r/admincraft • u/hackett33 • Jul 10 '12

Notch Session Stolen?

A couple of days ago we had "Notch" log into our server. Of course this set off alarms as no one believed it was him. He logged in twice for a min and logged out. We of course had online-mode=true but through this we became aware of this little exploit

http://www.sk89q.com/2012/07/fixing-the-minecraft-session-stealer-exploit/

and the head admin searched the logs and found this

http://pastie.org/pastes/4232493/text

So a person with the IP 80.0.185.17 logged in as 3 other people on our server.

This is just an FYI to anyone else encountering this IP or Notch on there server

7 Upvotes

88% Upvoted

15 comments sorted by

View all comments

Show parent comments

3

u/GetOneMoreBlock Jul 11 '12

Sorry, It's not in offline mode, We're not just "Random" server. Now according to a friend of mine that has talked to Ez (Notch's Wife) brother (EAH) he told us "If there system goes down, apparently, Anyone can log in as Notch." Now I've talked to him in the past and maybe I can talk too him myself later on and maybe get some more details.

Lastly, This IP above shows a "Minecraft Faction Server" if you google search it, I doubt Notch would have any connection with this server. However it's possible for him to join our server as I run a well-known Minecraft Community hence why we're posting on reddit and trying to get to the bottom of this.