Minecraft: Difference between revisions

Line 31:

[[wikipedia:Minecraft|Minecraft]] began taking action against mod developers and servers in 2023 for using firearms, which was deemed 'adult' by their [[End-user license agreement|EULA]]. When asked for clarification of the changes made to their EULA, Mojang gave little response, and eventually pointed them to a new EULA which had been changed without either informing consumers about the change or asking for permission to change the contract. This information was available only internally, and was later revealed by whistleblowers, since the documents holding the internal changes to their EULA was held under NDA.

In addition they selectively ~~ignores~~ their own EULA rules on "gambling" (loot boxes and literally gambling) ~~servers~~, and even made contract with [[wikipedia:Nerf|Nerf]] to create Minecraft inspired weapons and in game items, while still refusing to allow weapon mods.<ref>{{Cite web |last=Anderca |first=Cristina |date=2023-10-02 |title=NERF World brings blasters into Minecraft |url=https://www.minecraft.net/en-us/article/nerf-world-brings-blasters-minecraft |access-date=2025-08-19 |work=Minecraft}}</ref>

In addition they selectively ignore their own EULA rules on "gambling" (loot boxes and literally gambling) servers, and even made contract with [[wikipedia:Nerf|Nerf]] to create Minecraft inspired weapons and in game items, while still refusing to allow weapon mods.<ref>{{Cite web |last=Anderca |first=Cristina |date=2023-10-02 |title=NERF World brings blasters into Minecraft |url=https://www.minecraft.net/en-us/article/nerf-world-brings-blasters-minecraft |access-date=2025-08-19 |work=Minecraft}}</ref>

===Shutting down of community-run Minecraft servers by Mojang===

Line 41:

===Minecraft Beta pre-1.8's lack of authentication===

In version Beta 1.8, Mojang has changed the endpoint ~~that's~~ used for authentication on Minecraft servers from "www.minecraft.net" to "session.minecraft.net". Unknown amount of time later the original endpoint used for the authentication was shut down, breaking authentication support for several old Minecraft versions, despite no actual changes in the ~~behaviour~~ of the endpoint. The latter endpoint still works, despite being insecure (supports HTTP requests, with token being within the URL parameters) - this means that the shutdown is likely not a security concern.

In version Beta 1.8, Mojang has changed the endpoint used for authentication on Minecraft servers from "www.minecraft.net" to "session.minecraft.net". Unknown amount of time later the original endpoint used for the authentication was shut down, breaking authentication support for several old Minecraft versions, despite no actual changes in the behavior of the endpoint. The latter endpoint still works, despite being insecure (supports HTTP requests, with token being within the URL parameters) - this means that the shutdown is likely not a security concern.

Lack of authentication has caused several Minecraft servers to:

@@ Line 31: / Line 31: @@
 [[wikipedia:Minecraft|Minecraft]] began taking action against mod developers and servers in 2023 for using firearms, which was deemed 'adult' by their [[End-user license agreement|EULA]]. When asked for clarification of the changes made to their EULA, Mojang gave little response, and eventually pointed them to a new EULA which had been changed without either informing consumers about the change or asking for permission to change the contract. This information was available only internally, and was later revealed by whistleblowers, since the documents holding the internal changes to their EULA was held under NDA.
-In addition they selectively ignores their own EULA rules on "gambling" (loot boxes and literally gambling)  servers, and even made contract with [[wikipedia:Nerf|Nerf]] to create Minecraft inspired weapons and in game items, while still refusing to allow weapon mods.<ref>{{Cite web |last=Anderca |first=Cristina |date=2023-10-02 |title=NERF World brings blasters into Minecraft |url=https://www.minecraft.net/en-us/article/nerf-world-brings-blasters-minecraft |access-date=2025-08-19 |work=Minecraft}}</ref>
+In addition they selectively ignore their own EULA rules on "gambling" (loot boxes and literally gambling) servers, and even made contract with [[wikipedia:Nerf|Nerf]] to create Minecraft inspired weapons and in game items, while still refusing to allow weapon mods.<ref>{{Cite web |last=Anderca |first=Cristina |date=2023-10-02 |title=NERF World brings blasters into Minecraft |url=https://www.minecraft.net/en-us/article/nerf-world-brings-blasters-minecraft |access-date=2025-08-19 |work=Minecraft}}</ref>
 ===Shutting down of community-run Minecraft servers by Mojang===
@@ Line 41: / Line 41: @@
 ===Minecraft Beta pre-1.8's lack of authentication===
 {{Main|Minecraft Beta pre-1.8's lack of authentication}}
-In version Beta 1.8, Mojang has changed the endpoint that's used for authentication on Minecraft servers from "www.minecraft.net" to "session.minecraft.net". Unknown amount of time later the original endpoint used for the authentication was shut down, breaking authentication support for several old Minecraft versions, despite no actual changes in the behaviour of the endpoint. The latter endpoint still works, despite being insecure (supports HTTP requests, with token being within the URL parameters) - this means that the shutdown is likely not a security concern.
+In version Beta 1.8, Mojang has changed the endpoint used for authentication on Minecraft servers from "www.minecraft.net" to "session.minecraft.net". Unknown amount of time later the original endpoint used for the authentication was shut down, breaking authentication support for several old Minecraft versions, despite no actual changes in the behavior of the endpoint. The latter endpoint still works, despite being insecure (supports HTTP requests, with token being within the URL parameters) - this means that the shutdown is likely not a security concern.
 Lack of authentication has caused several Minecraft servers to: