/gametest Can Be Used To Crash Realms
Update 1.16.210 brought the following feature into fruition:
GameTest Framework
- Added GameTest framework NOTE: GameTest is not functional on console platforms
- GameTest is server-side test automation tool that is based on pairing test code with test structures. You
can trigger the tests via the /gametest command once you have enabled the "Enable GameTest Framework"
experiment toggle for a world .
Although it clearly states that it was "not functional on console platforms", it's there and is very much "functional". When entering a world with "Enable GameTest Framework" toggled (which I may add is force toggled in every realm post-update) all players, no matter their permissions, are able to execute the command.
This feature can easily be used maliciously by executing /gametest runall which, when ran in rapid succession, can bring a realm to it's knees and even destroy world files. Furthermore, by using this command, players are able to summon large plots of filled with barriers, command blocks and structure blocks - which are all unobtainable in vanilla Minecraft. Following this discovery - many realms, including my own, have had to make the unfortunate decision to temporarily shut down until this issue is fixed - causing a decline in revenue for realm owners and, in turn, a lot of realm refunds.
In a prior bug report regarding this same issue, a moderator explained that "I [the moderator] can only use /gametest after toggling on cheats. Since it requires the world host/owner to take this step, it doesn't seem like a crucial problem to me."
Although they are true, considering the fact that most high-caliber realms require the use of cheats in-order to function, it is obscene for someone to say such a thing and, in essence, expect us to just throw this issue under the rug and go on with our day.
The comment (and accompanying thread) can be found here: https://bugs.mojang.com/browse/MCPE-120040?focusedCommentId=940624&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-940624
I will work to update this thread as more information becomes available.
2021-03-11, 12:45 AM
2021-03-12, 03:59 PM
2021-03-11, 12:52 AM
0
2
-