BDS-3415Players able to access command block UI using hacks
Players are currently able to have access to command block UI's who are not operators of the server. This has caused several vanilla servers to shut down over the past month. Heck even a petition was made to tell mojang to fix this.
https://www.ipetitions.com/petition/mojang-improve-realm-management-and-security
Please fix this OR for gosh sake do all bds server owners a favor and add a /ban command. There is currently no way of stopping hackers from coming onto your server. Please fix this and please don't have one of the mods mark this post as resolved because its not resolved and needs to be dealt with.
Linked Issues
Comments7
History6
Added Security Level: Minecraft - Private
Added duplicates link: BDS-3142Exploit in BDS and Realms (Horion patrons can use it already, fix asap!!!)Fixed
Resolution: Unresolved → Duplicate
Removed Security Level: Minecraft - Private
Deleted comment:
IonicEcko if you look in my past reports on the bug tracker I did make a full detailed private post about hacks in bedrock edition and included links and info about what the hacks are capable of. Also I was not recommending a feature to be added. I made it very clear that players are able to open up command block UI's. The /ban command was just a suggestion but really I just want this issue to be taken care of. This is a real issue and marking it as resolved will keep adding to the problem.
https://bugs.mojang.com/browse/BDS-2537
Added Security Level: Minecraft - Private
This is a huge problem that needs to be fixed
Hi Infinity,
The reason this would be marked as closed would be because the majority of it is Invalid. Feature requests belong over at https://feedback.minecraft.net as they're not a bug, its just a feature that isn't implemented yet. I would suggest checking over there for a suggestion about more admin possibilities (and for the record, I agree its needed - but we're also using what is clearly designated as "alpha" software so by definition its feature incomplete).
However, if you're able to provide any more information on the comment about command blocks being accessible I'd be happy to get that one raised. Are there any special circumstances around it or is it just that any player of member permissions can access it?
Is there a reason those servers can't barricade their command blocks off using barrier blocks as a workaround?
Ionic
It is a special circumstance, a Minecraft Bedrock "Utility Mod", named Horion. It is an extremely well-developed Cheat which has multiple exploits; just one of them being mentioned in this thread. If you had interpreted OP properly you would've realised he meant it wasn't something you could normally do in the game. Horion is internalised and can hook into many game functions, in the last month it has managed to have; force geometry, force obj and force open command block. This is all due to a lack of security in Microsoft's realm software. Only vanilla and realm servers are affected by this but they still make up a large amount of the multiplayer playerbase. There is certain workaround e.g putting the command block on a Minecraft and making it spin around endlessly. But it isn't efficient and shouldn't have to be done in the first place, OP wants a patch to this.
Thanks Lucy.
When reporting hacks its best to report the issue as "private" (so others can't see it) so that you can include such information. Without it we can only take the report at face value, we can't be searching for subtext especially when we're volunteers going through hundreds of tickets a day. There are reports for that software already so I'll ask this to be linked to those.
Thank you both.
Ionic
MEQS_KEEP_PRIVATE
Thank you for your report!
However, this issue is a Duplicate of
BDS-3142(private).Quick Links:
📓 Issue Guidelines – 💬 Community Support – 📧 Customer Support – 📖 Game Wiki
IonicEcko if you look in my past reports on the bug tracker I did make a full detailed private post about hacks in bedrock edition and included links and info about what the hacks are capable of. Also I was not recommending a feature to be added. I made it very clear that players are able to open up command block UI's. The /ban command was just a suggestion but really I just want this issue to be taken care of.