they were a bit vague. This really isn't their first time doing this, I was one of the people who was involved in the permanent bam of their original account. I don't think MCO deserves to be hacked tbh. Sure, I've got my own grievances with the server, but I still feel bad for anyone who was negatively affected by this, especially if any passwords or sensitive info has been stolen. It is great that the admins acknowledged the hack publicly, though a friend of mine (former moderator and possibly one of the biggest reasons for the 1.12.2 update) pointed out some flaws in the response, but im just glad they took the time to at least apologize, its a step in the right direction. Please don't go and harass the server, people are just trying to play there and exist, so there's no reason to go and mess with them just bc of this. Sure, go check it out if you want, but not for some dumb reason like this. It's a unique place, if a deeply flawed place in some ways, but that's part of what makes it special. Go for that experience, not to go and bug the staff by asking about this.

@selimbits Жыл бұрын

based as always :)

@frayien Жыл бұрын

Gradle is not a small project, it is actively used by HALF of EVERY SINGLE program using Java, tens or maybe hundred of thousands of softwares, websites backends, etc It blows my mind a breach was introduced into it. And it blows my mind even more it was only used to hack a minecraft server.

@abamacus2030 Жыл бұрын

As I understand it, the hacker didn't put their code into some core gradle repo. They created an alternate version based on gradle, on their own machine. Then compiled it into a binary, and uploaded this bad-gradle on the MCO build server. Where it then compiled the plugins with the malicious code injected into them, which were then executed on the server.

@frayien Жыл бұрын

@@abamacus2030 Oh you are right I missunderstood. According to the official gradle attack repport, the gradle wrapper used by minecraftOnline was tempered with and did not match any valid official checksum. This means 2 things : - the exploit could have been avoided had MinecraftOnline verified the checksum of the wrapper before using it. - the hacker manager to replace the wrapper file on the build server and no one noticied ? This is super weird, the gradle wrapper file is typicaly something you ever set once and never touch ever. Even upgrading gradle to a newer version is only done editing a config, and not by changing the wrapper jar. ... Now that I think about it, maybe the hacker participated in the creation of a new plugin and was the one who initializated it ? maybe he has access to the build server for developpment purpose ? ... There are many ways it could have happenned, but it requires some level of trust was put in the hacker at some point, this is insane level of social engeneering.

@abamacus2030 Жыл бұрын

The hacker had a developer role for quite some time. Like you can always fault bad security, but if a bank manager takes a bundle of cash from the vault, that is not really a bad-security problem, it's a bad-human problem. Developers are supposed to be trustworthy. (that said, yes I believe they are now requiring some checksum matching; and hopefully not a literal naive "checksum"?)

@frayien Жыл бұрын

@@abamacus2030 I mean, it is like the hacker had to start from bank cashier, went through years (not years in the case of minecraftonline but years in the analogy) to build skill and trust with upper management to finaly be named manager of the bank. I cant blame monecraftonline, no sane mind would see this as a serious possibility...

@Exachad Жыл бұрын

Gradle wasn't hacked. If someone hands you a version of Windows 11 with a virus in it and you don't check to see if it's the original copy, you can't say Microsoft was hacked.

@Breadontoast11 Жыл бұрын

If only my history teacher was as interesting as fit

@Screecher_says_stuff Жыл бұрын

idk if you already know this but fit used to be a teacher

@CoffeeSuccubus Жыл бұрын

Your history teacher is stupid. I'm a better one. History is awesome and you are wrong if you think it's boring

@mashucha Жыл бұрын

@@Screecher_says_stuff There isn't a joke, whats the joke here? He's just making a statement

@ShiroCh_ID Жыл бұрын

i dont know what teacher fit used to be i think it was a math? could be i mixed up with zombie cleo or someone else who hapens to be a math teacher then quit and be a mc youtuber

@lilatunez Жыл бұрын

@@Rafael_VDS buddy, the comment wasnt a joke, it was a statement.

@MichaelRBaron Жыл бұрын

The weakest link is always the wetware. You can do bulletproof security with hardware and software but people are people.

@coldstonecody Жыл бұрын

I would love an update video on this subject later down the line. thanks Fit, literally the only Minecraft channel I watch.

@semaj6308 Жыл бұрын

i was banned from minecraft online permanantly for opening a door

@devin_does_it 11 күн бұрын

How did you do that

@johnpeterson462 Жыл бұрын

I simply cannot imagine how chronicly online one has to be, just to steal some discord credentials and mess around on a minecraft server

@dragonlord1935 Жыл бұрын

This guy literally went undercover for years, developed a fake identity and stabbed people in the back just to mess around on a minecraft server... If they'd spent half that effort IRL they'd probably be a real life secret agent/spy lol

@adamduffy2407 Жыл бұрын

I remember logging on here and meeting a staff and some players, they all gave me gear, staff didnt spawn it im. Kinda sad that this happened to such a nice community.

@LightningfoxxyMC Жыл бұрын

How pathetic do you have to be to do something like that? I would feel bad for the hacker facing LEGAL charges, but knowing what they did, they deserved it. Great video as always FitMC! Edit: I believe some people have misunderstood my comment, I DO NOT feel any sorrow or feel bad for the hacker, what I mean when I say “I would feel bad for the hacker facing legal charges” is that I would feel bad IF they were just a ‘regular’ hacker, just ruining someones win streak in bedwars for example, then faced legal charges FOR the hacking. Thanks for understanding and apologies for the sloppy wording by me :)

@gandalf_thegrey Жыл бұрын

Feel bad for getting caught?

@eriklagergren7124 Жыл бұрын

How boring does your life has to be for someone to do this?

@MarkBiesheuvel Жыл бұрын

I agree that there should not be any legal charges for creating and selling in-game items. However, trying to obtain user credentials from other platforms, such as Discord does definitely deserve some legal consequences.

@Judge_0f_Everything Жыл бұрын

Bro u feel bad for the hacker what kinda degenerate are you lmao 🤡😂😆

@atiedebee1020 Жыл бұрын

@@MarkBiesheuvel selling in game items is against Minecrafts EULA

@ZentaBon Жыл бұрын

Hey I love when you're doing stories about Minecraft drama. It's amazing.

@alexandrdj5923 Жыл бұрын

its rare not to hear you say ''the oldest anarchy server in minecraft'' anyways, love your content.

@andremation Жыл бұрын

I love how even in a non 2B2T video Fit still manages to say "The oldest anarchy server in minecraft" what a chad

@ShiroCh_ID Жыл бұрын

i mean MCOnline and 2b2t is hanf in hand as the oldest servers once was civil and the later were anarchy

@TheOddHog Жыл бұрын

"When I wasn't investigating money laundering in Minecraft, I was at the gym" is the most FitMC sentence I have ever heard

@dragonlord1935 Жыл бұрын

He's called 'FIT' MC for a reason, I guess.

@XxPur3AnarchyxX Жыл бұрын

Dude I've watched so many of your vids and all I can say is thank you for the FFX music in a lot of vids. Gives me big nostalgia and makes me wanna make a new account to platinum it again

@underground_americana Жыл бұрын

To those of you who are coming into the server, please be respectful to our rules. Don't grief, cheat or spam, and enjoy the history :) -NightSteak9, Newport Museum

@cap-xh5hy Жыл бұрын

for real

@Biotear Жыл бұрын

Daaamn they made a whole ass museum for newports?

@Fraccy Жыл бұрын

I'm gonna go in there and grief the sauna >:)

@FuzbolYoutube Жыл бұрын

smh another invasion

@kirbstagoontheaxolotl Жыл бұрын

quick question, was the town Newport on MinecraftOnline named after the Melbourne suburb of Newport? Asking as it seems like it can't be a coincidence

@jonesbrothers3750 Жыл бұрын

One of the only KZfaqrs that I can actually watch the whole video without getting bored. Yo stories interesting ash🤣

@snaky1580 Жыл бұрын

ayo i am the leader of newport that you mentioned - yes the guy who hacked was a city staff but any cheated builds were removed. the map slider used the wrong date it’s actually supposed to be dec 2021

@selimbits Жыл бұрын

shut up who cares

@snaky1580 Жыл бұрын

@@selimbits salty u got banned

@ChloeVFX Жыл бұрын

Helo Snaky

@Unkle_Genny Жыл бұрын

@@snaky1580 lmfao

@ayydhd5328 Жыл бұрын

Hey snakyman long time no see! Pretty funny coincidence that he also showed Benstad and my village two times in the video. Like almost a million people have seen my builds now which I think is pretty cool xD

@bgp1211 Жыл бұрын

"What're you in for?" "I committed a crime to get items on a minecraft server." *scoots to the other side of the bench*

@theperfectbotsteve4916 Жыл бұрын

jumps though metal bared window and falls 40ft into the asphalt*

@bgp1211 Жыл бұрын

@@theperfectbotsteve4916 lol

@Cannotdophantom Жыл бұрын

This is it.. the world has gone to hell, no server is safe anymore (Edit: imagine the authorities hearing about a hack that could cause a national security threat only for it to be used to grief a server on a block game)

@Cannotdophantom Жыл бұрын

@@DontReadMyProfilePicture.6lol another bot s

@pewdiepiezzzzz124 Жыл бұрын

@Don't Read My Profile Picture i won't

@Cannotdophantom Жыл бұрын

@@pewdiepiezzzzz124lol we got a chad here

@Cannotdophantom Жыл бұрын

@@shooterboilmao

@zacharywellman4178 Жыл бұрын

War thunder in a nutshell

@nanite6263 Жыл бұрын

Weirdly enough, I imagined this happening a couple days ago.

@stoneystudios9556 Жыл бұрын

Just recently started watching your video's few months back, it's actually inspired me to play it again

@AyoMainReal Жыл бұрын

heii @FitMC have u ever seen The Biggest Graveyard on 2b2t? i dare you to find it! if you find it, keep the coor and i'll make one special for you😉dont destroy it please :) clue : not far from spawn point but far enough to get resources

@Choco.Cornet.20 Жыл бұрын

@deron2179 Жыл бұрын

@Arlick Жыл бұрын

Uppp

@Arlick Жыл бұрын

Pppp

@malikkanz7861 Жыл бұрын

@chaoticdusk7076 Жыл бұрын

What I appreciate here is the fact that the server actually came out and disclosed the issue that was going on and where things when wrong on their part. So big companies can't event get themselves to admit when they've had a security breach.

@mr.f004gaming8 Жыл бұрын

the transition from the video to the sponsorship is godly

@vortexmars843 Жыл бұрын

Was that Yakuza music I was hearing during this video? FitMC just gained a ton of kudos from me.

@jamesscalzo3033 Жыл бұрын

Loved the video @FitMC! Can't wait for the next video man! This Hacker was definitely in it for the Long Con, Hiding in plain sight for 13 years unnoticed! Have Europol caught the Perp yet or is He/She still on the loose? Either way, the Damage is done, just like on 2B2T with the NOCOM incident, Players on Minecraft Online are going to be dropping like a Rock because they don't feel safe now that a Backdoor has been Found and dealt with. Day ??? of asking about the Southern Canal Authority and the Obsidi-given.

@Cheddar7 Жыл бұрын

It always makes me giggle how cool he try’s to make himself look in the raycon ads

@SemiHypercube Жыл бұрын

It feels so weird hearing him say "oldest server in Minecraft" without "anarchy"

@KnightYoshi Жыл бұрын

It's subtle, but that FFX Cloister of Trials track :o

@withersanimation4548 Жыл бұрын

Fit be like “when I wasn’t committing war crimes on 2b2t and real life, I was in the gym.”

@MercurySteel Жыл бұрын

The server is so old every building in there is like a historical artifact.

@angzarrpsyco Жыл бұрын

I was freaking out cause I thought the title said "Oldest Anarchy Server" and I was terrified of what could have happened

@jlf_ Жыл бұрын

I love the random, not connected stock footage in the beginning.

@drpepper694 Жыл бұрын

I just wanna let you know, your videos make me very excited to play minecraft and give me lots of joy

@maniacobra8103 Жыл бұрын

"No video game in existence is worth criminal charges" Nice quote

@eriklagergren7124 Жыл бұрын

Say that to Billie Mitchel and Todd Howard. They should be behind bars for life

@razi_man Жыл бұрын

Maybe,, but this is Minecraft and anything can happen.

@parchmentengineer8169 Жыл бұрын

Haven't finished the video yet, but I just want to say thank you for not saying the hacker's name. There's too much glorification of these people who do stuff like this, so keeping them anonymous and not broadcasting their identity is the best way to get back at them and deprive them of the fame they were likely seeking from this in some way.

@aethergaming7934 Жыл бұрын

Your effort and edits are top!

@crimsonking4031 Жыл бұрын

Dank content sir fit, turns out you can cover any “oldest MC server” and it will be quality….. still waiting on that youngest Minecraft democracy server video tho. That’s what will really test your limits of content creation.

@issam76 Жыл бұрын

ad ends in 2:19

@MoreSettledWindow98 Жыл бұрын

9:34 This message caught me off guard

@DopLopWasTaken Жыл бұрын

7:10 fit, that's crazy, when I played mco at least 2 years ago, I walked around that town and I say that when I was playing mco I found some builds and towns that have cow spawners, pig spawners and sheep spawners and some weird chests , chests that have a strange hitbox for example there are chests that are 3 and are united but their hitbox does not fit with the rendering of the chest it is too rare If you want to see it for your own eyes, enter mco and write /warp jimmy ville and it will take you to the village where you have the spawners, chests and of course my house that was named as odlop's house btw my account was deleted from the game and unfortunately I can not use or enter the server again

@1updays71 Жыл бұрын

Watching your videos and listening To the video with my raycons the best mix ever!

@Convue Жыл бұрын

Who knew that a block game can sent to the cyber security team or authoritys Every year minecraft just keeps getting crazier and crazier, bet you theres gonna be another hacked server that fitmc will talk about.

@ShiroCh_ID Жыл бұрын

i mean most java vunerabilities were almost all discovered by minecraft, if not mojang most of them were either 2b2t playerbase(a.k.a hack client maker) or black hat who addicted to mc for some reason and minecraft forge,fabric and quilt and many less known modloaders modders who actively uses devtools such as gradle,git,maven,and log4j to name a few(not a dev but i knew my friend wo actively use that to mods minecraft)

@Convue Жыл бұрын

@@ShiroCh_ID Well yeah but they wont stop any time soon by the looks of it

@Clyde7585 Жыл бұрын

"State of the art Security" The hackers meanwhile:

@chrissametrinequartz9389 Жыл бұрын

Even if they have "State of the art Security" there will always be a way to hack into it via humans or social engineering (this goes for most not if everything)

@znxster Жыл бұрын

I respect the response of the teams involved.

@cubicinfinity2 Жыл бұрын

Me: Oh, the ad this time will probably be related to online security. Fit: My RAYCONS.

@woodenhoe Жыл бұрын

Humans are still the weakest link in cybersecurity.

@sacredflame7424 Жыл бұрын

Fit Mc went 14 seconds without saying "oldest anarchy server"

@samwhittaker4977 Жыл бұрын

I really love 2B2T. I need to explore it! Thank you for showing me what this server is like!

@DeepfriedChips Жыл бұрын

Tbh, kinda funny seeing how they implemented a Javascript vm and like a crap ton of method wrappers

@unterschwanz Жыл бұрын

I sill can't believe me and Selimbits (one of the hackers) worked on a town right on top of Selim's statue in Newport (town got removed and after hack got revealed the statue went down too) Caesena did look kinda sketchy to me ngl. I had to watch the t*tville clip in IconPippi's video to clarify that wasn't me in the screenshot lol

@Unkle_Genny Жыл бұрын

IconPippi…. That’s a name I haven’t heard in a while

@unterschwanz Жыл бұрын

@@Unkle_Genny ikr its crazy

@Pelichus Жыл бұрын

That raycon part got me thinking He shaved?!

@techistek Жыл бұрын

1:28 I rock climb too. I look up to you fit Fit❤

@donaldbothe3518 Жыл бұрын

5:35 ONE OF MY BUILDS IS IN A FIT MC VIDEO!!!! i built one of the skyscrapers, I was one of the first three buildings at newport. Never saw it grow as I got busy then my hard drive died, but it is still fun to see.

@Ned-xf6gh 10 ай бұрын

What’s your ingame username?

@7harv Жыл бұрын

Fun fact : Minecraft online is not the oldest, technically the oldest server with the same map is Novylen!

@gandalf_thegrey Жыл бұрын

As a Novylen player: Yeah kinda. But who cares.

@Judge_0f_Everything Жыл бұрын

@@gandalf_thegrey who asked

@umbers28 Жыл бұрын

@@Judge_0f_Everything you must be under the age of 13 if you have to say "who asked"

@7harv Жыл бұрын

@@gandalf_thegrey I'm also a Novylen player, and I was just stating a fact.

@My_Old_YT_Account Жыл бұрын

Yeah but Novylen is only older due to the map being used in solo before, MinecraftOnline started as a server before Novylen

@scarclaw72 Жыл бұрын

Never expected one of my lunar log blogs to end up in a video this successful. Holy shit.

@mastermenthe Жыл бұрын

Timestamp of Lunar log blog?

@scarclaw72 Жыл бұрын

@@mastermenthe 5:22

@rtzgf67games7 Жыл бұрын

I mean if the hacker didn't try to get discord tokens, I don't think they could do anything to him. If he was on the dev team, that means he already had access to the server and the emails probably.

@Rivr_Shen Жыл бұрын

I got banned from this server years ago. Very surprised to see it pop back up like this

@AccountInactive Жыл бұрын

Hope my 2011 base is ok :c

@SolitarySpade_Davon Жыл бұрын

I was expecting 2b2t to be the aforementioned hacked server, so i almost had a heart attack.

@youtubehandlessuck Жыл бұрын

Honestly I kinda like this, videos about other old minecraft servers is welcome tbh as long as the topic is good

@ItzRetz Жыл бұрын

I played on that server once, I put down a crafting table in a griefed house, used it to craft a pickaxe, broke it, and then an Admin TP'd to me and said I griefed the house by putting the crafting table down in it, and got banned. Great server would highly recommend.

@razi_man Жыл бұрын

Same thing happened to me, except I only stared at a grieved build. That was it, staring is now a crime, I am the criminal responsible for *checks note* staring.

@brandon9172 Жыл бұрын

Sounds fake. From what I've seen staff are usually friendly and quite forgiving. You did break a rule though, you're not allowed to place anything in other peoples builds.

@ballzhimersalert Жыл бұрын

What is your in game name?

@ItzRetz Жыл бұрын

@@ballzhimersalert This was like 7 or 8 years ago now, so I think it may have been either SgtSpacePotato or RekItRetz

@My_Old_YT_Account Жыл бұрын

@@razi_man definitely lying there

@frisout Жыл бұрын

umm I'm the builder of the mountain you see above Newport in your screenshots at 5:40 and I can assure you I did NOT build it in 1 month time lol. I been working on it for over a year now and it's still not finished x.x GOD do I wish I built it in just a month pretty sure you mean 'december 2021' instead of 'december 2022' only 1 tower got illegally built using this hack in Newport and admins already removed it like 2 weeks ago

@ChloeVFX Жыл бұрын

Hiii Frisoutt :o

@_gmmaann_6511 Жыл бұрын

I just watched Sals video about the server. This is sad. So much history

@eperks6 Жыл бұрын

Damn, backdooring a important MC server, is not what people would think would get you in legal trouble. Kudos to MC online for contacting Europol to help them catch the hacker.

@skysmashify_ Жыл бұрын

"Stay alive out there" becoming more and more of a necessary and relevant phrase at this point lol

@vegmonster Жыл бұрын

I kind of want Minecraft 2b2t to update to Minecraft 1.19 but at the same time it would mean that you could hat report and that would be very bad for the server and also to many chunks are already loaded in The other thing is that it would change the game to much, because it’s many many years of updates which could make the game to crazy and ruin a lot of things already happening in 2b2t

@gandalf_thegrey Жыл бұрын

It wouldn't be bad for the server because on the same day the update dropped the community has already written a java plugin that renders the use of the report button useless because - in layman's terms - the server withholds the direct communication to Mojang.

@blinking_dodo Жыл бұрын

Don't worry about the report button. It can be disabled with just a simple plug-in... Then anything you type will appear as a server message, and thus not reportable.

@freevipservers Жыл бұрын

1.18 would be good because you get all of the big things without the cringe ass chat report shit

@kattny Жыл бұрын

@@vermski why does this comment sound ai generated

@VeryPeeved Жыл бұрын

@@freevipservers or you could just update to 1.19 and not bother with 1.19.1, which is the version that adds it.

@kinghrath Жыл бұрын

**me sweating, trying to remember if I've ever played on this server**

@NUGG1ES Жыл бұрын

i actually used to play this server so it took me by surprise that they got hacked

@santiagobalsamo1808 Жыл бұрын

sheeesh fit bringing more content with good quality damn

@kaydenthat8222 Жыл бұрын

This is what happens when head developer doesn't do code review before allowing it to be uploaded to the server

@razi_man Жыл бұрын

They DID review the code, I assume they probably didn't think of running it on a private server since they ran it offline.

@kaydenthat8222 Жыл бұрын

@@razi_man running it in a vm doesn't count as "reviewing" a code, actually reading what they changed is reviewing

@Fiercesoulking Жыл бұрын

Actually from what I understood it wasn't in the code directly basically the build command was executed later . Java build tools have the nasty property to be able to load additional code or heavily transform code during build because they are for JEE environment

@kaydenthat8222 Жыл бұрын

@@Fiercesoulking I think it’s hidden inside the build tool, not build command (if it is build command, which is usually ran by head dev, then the story would be different). The build tool they uses, Gradle, is open source on GitHub, so the hacker could simply get the source code, add the back door, then build a “Custom Gradle”, it would be difficult to detect, but any developer should know to not use custom built build tool, especially uploaded by a new developer. They probably trusted their dev team too much…

@jeremybitar9831 Жыл бұрын

@@Fiercesoulking Updating the gradle JAR still shows up clearly as a changed file and will thus be part of the review. That should raise some questions if doing so wasn't part of the agreed changes

@SoniXperias Жыл бұрын

1:46 I dropped my raycon in Dr Pepper... It's been over a week and I'm scared to turn it on, I was half asleep, my raycon was under me while I was lying on bed, I grabbed my Dr Pepper, had a sip, put the lid down to get the raycon from under me, thought my raycon was my lid and dropped it straight in. I laughed at it for like 2 seconds until I realised what I actually did

@MarkoBrainz Жыл бұрын

Funny how this happened right after SalC1's video about minecraft online talking about how the staff is so bad there

@cosmiccolossus668 Жыл бұрын

THAT SEGWAY TO YOUR SPONSOR WAS SO GOOD

@RetracEllgac Жыл бұрын

2b2t needs a national peace day on the server I'd love to see how much chaos people would cause to rebel against the holiday 🤣

@metalspoon69 Жыл бұрын

This really is super advanced for minecraft server hack. In terms of methdology it draws parallels to the solarwinds hack in 2020 (probably the worst federal data breach in US history), the uber breach (which used social engineering to gain access to pretty much everything) and a lesser known incident (unless you're a frontend dev like me :)) which involved node-ipc (short version: package used by a lot of people, dev injected a malware dependency in it that deleted files on russian/belarussian computers).

@Randodude17 Жыл бұрын

man yk thats really a new things if the guys from a lot of companies never heard or seen this

@kracho2877 Жыл бұрын

5:18 "New Bielefeld" hahaha

@figloalds Жыл бұрын

They could have kept this for way longer if they kept it a secret. They literally announced to the world "here, I'm hacking".

@aarongamerph Жыл бұрын

yeah the hacker was lacking common sense..

@theperfectbotsteve4916 Жыл бұрын

they're not hacking to make the game easier they just want to piss people off

@figloalds Жыл бұрын

@@theperfectbotsteve4916 they were making money from it, they could have continued to make money for longer if they weren't so explicit

@theperfectbotsteve4916 Жыл бұрын

@@figloalds that's a point I didn't consider

@ZeRandomizor Жыл бұрын

@@figloalds I can see the logic they're coming from. "I was born, and its gonna be EVERYONE'S DAMNED PROBLEM"

@jackfishthe6th373 Жыл бұрын

Always remember that weakest link in any form of security systems (cybersecurity or physical security) is YOURSELF! Humans afflicted by social engineering is one of the top most common causes for security breaches. So check yourself before you wreck yourself, otherwise you will learn this lesson the hard way.

@yacro1055 Жыл бұрын

lmao, im a MCO player and some random dude joined and gave me a load of diamond blocks. had no clue this was happening

@grillygrilly Жыл бұрын

I'm surprised it never got hacked earlier, knowing how the playerbase is.

@cherubin7th Жыл бұрын

Lesson is: Security is an illusion

@Granolora Жыл бұрын

An example of this is that people used to say that there was no such thing as a mac virus, and apple even encouraged this. Then 10s of thousands of macs got hacked.

@shockd6235 Жыл бұрын

Everything can be broken there isn't an unbreakable system

@razi_man Жыл бұрын

Not really, though security is waaay too hyped by some people.

@shockd6235 Жыл бұрын

@@razi_man every secyrity can be broken