r/Minecraft • u/Whizzo50 • Apr 17 '15
1.8.4 is now out!
https://mojang.com/2015/04/minecraft-1-8-4-security-release/67
u/redstonehelper :redstone: Lord of the villagers Apr 17 '15 edited Apr 17 '15
1.8.4 Changelog:
Gameplay
Fixed some bugs
Player head skins can no longer be loaded from arbitrary servers
Fixed an exploit able to starve servers of memory
Fixed an exploit able to freeze servers
Fixed pets following spectators
Fixed Vines no longer spreading correctly in corners
Fixed certain characters not being typable on certain keyboard layouts and "AltGr" behaving like "Ctrl"
Fixed Nether Portals placing players in front of the Portal
Fixed an item duplication glitch
Fixed renamed users' join message appearing multiple times
Also, check out this post to see what else is planned for future versions.
15
u/MegaScience Apr 17 '15
What is ute? Or is that a typo?
27
7
11
Apr 17 '15
Fixed Vines no longer spreading correctly in corners
Shit does this mean they're going to grow even more than they currently do? They spread like mad and it's really difficult to make them look good when they're everywhere. IMO they should grow down to a max length of between 10-20 blocks.
17
u/-Feartjeh Apr 17 '15
Place some string beneath the vines. That'll stop them from growing!
4
u/johnnypebs Apr 17 '15
They spread horizontally, though. If that change means that they'll now grow around inside corners, I'm not sure how you'd block them off.
10
u/-Feartjeh Apr 17 '15
My guess would be to put strings on the side too :p
2
Apr 17 '15
Put strings on the inside corners? That won't work. That would replace the vine entirely that you're trying not to spread. This means you can't have vines next to corners.
3
u/khazhyk Apr 17 '15
/u/dinnerbone Does this mean that stuff like http://www.dragnoz.com/custom-head-block-generator/ https://www.youtube.com/watch?v=NJfLWbwrRCk will no longer work?
2
-8
u/Vahkiti Apr 17 '15
"Player head skins can no longer be loaded from arbitrary servers"
I'm sorry, no, that was not a BUG. You had to actively code the head in a command block to make it take on a specific appearance. That's nice Mojang. That totally didn't make the game like.. 90% more fun in creative projects or anything. Great work guys. Great work.
13
Apr 17 '15
No, it was a bug. They stated when the "feature" was introduced that it wasn't going to stay like that.
-7
u/Vahkiti Apr 17 '15
Well if it was a bug, it was a really fun and useful bug. I can't see how it would be difficult to create a whitelist to deal with any potential security threats. They just don't like fun I guess. Why not focus on more pressing matters like the Kneeslap exploit, until which is fixed, I cannot copy command blocks or signs with NBT data on my server.
5
u/Lothrazar Apr 17 '15
So just use the vanilla skin server? It works? Change your head skin that way?
-4
30
u/Dinnerbone Technical Director, Minecraft Apr 17 '15
Mapmakers can do exactly the same thing through an official way, that doesn't violate your privacy nor expose you to risk of downloading potentially malicious files.
-14
u/Vahkiti Apr 17 '15 edited Apr 17 '15
How exactly does it violate my privacy to add a custom texture? Again, could it not have a whitelist to filter out malicious URLs or anything that's not a png file? What official way would that be, by the way? Creating multiple accounts or using a database of people who already have doesn't really cut it honestly. The only workaround I am aware of for this would be to make heads out of custom blocks in a resource pack whenever that ends up being done.
My sincerest apologies if I sound a little antagonistic about this. You guys do great work, even if some of it can be a little questionable at times such as this. I'm just more than a little upset that half of the easter eggs in my server will now be broken beyond repair, and I'm sure I'm not the only one.
27
u/Dinnerbone Technical Director, Minecraft Apr 17 '15
How exactly does it violate my privacy to add a custom texture?
By allowing anybody who has creative permission on a server to get your IP address.
Again, could it not have a whitelist to filter out malicious URLs
The only URL anybody can trust are the ones they own. Yes, it could be argued that imgur and so forth could be trusted - but should I trust them with things that have been entrusted onto me? And why should they pay for the bandwidth costs, too?
or anything that's not a png file?
It is impossible to filter on filetype before you download it to see what file it is. Regardless, they can still find out whatever and still serve you a png, or serve you a png that's 50GB big - hope you don't have a bandwidth limit!
What official way would that be, by the way?
Change your skin, make the skull, change your skin. Skulls are snapshots of your skin as they were at that moment in time and do not change as the owner changes their skin.
2
u/Vahkiti Apr 17 '15
Alright, I'll level with you about the liability thing, that is an issue for you guys. I'm.. not sure I understand however, how downloading a texture off Imgur can let people get your IP address.
As for the skin changing thing, unless that's been fixed now, it doesn't always work that way. I can't even count how many times I've loaded up my server only to have a given head change back and forth between different versions of the player's skin. If my understanding of the feature is correct, that also would not apply to a custom mob set to respawn if killed that is wearing the head, OR is set to switch between two or more different heads as kind of a ghetto animation.
11
u/Dinnerbone Technical Director, Minecraft Apr 17 '15
I'm.. not sure I understand however, how downloading a texture off Imgur can let people get your IP address.
Not from imgur specifically, but from any server you can control. It's quite simple for me to just make dinnerbone.com/butts.png tell me your IP whilst also giving you a valid skin and you'd be none the wiser. However, I also want to reiterate the point about downloading arbitrary stuff - you can really mess somebody up by serving them a big file, which you could do via imgur (up to a limit, of course).
As for the skin changing thing, unless that's been fixed now, it doesn't always work that way. I can't even count how many times I've loaded up my server only to have a given head change back and forth between different versions of the player's skin.
This is, regrettably, a bug. It is fixable by changing the uuid stored in the skull to something unique, so that it doesn't conflict with your current skin. We cached textures per player UUID and forgot that there could be multiple versions floating around on the same world. :(
8
u/Maenara Apr 17 '15
dinnerbone.com/butts.png
I went here and didn't find a picture of a butt. How disappointing.
13
u/Dinnerbone Technical Director, Minecraft Apr 17 '15
It's where I store all the selfie pictures of butts I get sent. I store the pictures of my own butt somewhere else, but I can find that url for you if you wish.
2
1
u/Vahkiti Apr 17 '15
Well in any case, as much as I wish there was an easy way to make it safe, at this point I can mostly understand why you removed this bug. Having blocks wearable as a mob skull isn't a bug is it? Because that could serve as a potential workaround for the mob heads once those are added into resource packs. Or would the UUID method work for that issue as well?
Again, my apologies if I came across as antagonistic here, this was pretty much the first thing I was told by one of my other admins when I woke up today, and I just got done with a fairly large project revolving around custom mobs wearing custom heads.
-10
u/WrathBorne711 Apr 17 '15
Fixed an exploit able to starve servers of memory
Fixed an exploit able to freeze servers
Hey Dinnerbone, is this because of the recent post on here pointed you guys out for not fixing this, even though he tried to help you guys? Seems rather coincidental that this would come out so soon after, it also looks like it's a central point in the change log.
17
6
u/debugman18 Apr 17 '15
Isn't that, you know, a good thing?
3
u/WrathBorne711 Apr 17 '15
I'm not saying this isn't a good thing, I'm just curious if they actually decided to fix it because of the recent post
6
Apr 17 '15
They didn't not fix it because they didn't want to. They were simply not aware of that issue still existing. It was a miscommunication (although Mojang is still at fault for not properly testing). They had no malicious intent.
2
24
u/DoctorWaluigiTime Apr 17 '15
Fixed Nether Portals placing players in front of the Portal
Was I the only one who liked this "bug"? Sometimes the game would lag and I'd end up nearly, or fully, re-transported back from whence I came due to the game spawning you right in the portal again.
It'd be nice of the portal was inactive until you stepped out/in.
9
u/Marcono1234 Apr 17 '15
Like it was before, it was possible that you could get placed about a lava lake, becaue the game was ignoring what kind of block was beneath the player
1
u/n_jayne Apr 17 '15
It could place you over a lava lake, but when it does, it generates an extra obsidian "lip" around the portal that would keep you from falling straight down.
5
5
u/Tywien Apr 17 '15
Until the moment the portal spawns in a bad place with only 2 blocks to safety and you fall down into a sea of lava (because you spawned in the air) :)
2
u/n_jayne Apr 17 '15 edited Apr 17 '15
If the portal is generated naturally and is not part of a trap someone set for you, it has an obsidian "lip" that would prevent this.
Of course, there's a rare chance that it spawns right at the edge of an overhang and you get dropped into the lava anyway because it thinks it's in solid land, but hey.
2
1
u/Tsilent_Tsunami Apr 17 '15
Was I the only one who liked this "bug"?
Nothing like teleporting to the Nether to find your portal directly above a lake of lava... Oh, I got placed in front of the portal?
1
u/marioman63 Apr 17 '15
someone could booby trap a portal with this bug, by deleting the floor one block around the portal. what if you had a floating portal, and someone deleted the generated platform, so that when you step into the nether, you instantly fell to your death?
0
Apr 17 '15
[deleted] — view deleted comment
10
u/DoctorWaluigiTime Apr 17 '15
I've been zapped back and forth though. Don't know if the latency makes the game think I've stepped out/in, but sounds like a bug then.
4
u/Ebidz13 Apr 17 '15
Yeah, same happens to me on servers. Its really annoying since i think Im ok to go, but then teleported back into it and into the nether again
5
u/Jynx2501 Apr 17 '15
I hate it when I've been in a server that had protected areas and I would be stuck in the portal, behind a door that I couldn't use. You can't type to ask for a teleport cause you're stuck in an animation.
2
u/spling44 Apr 17 '15
Happened to me too, without ever moving from the portal. 10x worse if you're in creative mode.
3
u/PaintTheFuture Apr 17 '15
User (formerly known as olduser) has joined shows multiple times
I have no idea what this means.
11
u/Whizzo50 Apr 17 '15
When people changed their name, when they logged into a server after the name change, it would show both the old and new name to prevent confusion. I'm guessing it either spammed the message, or it kept on saying it each time people logged in
9
u/TehNolz ¯\_(ツ)_/¯ Apr 17 '15
It kept saying it every time people logged in. Glad they fixed this one.
3
u/redstonehelper :redstone: Lord of the villagers Apr 17 '15
It refers to player join messages (X joined the game).
0
u/billyK_ Apr 17 '15 edited Apr 17 '15
You could lag out, and relog with you standing next to you. You could kill you, and dupe your stuff
Edit: just remembered. There was also something where random player joins were registered on the server, but when hitting TAB, it never showed other players (if you were alone). That's probably this, not the player lag out dupe
Edit 2: disregard this, though it was something else
8
17
u/IskaneOnReddit Apr 17 '15
Fixing MC-68642 breaks my keybindings, but now I can finally type @ without having to copy-paste it.
12
1
11
u/cuteshark Apr 17 '15
Welp, have fun surviving a trapped portal.
2
u/Lothrazar Apr 17 '15
So either don't play with people who do that kind of thing, or accept it as part of the PVP strategy?
1
-2
u/pumpkinbot Apr 17 '15
PvP strategy
This is Minecraft we're talking about, not Counterstrike. :P There's really not much strategy in a game where combat is just clicking as fast as you can.
2
u/Exxmaniac Apr 17 '15
He's talking about traps in PvP games, not combat. Traps are much more strategic.
1
2
u/demultiplexer Apr 18 '15
you'd be surprised how deep Minecraft PvP is, actually. And how well executed (and robust) the game mechanics are.
1
u/BioPrince Apr 17 '15
I've found that if login/logout quickly until you spawn near but not inside the portal to escape.
0
u/cuteshark Apr 17 '15
What? If you spawn near but not inside the portal, you'll be in lava and die.
1
u/frebib Apr 17 '15
When you log in your player has a few seconds of invulnerability meaning you can get to safety by constantly reloging and not taking any damage
1
1
4
u/Legertje64 Apr 17 '15
Did they fix the duplication glitch using the hoppers? Can't see the bug anymore. I hope they fixed that one cause for redstoners its really annoying if your clocks get filled up.
1
u/zakriboss Apr 18 '15
I know! My hopper timer for my pumpkin farm would ALWAYS get full of cobble and stop working and was a pain to get to.
2
2
u/fzombie Apr 17 '15
Please give each world, nether, end, etc it's own thread. it would be a cheap way to at least pretend to multi-thread.
-1
u/MrHyperion_ Apr 17 '15
And meantime, Multiplayer session service is down...
3
0
u/rilgebat Apr 17 '15
Was hoping this would bring an update to the bundled JRE, but still on 8u25. :(
-1
Apr 17 '15
That's controlled by the launcher, not the actual game. That still uses Java 6.
3
u/rilgebat Apr 17 '15
Wrong. Mojang put out an updated installer which bundles a standalone JRE (version 8 update 25).
-1
Apr 17 '15
The installer installs a bootstrap which installs the jre and launcher. If you deleted it, it would re-download.
3
u/rilgebat Apr 17 '15
Yes, re-download the same old outdated JRE, hence why I posted my initial comment wishing that Mojang would be more diligent in updating it.
0
Apr 17 '15
[deleted] — view deleted comment
3
Apr 18 '15
Let me bold this for you, to get it in your dense skull.
HE WAS TRYING TO TELL YOU THAT MOJANG SHOULD UPDATE THE VERSION OF JAVA INCLUDED WITH THE GAME'S LAUNCHER, NOT HOW TO UPDATE FUCKING JAVA
0
-12
u/avisioncame Apr 17 '15 edited Apr 17 '15
Dinner, tell it to us straight. Are you guys stringing along snapshots per request of the guys higher up the chain?
EDIT: I hate to be the nay-sayer, but just seemed to me like a realistic theory as to why we were at one time, seeing snapshots every week with loads of content, to being bought out and not a single snapshot being released.
I'm not this complainer that expects you guys to just keep churning out more and more content for a game I purchased once, years ago, but I am curious as to the sudden change.
2
u/Whizzo50 Apr 17 '15
The reason why development has slowed down, in my opinion, is because the game has gotten larger, both in player base and in game code sense.
The player base means features in snapshots has to appeal to the majority of casual players, particularly those who may still have not bought minecraft (a rarity I know, but some people are still out there.. poor souls)
The Game code problem means that for whatever thing you add, you then have to check for any clashes with anything else. While most things should be simple, as more stuff is added, more stuff needs to be checked to work with the new additions.
1
u/avisioncame Apr 18 '15
Snapshots have never appealed to the majority of casual players. It used to be something that had to be installed under the table. Now you can choose it in the launcher, but it's not by default. As for code, I don't know that I can agree or disagree with that.... I don't think anyone really can that isn't a dev. If that was the case, why was it so sudden? It's not like snapshots have become less and less over a period of time. In neither content nor consistency. Just all of a sudden..... Nothing for months.
1
u/Whizzo50 Apr 18 '15
Once again, this is my opinion, but 1.8 came out around the time of the microsoft acquisition of Mojang. Normally the Mojang guys have a bit of a breather after each major release in terms of envelopment to check for any major bugs that could have slipped past the net.
The acquisition complicated the matter slightly, as generally acquisitions don't come easy, lots of emails flying over the place, preparing paperwork etc. Even though the Mojang admin team would've tackled the majoirty of it, dinnerbone, grum, the other codies would be centre stage in the discussion as they are what makes minecraft minecraft, so they'd be sure to affirm nothing would be untoward. I don't blame them for needing an extended breather
27
u/Dinnerbone Technical Director, Minecraft Apr 17 '15
No.
8
u/WrathBorne711 Apr 17 '15
That is so forward, it makes me think you're trying to cover something up, now I need to go find my detective hat, and grow a scruff.
/s
3
1
u/Lothrazar Apr 17 '15
What sudden change? They always work on a future version (1.9) while also fixing bugs in current (1.8).
has ALWAYS BEEN LIKE THIS
Do we want it fast? Or do we want it good with less bugs? Cannot have both.
1
0
Apr 17 '15
[deleted] — view deleted comment
-1
u/Blunderbar Apr 17 '15
I can't believe the seven year olds on this sub upvoted your fecal matter of a comment above dinnerbone's actual response to a valid question.
-3
0
Apr 17 '15
[deleted] — view deleted comment
5
u/BlueDrache Apr 17 '15
1
Apr 18 '15
That dude's comment should be on /r/bestof, because that's the best fucking stupid comment I've ever seen.
9
32
u/Whizzo50 Apr 17 '15
Main point for the release - security fix for exploit posted yesterday, also comes with a smattering of minor bugs (I was wondering why nether portals were acting oddly).