5 ms·

Why deny your kid the ability to mod?!? Dude, you're putting your kid in a box by not letting him explore the world of modding. The ability to add something new

Why deny your kid the ability to mod?!? Dude, you're putting your kid in a box by not letting him explore the world of modding. The ability to add something new to your game is a powerful one and I think it can help a kid wrap his head around how a game is working internally. I think part of a parent's responsibilities toward their kid is to encourage the kid to explore the world (in safe ways of course) and I think minecraft mods are probably a pretty safe way especially if you're approving them one by one. You're stifling your kid's creativity every time you say no to one of his proposed ideas without just consideration. Just my opinion.

kabdib 12y ago
Well, after the second time I flattened and rebuilt my son's machine because it was infected with mod-carried malware, I was done. I'd been dubious prior to letting him try them out. It's hard for kids to be safe about downloading things.
- cookiecaper 12y ago
  This is just a testament to Mojang's poor mod system. They should have an API that only allows mods to perform safe, sandboxed operations and an in-game mod browsing tool to prevent things like that, especially when such a large percentage of their audience is children.
  - kabdib 12y ago
    No kidding. As an API provider, Mojang is pretty terrible.
  - nickodell 12y ago
    Or, y'know, any kind of API, instead of people overwriting mojang's code.
  - kllrnohj 12y ago
    Unless they add multi-processing to the mod system, they can't. You can't "sandbox" a Java class like that. You can't deny it access to JNI. You can't deny it access to java.io. You can have the host OS do this, of course, but now we're talking something far, far more complex than any mod system ever. Which is, frankly, an absurd demand. Mojang should have a mod API, but that won't do diddly squat to improve saftey. Don't execute code if you don't want that code to run.
    - spand 12y ago
      Of course you can deny it access to JNI [1]. The Java platform has had this built in since forever. This is how applets work. Aside from sandbox exploits classes in Java can be locked down so much that they can pretty much only allocate memory and burn cycles. [1] http://docs.oracle.com/javase/7/docs/api/java/lang/SecurityManager.html#checkLink%28java.lang.String%29 http://docs.oracle.com/javase/7/docs/api/java/lang/SecurityM...
      - kllrnohj 12y ago
        Java Applets? That thing that had exploits like clockwork? Yeah, that worked great Regardless did you even bother looking at the documentation of SecurityManager? That would be a disaster to try and support. It can't clamp down per-library, it's all about current thread. Mods run in the same thread, they have to. So now you're suggesting that every. single. call into or out of a mod is guarded manually by updates to a permission manager that you are preventing the mod from modifying via reflection through... magic? Yeah, there's no way in hell that would ever work.
    - eru 12y ago
      We execute untrusted HTML all the time. (And javascript.) You might argue that HTML is not a general purpose language, and that is exactly true. That's what makes it easier to sandbox.
      - ben0x539 12y ago
        To be fair, browsers spend a lot of effort on making sure their sandbox works as intended.
- TeMPOraL 12y ago
  Well, that's how they learn. That's probably how you yourself learned it. Kids need to be able to tinker with computers, and that includes both downloading malware and cleaning the machine including possibly reinstalling it from the ground up. That's how people grow their digital immune system that helps them navigate technology landscape safely. Constantly fixing everything for our kids will lead to another generation of computer illiterates. This article covers this topic pretty well: http://coding2learn.org/blog/2013/07/29/kids-cant-use-computers/ http://coding2learn.org/blog/2013/07/29/kids-cant-use-comput...
- peteretep 12y ago
  So give him a VM or image the machine. You have an ability that parents who aren't tech savvy don't.
- roghummal 12y ago
  "flattened and rebuilt" What's "flattened"? Like you stomped on it? Grats on raising another dumb user.
- Filligree 12y ago
  Do it for him, then. If that would be too much time, use the FTB launcher; the modpacks there should be about as safe as it gets. Or, hell, use my modpack at http://madoka.brage.info/ http://madoka.brage.info/, though that's pretty much just TPPI anyway. I'm a random internet person on hacker news; you know you can trust me.

kabdib 12y ago

Well, after the second time I flattened and rebuilt my son's machine because it was infected with mod-carried malware, I was done. I'd been dubious prior to letting him try them out. It's hard for kids to be safe about downloading things.

cookiecaper 12y ago
This is just a testament to Mojang's poor mod system. They should have an API that only allows mods to perform safe, sandboxed operations and an in-game mod browsing tool to prevent things like that, especially when such a large percentage of their audience is children.
- kabdib 12y ago
  No kidding. As an API provider, Mojang is pretty terrible.
- nickodell 12y ago
  Or, y'know, any kind of API, instead of people overwriting mojang's code.
- kllrnohj 12y ago
  Unless they add multi-processing to the mod system, they can't. You can't "sandbox" a Java class like that. You can't deny it access to JNI. You can't deny it access to java.io. You can have the host OS do this, of course, but now we're talking something far, far more complex than any mod system ever. Which is, frankly, an absurd demand. Mojang should have a mod API, but that won't do diddly squat to improve saftey. Don't execute code if you don't want that code to run.
  - spand 12y ago
    Of course you can deny it access to JNI [1]. The Java platform has had this built in since forever. This is how applets work. Aside from sandbox exploits classes in Java can be locked down so much that they can pretty much only allocate memory and burn cycles. [1] http://docs.oracle.com/javase/7/docs/api/java/lang/SecurityManager.html#checkLink%28java.lang.String%29 http://docs.oracle.com/javase/7/docs/api/java/lang/SecurityM...
    - kllrnohj 12y ago
      Java Applets? That thing that had exploits like clockwork? Yeah, that worked great Regardless did you even bother looking at the documentation of SecurityManager? That would be a disaster to try and support. It can't clamp down per-library, it's all about current thread. Mods run in the same thread, they have to. So now you're suggesting that every. single. call into or out of a mod is guarded manually by updates to a permission manager that you are preventing the mod from modifying via reflection through... magic? Yeah, there's no way in hell that would ever work.
  - eru 12y ago
    We execute untrusted HTML all the time. (And javascript.) You might argue that HTML is not a general purpose language, and that is exactly true. That's what makes it easier to sandbox.
    - ben0x539 12y ago
      To be fair, browsers spend a lot of effort on making sure their sandbox works as intended.
TeMPOraL 12y ago
Well, that's how they learn. That's probably how you yourself learned it. Kids need to be able to tinker with computers, and that includes both downloading malware and cleaning the machine including possibly reinstalling it from the ground up. That's how people grow their digital immune system that helps them navigate technology landscape safely. Constantly fixing everything for our kids will lead to another generation of computer illiterates. This article covers this topic pretty well: http://coding2learn.org/blog/2013/07/29/kids-cant-use-computers/ http://coding2learn.org/blog/2013/07/29/kids-cant-use-comput...
peteretep 12y ago
So give him a VM or image the machine. You have an ability that parents who aren't tech savvy don't.
roghummal 12y ago
"flattened and rebuilt" What's "flattened"? Like you stomped on it? Grats on raising another dumb user.
Filligree 12y ago
Do it for him, then. If that would be too much time, use the FTB launcher; the modpacks there should be about as safe as it gets. Or, hell, use my modpack at http://madoka.brage.info/ http://madoka.brage.info/, though that's pretty much just TPPI anyway. I'm a random internet person on hacker news; you know you can trust me.