6 ms·

The Minecraft Code (2024) [video]

67 points by zichy 1y ago

boredpudding 1y ago
It's solved, full write-up here: https://www.reddit.com/r/MinecraftUnlimited/comments/1cvo5py/the_full_story_of_tominecon7z_and_its_conclusion/ https://www.reddit.com/r/MinecraftUnlimited/comments/1cvo5py... Tl:dr; It was a release file for their Minecon event. It was never meant to be public. Obsessing over a password protected in a company's S3 bucket is weird and crosses many limits.
- de6u99er 1y ago
  >He mentioned that he does not want people to nag him about it and that “It's brought up every single year, I'm hoping this is the last ”. Finally putting an end to a 13 year old mystery. Ouch
- djmips 1y ago
  Telling people they should not try and crack something is kind of like the Streisand effect.
  - teruakohatu 1y ago
    > Telling people they should not try and crack something is kind of like the Streisand effect. More like a reverse-streisand effect. They were honest about the contents of the file, it was Minecraft 1.0 and not interesting, but the community didn't accept the explanation.
- charcircuit 1y ago
  >is weird and crosses many limits. It's similar in format to communities that obssess over "lost media." The inability to pirate or get access to something becomes an obsession. Even if the piece of media exists in an archive somewhere, that doesn't matter to them because it's about the fact that they themselves don't have access to it that has become the obsession.
  - LiamPowell 1y ago
    There's also the piracy communities where a majority of users believe they have some sort of inherent right to watch something merely because it exists. I don't understand where that sentiment comes from.
    - bakugo 1y ago
      > I don't understand where that sentiment comes from. Human nature. Refusing to accept being told "no" by some greater force is the instinct that pushed humanity forward to where we are today.
      - Bjartr 1y ago
        That's a rather romantic way to say stubbornness is sometimes effective
    - lovich 1y ago
      I mean, part of the deal with IP law is you get government protection for your idea, in exchange for society having access to it. I’m personally of the mind that if my tax dollars went towards protecting your shit, you owe society access. This is not defending the ones who believe they have the right to things sans that deal
      - jaccola 1y ago
        This argument is so ridiculous I must be misunderstanding you. By your logic you owe me access your house since my tax dollars pay for the legal system that gives you property rights?!
        mattmanser 1y ago
        It's not ridiculous, that's the deal (at least it was). It's not actual property. It's a made up concept, you actually lose nothing physical if it's copied. That concept was created and granted to encourage people to create. You get a certain period to commercialize it, then it's public property. Hiding it away to prevent that is a breach of the spirit of the agreement society made with the creator. That you believe it's a "ridiculous" argument shows how much you've been brainwashed by corporations. All this stuff is generally built on the shoulders of previous works, that are public domain. Copying story structures, phrasing, etc. Even entire storylines. And that's before we get onto the fact that all these corporations benefited from eveything we paid for. Laws to protect their IP, enforcement, infrastructure paid with by public money, education of workers, etc.. They've got their hands out to take, take, take, but when it comes to holding up to their part of the bargain, it's suddenly extensions on copyright terms, minor tweaks to "renew" IP that was never part of the original deal, etc. while feeding a ton of cash to politicians in what looks like a bribe, acts like a bribe, but is termed "lobbying".
- aswip 1y ago
  I guess only boxpig41 knows what else was protected that caused them to replace the file just to avoid the chance that the real password might get out and those might be unlocked, though at this point I’m assuming those encrypted files are gone or are no longer important.
  - boxpig41 1y ago
    This is true.
- cedws 1y ago
  I disagree with this and what Dinnerbone says about locks. It doesn’t matter who file was intended for, it’s on the internet, if people want to use their silicon to do some mathematics to turn some numbers into some other numbers that’s their choice. It’s not equivalent to breaking into a house.
  - boredpudding 1y ago
    I agree it's not the equivalent, but the file could've contained things like Minecon attendees. That would still mean it's badly secured of course, but putting a huge community effort behind it and youtubers making 'Biggest Secret in Minecraft' videos about it would suddenly turn into very bad taste.
  - Matthyze 1y ago
    I personally don't see downloadability as a significant factor in the morality of breaching security. If it's bad to hack a login screen to gain access to private information, why wouldn't it be bad to hack encryption to do the same thing? What moral dimension does downloadability alter? I think the house analogy fails because you cannot duplicate a house, take it somewhere else, and attempt to break into it there. If you could, that would undoubtedly be seen as a violation.
  - throwzasdf 1y ago
    [dead]
- neuroelectron 1y ago
  so weird. many limits. 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
  - IT4MD 1y ago
    Thanks for posting that AACS key. It's been awhile since I've seen it running around the internet and we need more of that kind of thing, these days.
- esnard 1y ago
  Weird. The file was cracked in May 2024, while the password had appeared in a database leak which was added in HIBP (and thus pretty much public) back in October 2017. Unsure why it took the community so long to crack the file.
  - boredpudding 1y ago
    The cracking basically started the moment youtubers presented it as 'a mystery'.
  - catsma21 1y ago
    the salt for the passwords in the bitly breach isn't known, and the few plaintexts available were lost to time
- snowram 1y ago
  It is rather common in gaming to communities to find people completely obessed over ultra specific details of their favorite game. It isn't even the first time for Minecraft, see the "pack.png" case.
- MortyWaves 1y ago
  I see you haven’t stumbled across the Minecraft community much, because this weirdness is just every day for them. Take for example, the infamous 2B2T Minecraft server. Exploits and game breaking mechanics by virtually impossible to discover bugs, and the no rule against hacking and cheating, have led to things people didn’t think were even possible in Minecraft over the servers ~15 year history.
picafrost 1y ago
Internet denizens love opening a locked box. This phenomenon has been weaponized by the gaming industry in the form of loot boxes.
- astrobe_ 1y ago
  It is strange to me that people obsess on programming in-game with "red stone" etc. That said I am dayjob programmer so the last thing I want to do on my free time and is to program stuff. I made a game that uses the Luanti "voxel" engine (MC-likes games of course, but also transposition of other genres), and even programming that is bit of a chore but that's the price to pay to play the game you want to play (there's much more to that than just programming/modding; game design is a rabbit hole). But I think that it would be more rewarding for those who are curious about programming to start modding, especially in Luanti because it is relatively well documented and it's Lua. In a way, making it rain with the programmable particle spawner the engine provides is a loot box locked by an API, with hints on how to open it in the docs ;-)
  - catsma21 1y ago
    https://i.redd.it/zj0csp06b4sd1.png https://i.redd.it/zj0csp06b4sd1.png
  - rahkiin 1y ago
    I think it is the fun of working towards simple goals, in a restricticed visual environment, in a gamified way. The challenge is the restriction. Starting with and and or gates while at work you would be writing CRUD
  - programd 1y ago
    > game design is a rabbit hole Game engine design is a rabbit hole :) Game design is the ultimate lockbox - you're unlocking an entire imaginary world which has some platonic existance in your mind. And since you mentioned Luanti, it deserves to be much better known as a credible open alternative to Minecraft. You could do a lot worse then designing/prototyping your game with Luanti as the game engine. https://www.luanti.org/ https://www.luanti.org/
pinoy420 1y ago
[dead]
teekert 1y ago
Maybe add to title: “but is solved now”. Would have saved me some time thinking they might go somewhere.
- deleted 1y ago
  [deleted]
- 0x6c6f6c 1y ago
  It was solved? They never decrypted the original file, only the decoy.
  - 0x6c6f6c 1y ago
    Ah, the video is a year old. There is another link to a reddit post in the thread. Supposedly it is solved now! Read more there
  - teekert 1y ago
    See comments below.
  - creatonez 1y ago
    Both of them were eventually decrypted. The decoy was a misdirection attempt to get people to shut up about the whole thing, since the original contained a passphrase that had been reused multiple times for Mojang's internal operations. But it only caused more people to go digging as they noticed the hash changed, along with an employee acting highly defensive about it. They used "boxpig41" for the original and "thespicemustflow" for the decoy. Both of them contain the jar and assets for Minecraft 1.0, but the original also contained an ordinary copy of the Minecraft launcher, so that the files could used to run it during a live event even if internet access goes down, hence the larger file size.
- dang 1y ago
  Hmm that was a tricky one. I, er, solved it by truncation - a surprisingly effective trick for titles. Thanks for the heads-up!
oa9295401 1y ago
[dead]
nurettin 1y ago
Minecraft (java edition) has been decompiled, modded with different launchers and recompiled since ages. The reason you need a "launcher" is because for some reason Minecraft's jar file doesn't have a way of downloading all the assets Minecraft needs in order to run.

67 points by zichy 1y ago

It's solved, full write-up here: https://www.reddit.com/r/MinecraftUnlimited/comments/1cvo5py/the_full_story_of_tominecon7z_and_its_conclusion/ https://www.reddit.com/r/MinecraftUnlimited/comments/1cvo5py... Tl:dr; It was a release file for their Minecon event. It was never meant to be public. Obsessing over a password protected in a company's S3 bucket is weird and crosses many limits.

de6u99er 1y ago
>He mentioned that he does not want people to nag him about it and that “It's brought up every single year, I'm hoping this is the last ”. Finally putting an end to a 13 year old mystery. Ouch
djmips 1y ago
Telling people they should not try and crack something is kind of like the Streisand effect.
- teruakohatu 1y ago
  > Telling people they should not try and crack something is kind of like the Streisand effect. More like a reverse-streisand effect. They were honest about the contents of the file, it was Minecraft 1.0 and not interesting, but the community didn't accept the explanation.
charcircuit 1y ago
>is weird and crosses many limits. It's similar in format to communities that obssess over "lost media." The inability to pirate or get access to something becomes an obsession. Even if the piece of media exists in an archive somewhere, that doesn't matter to them because it's about the fact that they themselves don't have access to it that has become the obsession.
- LiamPowell 1y ago
  There's also the piracy communities where a majority of users believe they have some sort of inherent right to watch something merely because it exists. I don't understand where that sentiment comes from.
  - bakugo 1y ago
    > I don't understand where that sentiment comes from. Human nature. Refusing to accept being told "no" by some greater force is the instinct that pushed humanity forward to where we are today.
    - Bjartr 1y ago
      That's a rather romantic way to say stubbornness is sometimes effective
  - lovich 1y ago
    I mean, part of the deal with IP law is you get government protection for your idea, in exchange for society having access to it. I’m personally of the mind that if my tax dollars went towards protecting your shit, you owe society access. This is not defending the ones who believe they have the right to things sans that deal
    - jaccola 1y ago
      This argument is so ridiculous I must be misunderstanding you. By your logic you owe me access your house since my tax dollars pay for the legal system that gives you property rights?!
      - mattmanser 1y ago
        It's not ridiculous, that's the deal (at least it was). It's not actual property. It's a made up concept, you actually lose nothing physical if it's copied. That concept was created and granted to encourage people to create. You get a certain period to commercialize it, then it's public property. Hiding it away to prevent that is a breach of the spirit of the agreement society made with the creator. That you believe it's a "ridiculous" argument shows how much you've been brainwashed by corporations. All this stuff is generally built on the shoulders of previous works, that are public domain. Copying story structures, phrasing, etc. Even entire storylines. And that's before we get onto the fact that all these corporations benefited from eveything we paid for. Laws to protect their IP, enforcement, infrastructure paid with by public money, education of workers, etc.. They've got their hands out to take, take, take, but when it comes to holding up to their part of the bargain, it's suddenly extensions on copyright terms, minor tweaks to "renew" IP that was never part of the original deal, etc. while feeding a ton of cash to politicians in what looks like a bribe, acts like a bribe, but is termed "lobbying".
aswip 1y ago
I guess only boxpig41 knows what else was protected that caused them to replace the file just to avoid the chance that the real password might get out and those might be unlocked, though at this point I’m assuming those encrypted files are gone or are no longer important.
- boxpig41 1y ago
  This is true.
cedws 1y ago
I disagree with this and what Dinnerbone says about locks. It doesn’t matter who file was intended for, it’s on the internet, if people want to use their silicon to do some mathematics to turn some numbers into some other numbers that’s their choice. It’s not equivalent to breaking into a house.
- boredpudding 1y ago
  I agree it's not the equivalent, but the file could've contained things like Minecon attendees. That would still mean it's badly secured of course, but putting a huge community effort behind it and youtubers making 'Biggest Secret in Minecraft' videos about it would suddenly turn into very bad taste.
- Matthyze 1y ago
  I personally don't see downloadability as a significant factor in the morality of breaching security. If it's bad to hack a login screen to gain access to private information, why wouldn't it be bad to hack encryption to do the same thing? What moral dimension does downloadability alter? I think the house analogy fails because you cannot duplicate a house, take it somewhere else, and attempt to break into it there. If you could, that would undoubtedly be seen as a violation.
- throwzasdf 1y ago
  [dead]
neuroelectron 1y ago
so weird. many limits. 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
- IT4MD 1y ago
  Thanks for posting that AACS key. It's been awhile since I've seen it running around the internet and we need more of that kind of thing, these days.
esnard 1y ago
Weird. The file was cracked in May 2024, while the password had appeared in a database leak which was added in HIBP (and thus pretty much public) back in October 2017. Unsure why it took the community so long to crack the file.
- boredpudding 1y ago
  The cracking basically started the moment youtubers presented it as 'a mystery'.
- catsma21 1y ago
  the salt for the passwords in the bitly breach isn't known, and the few plaintexts available were lost to time
snowram 1y ago
It is rather common in gaming to communities to find people completely obessed over ultra specific details of their favorite game. It isn't even the first time for Minecraft, see the "pack.png" case.
MortyWaves 1y ago
I see you haven’t stumbled across the Minecraft community much, because this weirdness is just every day for them. Take for example, the infamous 2B2T Minecraft server. Exploits and game breaking mechanics by virtually impossible to discover bugs, and the no rule against hacking and cheating, have led to things people didn’t think were even possible in Minecraft over the servers ~15 year history.

picafrost 1y ago

Internet denizens love opening a locked box. This phenomenon has been weaponized by the gaming industry in the form of loot boxes.

astrobe_ 1y ago
It is strange to me that people obsess on programming in-game with "red stone" etc. That said I am dayjob programmer so the last thing I want to do on my free time and is to program stuff. I made a game that uses the Luanti "voxel" engine (MC-likes games of course, but also transposition of other genres), and even programming that is bit of a chore but that's the price to pay to play the game you want to play (there's much more to that than just programming/modding; game design is a rabbit hole). But I think that it would be more rewarding for those who are curious about programming to start modding, especially in Luanti because it is relatively well documented and it's Lua. In a way, making it rain with the programmable particle spawner the engine provides is a loot box locked by an API, with hints on how to open it in the docs ;-)
- catsma21 1y ago
  https://i.redd.it/zj0csp06b4sd1.png https://i.redd.it/zj0csp06b4sd1.png
- rahkiin 1y ago
  I think it is the fun of working towards simple goals, in a restricticed visual environment, in a gamified way. The challenge is the restriction. Starting with and and or gates while at work you would be writing CRUD
- programd 1y ago
  > game design is a rabbit hole Game engine design is a rabbit hole :) Game design is the ultimate lockbox - you're unlocking an entire imaginary world which has some platonic existance in your mind. And since you mentioned Luanti, it deserves to be much better known as a credible open alternative to Minecraft. You could do a lot worse then designing/prototyping your game with Luanti as the game engine. https://www.luanti.org/ https://www.luanti.org/

pinoy420 1y ago

[dead]

teekert 1y ago

Maybe add to title: “but is solved now”. Would have saved me some time thinking they might go somewhere.

deleted 1y ago
[deleted]
0x6c6f6c 1y ago
It was solved? They never decrypted the original file, only the decoy.
- 0x6c6f6c 1y ago
  Ah, the video is a year old. There is another link to a reddit post in the thread. Supposedly it is solved now! Read more there
- teekert 1y ago
  See comments below.
- creatonez 1y ago
  Both of them were eventually decrypted. The decoy was a misdirection attempt to get people to shut up about the whole thing, since the original contained a passphrase that had been reused multiple times for Mojang's internal operations. But it only caused more people to go digging as they noticed the hash changed, along with an employee acting highly defensive about it. They used "boxpig41" for the original and "thespicemustflow" for the decoy. Both of them contain the jar and assets for Minecraft 1.0, but the original also contained an ordinary copy of the Minecraft launcher, so that the files could used to run it during a live event even if internet access goes down, hence the larger file size.
dang 1y ago
Hmm that was a tricky one. I, er, solved it by truncation - a surprisingly effective trick for titles. Thanks for the heads-up!

oa9295401 1y ago

[dead]

nurettin 1y ago

Minecraft (java edition) has been decompiled, modded with different launchers and recompiled since ages. The reason you need a "launcher" is because for some reason Minecraft's jar file doesn't have a way of downloading all the assets Minecraft needs in order to run.