The Scariest Week in Minecraft History
Рет қаралды 2,168,713
2 жыл бұрынToday we'll discuss The Scariest Week in Minecraft's History and how the log4j vulnerability (log4shell) was weaponized on 2b2t and other Minecraft servers, as well as the entire internet.
This java hack is not going away anytime soon.
My Twitter: FitMC
My Instagram: fitmcsippycup
HOW TO STAY SAFE:
1. Update Java to the most recent version
2. Update Minecraft to the most recent version
3. Re-install 3rd party versions of Minecraft ONLY if you know they are safe.
4. Servers can still be affected, so only join servers you can trust.
More info: www.minecraft.net/en-us/artic...
Music: FFXV
Additional 2b2t Footage/Information/Renders:
Rebane (Footage/Information) - • This chat message hack...
Redstoner (Footage/Information) - • The 2b2t Log4J trollin...
0x22 (Information)
leijurv (Information)
xcc2 (Thumbnail Render)
If you enjoyed learning about The Scariest Week in Minecraft History, I would appreciate if you would consider hitting that like and subscribe button!
Hopefully the damage from the log4j vulnerability (log4shell) will not be too extreme.
2b2t is currently awaiting the 1.18/1.19 Caves & Cliffs Minecraft update. Very exciting times!
@AntVenom 2 жыл бұрын
0x22 is a real one.
@stevebrine9657 2 жыл бұрын
Hi first reply
@sulphurous2656 2 жыл бұрын
I didn't expect such deeds coming out of a cheat client programmer, that's for sure. Pretty good.
@starkbeatle4516 2 жыл бұрын
yeh man is out saving so good on him
@jwcfive7999 2 жыл бұрын
For real, dude could’ve done tons of damage but decided to do good. You can never be too careful though, he might be boosting his reputation for the future…
@AndreUrzua1 2 жыл бұрын
The definition of a white hat hacker
@cubicinfinity2 2 жыл бұрын
Hacking someone's computer to patch their game from the vulnerability that gave you access to their computer is on another level.
@tisjstme5315 2 жыл бұрын
...but also a good thing in the MC community to know there are good hackers out there.
@MattBasicG 2 жыл бұрын
@@tisjstme5315 thank god there are people who use their coding for good
@Alex-tx2dh 2 жыл бұрын
Some Jim Browning type moves
@madcroc111 2 жыл бұрын
It's called white hats. Similar thing happened on Ethereum crypto in 2017. They hacked 180million dollars worth of coins since so many wallets were vulnerable and then returned it all later. Malicious hackers did steal 30million worth though...
@Internazionale2010 2 жыл бұрын
He deserves a virtual knighthood
@UndeadPlayer1 2 жыл бұрын
Imagine just getting hacked and your like "oh frick, I'm probably installing a virus now", and then the hacker installs virus protection instead. 0x22 is truly a legend.
@CultivatingCountryLife 2 жыл бұрын
I understand nothing about computers so I'd probably of deleted thinking it's got something bad hidden in it
@litterbox0192 2 жыл бұрын
I used the virus to destroy the virus
@UndeadPlayer1 2 жыл бұрын
@@litterbox0192 yes
@hurtjriddle804 Жыл бұрын
v i r u s
@UndeadPlayer1 Жыл бұрын
@@hurtjriddle804 (how did you find me axolotl man)
@WanderingGarden 2 жыл бұрын
Every time we get these videos I'm just like "How is Redstoner involved this time?"
@theexchipmunk 2 жыл бұрын
But this time he committed an actual crime that can get you into prison in a lot of countries.
@madkills10 2 жыл бұрын
it was funny how he thought taking their accounts was ok yet anything more is "too far"
@joshuawright4198 2 жыл бұрын
@@madkills10 I mean It's all wrong but I do see the difference between stealing someone's minecraft account qnd stealing their credit card information
@marcovillela7438 2 жыл бұрын
Bro that guy is the Don Quixote Doflamingo of minecraft
@Aresie271 2 жыл бұрын
@@theexchipmunk hey man at least all he did was destroy Minecraft shops, still fucked up that he hacked at all but if he really wanted to he could’ve hacked all of our banks and shit
@drcraby356 2 жыл бұрын
0x22 may be a Nerds Inc. member and a known hacker, but what he did is legendary. Litterally hacking peoples PC just to install a patch before actually malicious hackers got to them
@pyro2500 2 жыл бұрын
Damn that’s crazy
@tisjstme5315 2 жыл бұрын
That's being a true hero.
@daniilfilms 2 жыл бұрын
He fixed the exploit with the exploit
@youtubevideoswatching3866 2 жыл бұрын
He deserves a award. He is a literal hero, like, we need more people like him
@Gianski150 2 жыл бұрын
We never know his true motives but whatever he did is heroic.
@alikreed1154 2 жыл бұрын
Those people who tried to keep others safe are heros
@Zycrian 2 жыл бұрын
Im worried about my hypixel skyblock now. since im always playing in version 1.8.9
@TheAmazingRaptor 2 жыл бұрын
@@Zycrian update
@campbat5712 2 жыл бұрын
yeah realy
@AshPikachu9 2 жыл бұрын
@@TheAmazingRaptor one does not simply update versions while playing hypixel
@Jonah16835 2 жыл бұрын
Ikr
@svijj_ 2 жыл бұрын
As a person that's loner who only plays singleplayer, this went over my radar completely. At least I wasn't hacked I guess
@LolliFN 2 жыл бұрын
Its not just minecraft though but also steam, spotify and other huge corperations
@Villager6883 2 жыл бұрын
@@LolliFN lol bedrock Edition not involved
@Villager6883 2 жыл бұрын
@@LolliFN because bedrock is not programmed as Java it’s programmed to be C++
@meticakolli1237 2 жыл бұрын
@@Villager6883 the bedrock players are laughing rn
@Villager6883 2 жыл бұрын
@@meticakolli1237 yeah
@alipali 2 жыл бұрын
0x22 is the literal definition of "chaotic good" - doing greater good in a totally unorthodox way. Props to them.
@videogamplayer5846 2 жыл бұрын
Everyone always talks about how much fit says "the oldest anarchy server in Minecraft" but nobody talks about how much he says "lets get started"
@AlexHernandez-ar9ht 2 жыл бұрын
Facts
@coffeetarded 2 жыл бұрын
THE O
@anawesomepet 2 жыл бұрын
Ah, but that’s not HIS catchphrase. It needs to be… unique.
@horizon4669 2 жыл бұрын
the longest anarchy server
@Chainshot91 2 жыл бұрын
Lets get started talking about it then
@ItzOwo 2 жыл бұрын
Imagine getting hacked, to realise the hacker is helping you. What a legend man!
@cmdpro4187 2 жыл бұрын
AAAA- Oh ok
@Nahuelwg 2 жыл бұрын
True gigachad
@redermac5667 2 жыл бұрын
If I became a hacker, I would be a good hacker that would help people
@cumjesus 2 жыл бұрын
@@redermac5667 yes
@MrSeedkey 2 жыл бұрын
And then the hacker getting arrested for hacking anyway
@PBStriker101 2 жыл бұрын
0x22 is really an interesting character. Kind of like an anti-hero. He is someone that takes part on very interesting hacking elements and actively works for whoever he wishes. But actually has some kind of work ethic and pulls power move to even protect people from genuinely evil people. To be honest? I think he is the most gifted programmer i ever heard of. He is so passionate of his work and talent that he has developed a new appreciation for the digital world. To the point of having restraint to not do an actual harm to other people.
@hotelmoscow7805 Жыл бұрын
This guy is the main character
@saiarjunk4371 2 жыл бұрын
As a cybersecurity guy this was devastating and a little fun to try and discover workarounds before the bad guys so as to patch them.
@SStupendous 2 жыл бұрын
First Roblox now this, feels sus
@mxstee 2 жыл бұрын
Is fortnite safe and I haven’t played Minecraft In 2 months u think I’ll be fine
@SStupendous 2 жыл бұрын
@@mxstee Why would Fortnite not be safe, only a true failure in life would dream of hacking that
@mxstee 2 жыл бұрын
@@SStupendous true i just didnt know if it had java code in it
@TempestaDominus 2 жыл бұрын
@@mxstee I think Fortnite should be safe tbh. Though despite everything, I think the company probably already patched regardless.
@haxalicious 2 жыл бұрын
The other reason 2b2t was shut down was because the exploit ALSO worked server-side. Meaning anyone could backdoor the server with it. Not just the Minecraft server instance, but the actual dedicated box it runs on. They could crash it, delete the world data, and who knows what else. If the backups are on the same server, they could even take it down permanently.
@AxxLAfriku 2 жыл бұрын
HELP MY!!! My muscles are too big! I am a big tall man and my muscles are even BIGGER! I use them to get views but they HURT so much!!! Because they are heavy. Do you have any advice, dear hay
@Eroil 2 жыл бұрын
I wonder if people did that while the workarounds still worked and now there are backdoors we just don't know about... If I understand what you're saying correctly, redstoner could've just as easily broken into the server itself if he tried
@WinterSWW 2 жыл бұрын
@@AxxLAfriku thats the wierdest comment and if it hurts then stop getting ripped get fat a bit or something
@WinterSWW 2 жыл бұрын
For a second i thought i made a comment minutes ago and i forgot it somehow
@kyuzyu4702 2 жыл бұрын
Yup they can get access to whole thing but i dont think anyone tried to
@justasleepysnowflake 2 жыл бұрын
That man who "hacked" people to save them is a fricking legend, mad respect for that guy
@ronaldwoodworker1192 2 жыл бұрын
he did all that just to be referred to as "that man" 💀
@Spookamss 2 жыл бұрын
ah yes, hacking people to save them from hackers is tight
@heathjake25 2 жыл бұрын
@@Spookamss hacking to unhack.
@bluedoge9205 2 жыл бұрын
He used the hacks to destroy the hacks
@kevinzhao9134 2 жыл бұрын
So... if hack = H, H = -H?
@Cheesecake770 2 жыл бұрын
Massive Respect for ox22 and Rebane for being such a good homie 👌
@last9up 2 жыл бұрын
Dude I started watching your videos since 2b2t started blowing up and saw your channel grow. I'm so freaking glad you are doing so well. Haven't had time to watch now, but happy to see you succeed.
@iamthesenate6246 2 жыл бұрын
Fun fact, this was also in some Nasa rovers so technically you could have hacked into a space rover if you got there before nasa did
@tellmeagoodname8864 2 жыл бұрын
Lol
@pittyconor2489 2 жыл бұрын
actually no. but sounds awesome
@squid_cake 2 жыл бұрын
@@pittyconor2489 are you sure that's not real?
@c.o.y9418 2 жыл бұрын
Wait Fr?
@leopoldinedeisl7313 2 жыл бұрын
WTF
@CeruleanDerpo 2 жыл бұрын
When Herobrine becomes less scary than some 2b2t players
@MrCommentGod 2 жыл бұрын
-Intense moment-
@tisjstme5315 2 жыл бұрын
Now THAT is really scary.
@optimx314 2 жыл бұрын
this account has been ratted by popbob
@agoogleuser2507 2 жыл бұрын
Bedrock players go brrr
@Mr.D.. 2 жыл бұрын
That’s terrifying I am gonna go back to fortnight
@Chyaman11 2 жыл бұрын
I thought this title was gonna be clickbait but it’s damn near an understatement
@devonbennett6559 2 жыл бұрын
The scariest week in internet history
@Apparently_I_am_everywhere 2 жыл бұрын
0x22 and Rebane are both legends. Without them, who knows how many more victims there could have been to this hack. They need some sort of recognition or something, because they're noble as hell.
@angelicalgaming9297 2 жыл бұрын
I say we all salute 0x22 for his noble intentions. It just goes to show that not everyone is heartless, even hackers. o7
@wyndmill 2 жыл бұрын
Imagine 0x22 accidently starts a trend where people hack everyone who play minecraft, but then optimizes their computer so everything runs like nasa computers xD
@EndingSession 2 жыл бұрын
0x22 will go down in history as a minecraft hero
@krac_tac117waite7 2 жыл бұрын
o7
@mistqr 2 жыл бұрын
@@wyndmill tbf I kinda want that to happen
@AviaForce 2 жыл бұрын
o7.
@ShortHax 2 жыл бұрын
The problem: Apache Log4j The solution: A patchy Log4j
@Saturnius 2 жыл бұрын
Nice.
@amek6288 2 жыл бұрын
e
@horizon4669 2 жыл бұрын
early
@0eggs- 2 жыл бұрын
lol
@PrismaWho 2 жыл бұрын
Nice one
@jamesscalzo3033 Жыл бұрын
Loved the video @FitMC! Can't wait for the next video man! Mad Respect to Ox22 for at least trying to ensure his fellow Minecrafter's Internet Safety. This might really explain all the Changes Minecraft was making with all of the "Security Issues" with things like Switching from Windows Accounts to Java ones. I hope Redstoner was told to "Pay for Damages" to his competitors, but that's just wishful thinking as its an Anarchy Server we're talking about here.
@Qunia 2 жыл бұрын
This entire exploit is like a level 10 containment breach. The fact that script kiddies can just straight up control your PC is horrible.
@WeatherWX 2 жыл бұрын
If level 10 is world ending (the one below reality ending) your correct, anything Log4J touches is exploitable IIRC.
@rubixtheslime 2 жыл бұрын
Well you're not wrong, NIST (the organization that assigned it the name CVE-2021-44228) gave it a score of 10.0/10.
@TreyG425 2 жыл бұрын
POV: you don’t play on pc 😶
@ADMICKEY 2 жыл бұрын
@@TreyG425 yes
@amahlaka 2 жыл бұрын
Coming from someone who has not slept properly for the past 2 weeks due to this exact vulnerability, it absolutely is.
@GripGhoul 2 жыл бұрын
The scariest part is *this exploit was here for like 10 years*
@CairoFaustine 2 жыл бұрын
Anybody could of been using this in secret the whole time before it was discovered, its scary
@liamholcroft7212 2 жыл бұрын
@@CairoFaustine perhaps some glowies?
@theairaccumulator7144 2 жыл бұрын
This is really scary. A hacker could have found this long ago just by reading the documentation carefully.
@galacticknight55544 2 жыл бұрын
@@CairoFaustine Not just that, but who knows how many other exploits there are that hackers might still be using secretly?
@petman515 2 жыл бұрын
@@liamholcroft7212 I know my local police have a habit of illegaly spying on people and from some of the things I've seen I'm pretty sure at least some of it is based on java exploits.
@cleverlesstv7724 2 жыл бұрын
Fit, we need a video about Hausemaster and their history on 2b2t. Who is this mythical figure? Has the identify changed throughout the years? I feel it could be an interesting video.
@CocoaPimper 2 жыл бұрын
I am binge watching all of your videos. Redstoner comes up so frequenlty. Unbelievable this guy. :D
@ed-uh9sh 2 жыл бұрын
i still can’t get over how easy it was to use this exploit
@arcaneTempest1 2 жыл бұрын
you're phrasing that like you've used it
@coconutman7797 2 жыл бұрын
@@arcaneTempest1 lmao
@ghostymytoasty7007 2 жыл бұрын
@@arcaneTempest1 it's really not that hard, I wrote a simple script to eject your disk tray. Getting past all the various 'patching' people have done is much harder. But the initial exploit really is as easy as "hi :) how about you run this code I am hosting". That is what an RCE is. The fact it can be so easily done is astounding.
@ElectricKitten 2 жыл бұрын
@@arcaneTempest1 You dont say.
@Saturnius 2 жыл бұрын
@@arcaneTempest1 I mean, he's not denying it...
@oposdeo 2 жыл бұрын
I work at a large tech company and every single developer at the company was working late into the night the day this was disclosed, and some over the weekend, to get all of our services and hosts patched. Quite the stressful event.
@davidarvingumazon5024 2 жыл бұрын
Log4j: Guess now we're uprising!
@1ben99 2 жыл бұрын
Same here brother
@wertiaaudit5746 2 жыл бұрын
You the janitor?
@serwalkerofthekeynes8761 2 жыл бұрын
This reminds of a story from a while back,not MC related but this dude was a pro hacker. He knew he was breaking the law, but he used to hack into people's personal devices and scan for any malicious or fraudulent programmes, patch them out, and then contact the victim and let them know what he'd done and how to prevent it in the future. We need more people like that 😅
@geldmoney 2 жыл бұрын
Man you're a really interesting youtuber.. subscribed!
@MC2738 2 жыл бұрын
As a sysadmin, this week has been rough. I immediately took all servers offline and forced them to check updates, and of course, attempt to patch the exploit. Also, good on Mojang for pulling an all-nighter to fix this exploit.
@N0D0hNuts 2 жыл бұрын
My main focus was also to get an offline backup of all my servers. We updated everything but I don't think we were affected since our servers are basically a share, an sql server and a AD server. I know that the part on top (vmware) is affected but this is up to the cloud server company to update
@AndrewBrownK 2 жыл бұрын
profile pic checks out
@staydying 2 жыл бұрын
what is your pfp dawg
@MC2738 2 жыл бұрын
@@staydying lmao it's my waifu Amaha miu
@gogofuntime_yt 2 жыл бұрын
Hey fancy seeing you here
@L30GH05TDUD3 2 жыл бұрын
0x22 and Rebane should be recognized by Mojang and rewarded by their actions. Because their attempts to warn the community and also 0x22 trying patch the exploit itself is a pretty legendary and bold thing to do. My greatest respect to both and hopefully you’ll get rewarded for this someday
@maplepancake_5033 2 жыл бұрын
they should make them the ppl who code the game
@Alexander-sr3ng 2 жыл бұрын
The are legnds now
@anygamehere8895 2 жыл бұрын
True
@deepbromusic 2 жыл бұрын
I wish happy New year to you...Can 🙂I get 10k subscribers at the end of this year ... love ❤
@ovo5037 2 жыл бұрын
they better get a custom cape
@paganplays8431 2 жыл бұрын
When i find FitMC makes a post, i i have to open the page pause video, and make a cup of coffee, cause its always that good!
@christiansilk1455 2 жыл бұрын
Never in history of man will you ever see FitMC without his legendary stone slab fireplace
@MichaelMoore99 2 жыл бұрын
I really love 0x22's whole ethos. It's definitely a 2b2t thing to do to use the exploit to patch the exploit. Very much like Thanos using the stones to destroy the stones.
@kinko4786 2 жыл бұрын
Yeah, great comparison.
@berkhero3006 2 жыл бұрын
I cant belive disney copied 0x22
@descai10 2 жыл бұрын
spoilers smh
@MichaelMoore99 2 жыл бұрын
@@descai10 How am I supposed to know it's spoilers? I haven't seen the movie. ;-)
@Alexander-sr3ng 2 жыл бұрын
He is the chosen one
@Nicklander 2 жыл бұрын
Imagine you find an exploit to gain full control over everyone’s computer and all you do with it is cancel the ItemShops of your biggest Minecraft enemies.
@donutcraft3400 2 жыл бұрын
ikr
@pooperdooper3576 2 жыл бұрын
@Nerdy Cuber he shouldn't be selling minecraft items for irl money though, it's kinda weird, and doesn't it go against tos?
@generalgeorge9464 2 жыл бұрын
capitalism
@ur_dedmy 2 жыл бұрын
@@generalgeorge9464 yes
@superplushyvids 2 жыл бұрын
@@pooperdooper3576 its an infamous anarchy server, people there dont care about tos lol
@jere1124 Ай бұрын
I was aware of this at the time but when this happened i was only playing bedrock and didnt have java so i wasnt affected but after hearing what was going on i got a little scared
@cosmonaut9999 Жыл бұрын
I recognize that music! Nice video, man.
@aerohydreigon1101 2 жыл бұрын
Let's just take a moment to respect 0x22 and Rebane They could've easily stolen Discord messages, Minecraft user data, etc But they didn't, and they even went a step further
@fefek1 2 жыл бұрын
True but, who the hell would want to read a random guy's discord messages?
@kenshinkoman2710 2 жыл бұрын
@@fefek1 Truuuu
@ghostlydude6478 2 жыл бұрын
@@fefek1 probably to see if they did anything, ‘questionable,’ like discord mods and kids sort of stuff or just ammunition to blackmail/canceling.
@magicalkillerz9130 2 жыл бұрын
@@fefek1 blackmail
@CloudiStuff 2 жыл бұрын
If the random person shared private info via dms, they could use that data maliciously
@peegion4742 2 жыл бұрын
My dad was actually notified and had a emergency meeting when this happened (he works in cyber risk), he told me it was about minecraft, I though that it was pretty weird then, but forgot about it in an instant. Now that I see how dangerous this actually was I feel really dumb.
@CrypticRite 2 жыл бұрын
It was way more widespread then minecraft. The last week, nearly all big cyber based companies had an absolute crazy week scrambling to make sure all abilities to utilize this was patched. Amazon, Google, hell, even nasa and nsa had to take part in their own security checks.
@peegion4742 2 жыл бұрын
@@CrypticRite Gosh damn now I feel even more stupid for not caring. I need to be more careful...
@Crystalelements182 2 жыл бұрын
@@CrypticRite seriously!? Wow! 🤯
@LazyLoonz 2 жыл бұрын
@@CrypticRite his dad might've said don't play minecraft as theres a risk that you may get hacked
@ineedgoodname 2 жыл бұрын
My dad works at IT in oracle, who own Java.
@dragongamer4610 Жыл бұрын
0x22, what a fricking legend. The hero we didn't know we needed
@lonecub101gaming3 2 жыл бұрын
I thank you for helping people stay informed and safe.
@chester000017 2 жыл бұрын
As someone working in CyberSec, this has become so alarming to us that we had a rough week dealing with this problem and had to wait for fix patch from actual developers of log4j. And I had to uninstall my minecraft and scan for vulnerabilities using the available tools that we had. This is a real deal people, don't take this lightly
@Laff700 2 жыл бұрын
Don't forget the fact that the first patch still had other vulnerabilities!
@sonetagu1337 2 жыл бұрын
I coudnt play minecraft java even with my laptop because i have no money i have an incosistent internet so im thankfull (Sorry for the cringe)
@kailo9008 2 жыл бұрын
I'm confused... didn't log4j patch this back in march with v2.15.0? This affected people with outdated java and log4j libraries, the majority of the corporate fixes for this exploit involved updating software and enforcing firewall policy.
@doubledoot 2 жыл бұрын
Why the hell did the exploit go public in the first place though?
@deepbromusic 2 жыл бұрын
I wish happy New year to you...Can 🙂I get 10k subscribers at the end of this year ... love ❤
@PRDGL_WindyBW 2 жыл бұрын
Not so fun fact: This is the most dangerous exploit/attack in internet history. It's the first one that's ever been rated 10 out of 10.
@rover9300 2 жыл бұрын
Damn, and to think it was on Minecraft Edit: and to think it started on Minecraft I know it got to other things, I watched the video
@velocitygames524 2 жыл бұрын
@@rover9300 it included Minecraft but also other massive corporations that used the log4 whatever program to make them run smoother Minecraft is just the most used example in this as it’s a Minecraft channel
@Lyajka 2 жыл бұрын
but you can play doom in minecraft with this exploit
@jdmaine51084 2 жыл бұрын
@Rover anything that runs Java, there's a high possibility it's logging with log4j. Bro this wasn't just minecraft. I work at SiriusXM - worked 5 hours overnight to patch my stacks. EVERYONE felt this one. What's worse is that the vulnerability had been in the log4j library for quite some time.
@rover9300 2 жыл бұрын
@@velocitygames524 yup
@Candied_Shrimp 2 жыл бұрын
Fit, you should make a vid on 2b2t's admin Hausemaster. I think it will be an interesting story :)
@SpeedyCheetahCub 3 ай бұрын
The person who was hacking people in order to protect them from other hackers reminded me of something I saw a while back where someone was going around hacking printers in order to protect them from other hackers.
@3sum4sum 2 жыл бұрын
Found FitMC on Facebook Watch! Really grabbed my attention and interest. Keep it up! You gained a Sub today!
@CatThatFollowsChrist 2 жыл бұрын
That is the most terrifying exploit I've seen in a while. And for the first time, I know people irl who were affected.
@MegaKBang 2 жыл бұрын
Nah it was pretty hilarious to watch
@therealkarlmarx1818 2 жыл бұрын
@Sentinel uh-oh
@housesports000 2 жыл бұрын
Only Fit can say “smiley face” and make it sound so ominous
@-ci-uwu640 2 жыл бұрын
He even can say OwO
@themadman6310 2 жыл бұрын
:)
@C.V.G.M.OFFICIAL 2 жыл бұрын
XD
@chrisyoung7662 2 жыл бұрын
He just got that voice man/woman/entity
@twinny643 Жыл бұрын
i just watched your video with a special guest, but now i know the thing about the calculator thx :)
@hybrid5568 Жыл бұрын
I feel very fortunate to have started my minecraft journey last year about this time. I dodged a few bullets that affected other minecrafters and 2b2t. That's insane things like that can happen
@specificguy3747 2 жыл бұрын
Redstoner is certainly going to have a few targets on his head after this
@Turbulation1 2 жыл бұрын
Indeed, but it doesn't matter much to him, since he knocked out major competition to his business. People could however attempt to tarnish Redstoner's reputation, and turn people away from buying stuff from Redstroner.
@PeterJavi 2 жыл бұрын
@@Turbulation1 That's assuming all he did was pwn some Minecraft accounts. Doing this, doesn't really make him come across as a guy who'd stop at this. He may very well have stole more than just this.
@pync1 2 жыл бұрын
hopefully he didnt do anything illegal with the hack because then hed have more to worry about than his minecraft market
@ugapeyton 2 жыл бұрын
@@pync1 what he did was already illegal.
@Brody-gk1yz 2 жыл бұрын
@@ugapeyton Exactly. That makes me think he more then likely did more. I can't imagine some loser doing Just illegal crap for Minecraft.
@unfairbullet 2 жыл бұрын
I don’t understand how over the last few months I’ve become so emotionally invested in a random Minecraft server that I’ve never played on
@eduard5567 2 жыл бұрын
yeah well there are millions more like you. literally. theres only like maximum a thousand people who log in to play 2b2t. everyday.
@POPCORN-ru5nl 2 жыл бұрын
same
@golonkowiczpl 2 жыл бұрын
This server has the most advanced history in this game
@suomusintti 2 жыл бұрын
You should try it. I'm currently in queue as 367 and it's my first time
@THECRINGERAILWAY 2 жыл бұрын
You aren’t the only one…
@Lizabitch_ 2 жыл бұрын
I’ve seen this community do some crazy stuff. But this is on another level
@fl0G2 2 жыл бұрын
its nice to see someone from my country fixing something that important
@TheRealGuywithoutaMustache 2 жыл бұрын
Lesson learned. Hackers are genuinely really scary people.
@MattBasicG 2 жыл бұрын
Yes indeed
@Gianski150 2 жыл бұрын
Its never a joke to take lightly on hackers. They're crafty and once they see a vulnerability, expect hell let lose.
@Dr4g0Npc 2 жыл бұрын
we are not
@xc1951 2 жыл бұрын
Untill you find them in person
@cccbowers914 2 жыл бұрын
agreed, but not as scary as you being litterly everywhere
@algonz5652 2 жыл бұрын
"We built this city" Log4Shell: Allow me to introduce myself
@carolesheen3940 2 жыл бұрын
he should really be in the trillion views and counting song
@KaiTweak 2 жыл бұрын
Thanks you for explaining this so good :)
@lastnamefirstname5289 2 жыл бұрын
3:55 It appears that according to this page, server admins could patch their servers without updating.
@ThistleBlue 2 жыл бұрын
Ah yes, Log4J, the Java logging framework. Funny thing is I just got a job in Java and they have an intro to logging. Better not be an unpatched log4j haha
@daizdamien1409 2 жыл бұрын
Mmmm you got a job in java? Lol
@SkyRecruit18 2 жыл бұрын
@@liamd969 his job is probably based around making programs with java or java level security at an office job
@ThistleBlue 2 жыл бұрын
@@SkyRecruit18 Partially. Software Dev and Testing. No office though haha
@herrforehead3745 2 жыл бұрын
@@daizdamien1409 as in a job that requires knowledge in java, he said in not at 😐
@ineedgoodname 2 жыл бұрын
@@liamd969 maybe he works at Oracle?
@Eugene-pq3gg 2 жыл бұрын
This is like the fourth time Fit has saved me from some kind of exploit. It's mostly by warning me not to pick Minecraft back up for now, but still.
@Eugene-pq3gg 2 жыл бұрын
@@TheBinklemNetwork Thanks for mentioning. I'll probably end up doing it, but the fact stands that without finding this I might had been in trouble.
@cd-rom9226 2 жыл бұрын
Stay safe mate
@TheBinklemNetwork 2 жыл бұрын
@@Eugene-pq3gg definitely good that it is a known factor now! Its is always good to show restraint if you yourself aren't fully convinced on somethings safety!
@intelxio 2 жыл бұрын
ONG BRO LMAOOOO
@gethinevans_ 2 жыл бұрын
@@TheBinklemNetwork is realm’s with friends safe?
@isaacuchiha4948 2 жыл бұрын
Respect to Rebane who played a crucial role in protecting the server and other people
@tedmcbur 2 жыл бұрын
I like it how popular 2b2t players render your thumbnails
@funkyskunk1 2 жыл бұрын
Future FitMC video: "Minecraft is assumed to be a harmless children's game for all ages. But this can't be said on the Oldest Anarchy Server in Minecraft. Here's the story of how a certain 2b2t player was linked to child exploitation and human trafficking."
@davidarvingumazon5024 2 жыл бұрын
Duuuuuude... Scawwwy fr!!!!¡!!¡¡!¡¡!!!!
@jwalster9412 2 жыл бұрын
Wouldn't be surprised lol.
@toddaustin449 2 жыл бұрын
If it does happen, 2b2t would just get shut down by whatever gov't the server rack it is or where hausemaster is
@TheRenegade... 2 жыл бұрын
@@toddaustin449 Bold to assume it hasn't already happened and we don't know yet
@MrcreeperDXD777 2 жыл бұрын
I wont be surprised if it was real. Actual criminals did play on 2b2t
@-Clueless- 2 жыл бұрын
Imagine how much issues we could solve and fix if people put the same amount of time and effort they use to break and destroy things.
@noahjordan6761 2 жыл бұрын
But breaking things is fun
@LazyBuddyBan 2 жыл бұрын
cope & seethe
@kendriccolamaricco2050 2 жыл бұрын
@@LazyBuddyBan ur mom
@tisjstme5315 2 жыл бұрын
@@noahjordan6761 Sorry but helping others and saving people is WAY MORE FUN.
@WorlWyrm 2 жыл бұрын
@@tisjstme5315 now imagine this, what is more fun? Destroying a Minecraft house or building one?
@rolo8950 2 жыл бұрын
I've never played Minecraft in my life yet I love your videos lol
@tsgmer 2 жыл бұрын
Hey nice vid! Also, is that final fantasy 15 music in the back round?
@MerlinDeLyon 2 жыл бұрын
The Minecraft community has just gone through one of the scariest weeks in its history... And i was completely unaware :p
@nvapisces7011 2 жыл бұрын
Meanwhile, Minecraft is celebrating 1 trillion views on KZfaq
@robertblunt1852 2 жыл бұрын
same I play on Bedrock tho but still
@lamarr51 2 жыл бұрын
Same lmao, I've just been trucking in Snowrunner and since I'm subbed to FitMC I decided to check this vid
@MOnkEh. 2 жыл бұрын
Same.
@neru1584 2 жыл бұрын
Minecraft: players hacked, scariest week in history KZfaq: one trillion views :DDD
@iv4n380 2 жыл бұрын
the scary part is that this exploit has been here all these years....and someone has probably been using it...imagine how much data has been collected..
@WolfrostWasTaken 2 жыл бұрын
Cloudflare (which proxies like 80% of the entire internet requests) reported that absolutely no one tried to pass that malicious payload since 2011 (they keep logs of every single request since 2011!!!!)
@starkbeatle4516 2 жыл бұрын
possibly but nah cus it was only truly found recently so i doubt it
@tomsterbg8130 2 жыл бұрын
Usually vulnerabilities occur when unsuccessful update attempts happen which makes me lean towards it's not that long since it was even possible not to mention it's announcement of founding
@Mutraxation 2 жыл бұрын
i still dont think those amount of data could beat big guys like zuckerberg
@NightUndead 2 жыл бұрын
@@WolfrostWasTaken That is actually quite eye opening... To think they have data on EVERY SINGLE request they've had through their servers for the last 10 years.... wow
@trey3530 2 жыл бұрын
the ffxv ost in the backround is a nice touch
@michelleenderink3664 Жыл бұрын
This actually happened on my birthday. What could i've imagined that day that things like this would happend. But for myself I don't play Java, I have it but I play bedrock so i'm save. But this is scary. Respect to the man who saved it!
@Lettuce1 2 жыл бұрын
The log4shell exploit is so devastating to the internet. You’d think that something like this would be spotted and fixed very quickly.
@ChristopherGray00 2 жыл бұрын
The apache team working on log4j are morons simply put, best to not use log4j at all. They were given ample warning.
@Alnarra 2 жыл бұрын
Most of the libraries that make up the backbone of the internet's infrastructure are maintained by single individuals and never get real security reviews.
@Lettuce1 2 жыл бұрын
@@Alnarra the problem with this argument is that log4j is not run by an induvidual
@thaliacrafts407 2 жыл бұрын
Makes me wonder how many gaping holes are in software we use everyday. Everybody gangsta until someone hacks our water treatment plants.
@doubledoot 2 жыл бұрын
Yeah. Why the hell did the exploit go public in the first place?
@NaughtyKlaus 2 жыл бұрын
The only way to be 100% sure that it’s patched is to remove log4j entirely, but too many systems rely on it so that’s unlikely.
@noobster6587 2 жыл бұрын
That's true
@humorousfool215 2 жыл бұрын
The latest version of log4j has the entire feature disabled so it is safe
@Alnarra 2 жыл бұрын
Unless you're running either tomcat or a beanfactory module or a VERY specific config, simply updating it to 2.15 should be suffecient. If you're running tomcat take it to 2.16
@mesayhello840 2 жыл бұрын
It is not patched. Me and my friend tried to do this multiple times like a hour ago. And it worked so... :D I have more stuff to abuse :)
@aetimes2 2 жыл бұрын
@@mesayhello840 have you updated?
@Ma1hematics2013 Жыл бұрын
great job fit! you made 32 seconds without saying "Oldest anarchy server in minecraft"!
@saffa3306 2 жыл бұрын
As long as they haven't used Intel's backdoor vulnerabilities you are safe after resetting your PC. If they did use this vulnerability, i recommend getting a new motherboard.
@raiiban 2 жыл бұрын
Can confirm. Lead Network Engineer at my company, this exploit nuked my week, I busted ass to get about 95% of my customers patched and additional staff trained on what to do if anything happened, I have vacation starting today thru to the end of the year and I wasn't about to let this crap ruin it.
@makimaistrash 2 жыл бұрын
great work I hope you have an excellent vacation
@exultant4921 2 жыл бұрын
Awesome man hope you have a great time
@lucasharvey8990 2 жыл бұрын
Humanity doesn't deserve you, but we sure do need you.
@norsethenomad5978 2 жыл бұрын
I recall getting a message on my Minecraft server talking about this exploit, and they put forth the effort to stop it almost immediately
@uncletoby7456 2 жыл бұрын
Same I play on a server called simply vanilla and it go shut down for two days and is not safe, hopefully.
@Jedssski 2 жыл бұрын
Whoever those people are. They are heroes.
@MrPablosek 2 жыл бұрын
I never thought I would actually be scared to play minecraft until now.
@Honestmairda 9 ай бұрын
I had a 6 (or maybe more) year old minecraft account. It was there since my first world mansion world. It was there when I tamed my first dog. It was there. When I built my first build off build. And ever since around this videos release, I've never been able to get on my account. I don't know if it was hacked. I don't know if it was that whole migrating accounts thing. But I couldn't log in.
@byrobuff8485 2 жыл бұрын
I tried to warn a server about the exploit. They banned me for spreading false panic. Later the server was shut down because of it lmao
@ninja_raven256 2 жыл бұрын
sucks to be them then
@OneTwoThreeFour56 2 жыл бұрын
LMAO
@internetdoggo4839 2 жыл бұрын
LOL
@rjwilliams1986 2 жыл бұрын
Redstoner really is becoming a legend on the server. Seems every couple of months he is involved with something that gets fitmc video-worthy.
@cosmiceyness 2 жыл бұрын
he is a demon bro
@twosadcows4549 2 жыл бұрын
Sounds to me like Redstoner is a trashcan that does t deserve to breath the same air as the rest of us. If he is doing this on a video game what do you think he is doing to people's personal lives...
@lauta8638 2 жыл бұрын
@@twosadcows4549 redstoner killed my mother and dog
@augere9620 2 жыл бұрын
Sounds like he wants to be arrested. He committed some major felonies.
@fencingf3003 2 жыл бұрын
He’s just the only one that fit listens to. A bunch of other people do cool shit but no one ever hears abt it cause redstoner gets all the attention.
@yonoyeet 2 жыл бұрын
i play on a server with like 10 poeple who i all know really well by now and + i never used/saved credit cards or debit on my pc also the people on 2b2t can be so salty so i could see why they would shut down the server and i didt know this was happing thanks for giveing me info
@RatchetX3X 2 жыл бұрын
Ive Seen your video with thé VexX ost in it, It's soo goooood
@dannylawrence2830 2 жыл бұрын
Fit: How bread was weaponised on the oldest anarchy sever on Minecraft. Fans: What’s next? Chat gets weaponised. Fit: :)
@rojoscostanada8685 2 жыл бұрын
LMAO
@Askial_Osial 2 жыл бұрын
Fit: Dirt was weaponised on the oldest anarchy server on Minecraft.
@somethingcoolgoeshere 2 жыл бұрын
Makes me happy knowing some people used the exploit for good and patched others computers
@tisjstme5315 2 жыл бұрын
Yes I agree whole heartedly.
@mr_fish3603 2 жыл бұрын
yea i honestly didnt even know this but im happy my brothers and my dad are all very tec savy people and take security online to a great level so our internet at my place is desiend to quarentine all our computers at all times and we have very strong fire walls to keep us safe and i was so happy when some one tryed it on me and to my supprise it failed actuallly quite a few tryed and failed
@tut-4126 11 ай бұрын
6:30 MY GOD the dungeon music from FFXV... My favourite!!
@thehighgroundhimself736 2 жыл бұрын
Pretty big bruh moment for anyone working IT including myself. You just come to work one day and someone says: "Our software has a critical security flaw." "Oh shit, which one?" "Idk, maybe all of them, also Minecraft, Google, Microsoft and the NSA have the same problem with their software."
@amahlaka 2 жыл бұрын
Even better: “We need a list of all of our servers and applications that use log4j, but we dont have proper software/server inventory”
@nieluse7847 2 жыл бұрын
0x22 and Rebane was a real one, trying to protect innocent players against the exploit. Mean wile redstoner was just being a disgusting human being.
@Hirpeeda 2 жыл бұрын
I wouldn't be surprised if Redstoner got into legal trouble over this
@rosea1505 2 жыл бұрын
I know it’s an anarchy server but they should ban the f*ck permanently. He’s a literal security risk. He’s willing to break the law, putting users private info at risk just to earn him money IRL. If the anarchy is outside of the sever than punishments have to be given imo
@Caio99BR 2 жыл бұрын
Redstoner: business is booming
@plygem6927 2 жыл бұрын
@@rosea1505 isnt that actually against TOS?
@starkbeatle4516 2 жыл бұрын
@@Caio99BR fax another day another dollar
@Exderius Жыл бұрын
Keep up the great work
@maxdobbelstein7532 Жыл бұрын
patchin' the computer using log4shell is just beautiful :D ... luckily we don't have that many java applications in our company
@SunsetArchon 2 жыл бұрын
New Players: So now just reading public chat isn't safe?! Veterans: Meh. Public chat was never safe to begin with.
@eliza547 2 жыл бұрын
thats why i always keep it off, unless i play with my irl friends
@kamimatsuyama 2 жыл бұрын
-_-
@SunsetArchon 2 жыл бұрын
@@kamimatsuyama I know. It's a sad week for humanity.
@Alex-tx2dh 2 жыл бұрын
Chris Leighton: why are you at my house?
@kamimatsuyama 2 жыл бұрын
@@SunsetArchon You know reading public chat is not a problem which kinda ruins the funny
@noskalborg723 2 жыл бұрын
i can only begin to imagine the damage this did to business programs run on java. it begs the question: why did that code exist in the first place?
@CanadianBaconPwnage 2 жыл бұрын
Human error. Sometimes, things fall through the cracks.
@marioisawesome8218 2 жыл бұрын
@@CanadianBaconPwnage today i shall make the worst error ever by adding a few lines of code to enable unimaginable RCE exploits because i am completely stupid.
@ravenwraith1017 2 жыл бұрын
@@CanadianBaconPwnage sounds like it is due to pure human laziness, actually.
@TorutheRedFox 2 жыл бұрын
@@ravenwraith1017 well it's moreso a series of assumptions that something won't happen eventually leading to an ACE exploit
@AJMansfield1 2 жыл бұрын
You know how sometimes in a card game like MTG you can end up with absolutely broken combos when different effects interact in just the right way before they release an errata or add one of the cards to the ban lists? Log4shell is kinda like that, where different developers added more and better features to different parts of the code until suddenly someone figured out some way to get it to all interact in a way that would give them RCE.
@pentagoo4586 2 жыл бұрын
Bruh I played in those days and knew nothing about this lmao
@MinecraftProLord 2 жыл бұрын
I am very glad my siblings and I were inactive around the time this happened.
@nugget1526 2 жыл бұрын
This moment when a 2b2t player says "morally questionable"
@brambleblaster 2 жыл бұрын
Further proof that 2b2t is a lawless land. Even if it was restricted to griefing attempts, the fact people like Redstoner just don't think twice about abusing a dangerous hack like this really puts into perspective how degenerate and scary anarchy servers really are.
@UltraAryan10 2 жыл бұрын
This could happen in any big server which end up with some malicious people. So just play minecraft with your friends if you wanna have a really good chance to stay safe.
@chicotada7078 2 жыл бұрын
redstoner is just working, selling items must be he's income
@epicgizmo5565 2 жыл бұрын
@@chicotada7078 destroying peoples shops that illegal even in the real world he isn't working
@noahjordan6761 2 жыл бұрын
@@epicgizmo5565 it's not really appropriate to say "even in the real world". The point of an anarchy server is to be lawless, more so than the real world(if you consider it reality ofc)
@mintonpizza 2 жыл бұрын
I agree *Mr. Jellyfart*
@nerdflanders3032 2 жыл бұрын
Jesus I was trying to install Minecraft Java but was having some problems. Glad I found this out before... you know.
@rw8628 Жыл бұрын
fit:"In the midst of chaos, there is opportunity." sounds like sun tzu
Дейлин КЗ
Рет қаралды 153 М.
Варди
Рет қаралды 3,6 МЛН