4 ms·
I don't know anything about the Minecraft code, but can't people just run the code with a serialization filter? This is available as a backport all the way bac
by invalidname 3y ago
I don't know anything about the Minecraft code, but can't people just run the code with a serialization filter?
This is available as a backport all the way back to Java 8 and is just a command line option.
https://debugagent.com/java-serialization-filtering-prevent-0-day-security-vulnerabilities https://debugagent.com/java-serialization-filtering-prevent-...
- pjmlp 3y agoI guess for the same reason many mods have lousy performance. They are written by people that kind of dabble in Java, not people that are actually knowledgeable in the ways of Java and the JVM.
- space_fountain 3y agoAlso many are written by very new programmers. There’s a Minecraft mod out there that I wrote in my second semester of college for a Minecraft server with at the time hundreds to a thousand concurrent players. As far as I could tell all the other mods on the sever were also written by college students. Talented college students but still. As far as I know it’s still bouncing around in the open source world and being used, but I definitely didn’t know what I was doing then and it is by far the largest bit of Java I’ve written
- lloydatkinson 3y agoI would say it’s more the fact that many are written by people very new to programming as a whole. Lots of spaghetti.