Exploit during thunder - Hacked clients can retrieve players' coordinates

This exploit only occurs during thunderstorms.

While playing on an anarchy server, someone started to post in chat every players' coordinates he had access to, using a modified client that retrieves global data packets sent by the server.

During thunderstorms, the server sends a sound packet for thunder globally, that contains the coordinates of every thunder impact on active chunks where a player is. This allows to locate a player with a 512 blocks range precision (16x16 on all sides).

Some people are aware of this exploit and made a plug-in: http://www.curse.com/bukkit-plugins/minecraft/localized-thunder

This issue is particularly problematical for raid based servers where the coordinates have to remain secret in order to survive.