Skip to content

Is L2J's gameserver security indefinitelly compromised ?

Featured Replies

  • Author

Tell me the pack you are using and you consider high quality. I wanna use it too. I'm using L2JMobius and the pack is simply not production-ready. I am looking for a pack that I can use to make a server without having to worry about every hacker around.

Some posts above, another hot headed debater, Atumenos, made similar claims to you, yet once I told him to reccomend me a secure pack to use, he vanished.

So question is, are you an all-talk-no-action chicken like him too 😆 ?

Why would I? That's an argument you invented yourself.

Sorry I can't spend all day behind a keyboard entertaining idiots. Some of us actually have work to do.

And perhaps you should get back to driving, if that's even your actual job, instead of pretending a few AI prompts made you a cybersecurity expert.

  • Author

You already said your previous post was the last one and that you won't post again. Why are you posting again especially if you have work ?

And it's Sunday, atleast I don't need to work on Sundays, and I'm not even a highly priviledged white collar worker. You look like an educated, knowledgable person, if you have work on Sunday, you better re-evaluate some life priorities ...

Edited by aguy

First of all, I never said I would not reply. That's another lie you pulled out of your ass.

You keep inventing statements nobody made, then arguing against your own bullshit as if you've proven something.

Your smug arrogance would be amusing if your reading comprehension weren't so embarrassingly poor.

Learn to distinguish reality from your own fabrications before making an even bigger fool of yourself.

  • Author
59 minutes ago, Atumenos said:

First of all, I never said I would not reply. That's another lie you pulled out of your ass.

You keep inventing statements nobody made, then arguing against your own bullshit as if you've proven something.

Your smug arrogance would be amusing if your reading comprehension weren't so embarrassingly poor.

Learn to distinguish reality from your own fabrications before making an even bigger fool of yourself.


Aaaaand ... you are still here ...

What happend to that important work you have to do on Sunday ?

How about you get on your trike and go do that work eh ?

Edited by aguy

  • 2 weeks later...

@aguy For me, its not sad at all. Developers are finally saved to write whatever they want, however they want, since apparently anyone can build anything nowadays.

People like you take a codebase built through years of blood, sweat, and tears, dismiss the developers behind it, and then complain when exploits and vulnerabilities aren't fixed because ai told them that needs fixing.

Do you even comprehend what it takes to maintain an open source ? Do you have any idea how many clueless people are flooding projects with dozens of pull requests every day, many of which contain ai generated hallucinations ?

Do you understand what it takes for a developer to read, review, test, and fully understand ai slop proposed fix before blindly merging it into production ?

Imagine driving a bus with 20+ people constantly telling you how to press the pedals, steer the wheel, and make turns when none of them even has a drivers license because ai told them how a bus should be driven.

Edited by Seamless

1 hour ago, Seamless said:

@aguy For me, its not sad at all. Developers are finally saved to write whatever they want, however they want, since apparently anyone can build anything nowadays.

People like you take a codebase built through years of blood, sweat, and tears, dismiss the developers behind it, and then complain when exploits and vulnerabilities aren't fixed because ai told them that needs fixing.

Do you even comprehend what it takes to maintain an open source ? Do you have any idea how many clueless people are flooding projects with dozens of pull requests every day, many of which contain ai generated hallucinations ?

Do you understand what it takes for a developer to read, review, test, and fully understand ai slop proposed fix before blindly merging it into production ?

Imagine driving a bus with 20+ people constantly telling you how to press the pedals, steer the wheel, and make turns when none of them even has a drivers license because ai told them how a bus should be driven.

It couldn't have been explained better.

People who consider themselves senior developers because they know how to write text to an AI, whose QA is simply to jump in and see if it works without understanding the actual mechanics or what they entail, is frustrating.

Furthermore, treating developers as if they're nothing because AI can do the same things we do is simply ridiculous.

Imagine you have to create a recipe for a contest and you have zero cooking experience, and your opponent is a professional chef. Even using AI, the odds of winning are low. The same applies here.

  • Author

It's very easy to call everyone an AI slop vibe coder nowadays when they disagree with you. Let me educate you a bit on the history of Java emulation of Lineage 2 to make my point clearer.

L2J took a very bad turn around 2010.

Around that date, most of people people who were capable programmers that created L2J and L2JFree simply for fun, were starting to get replaced by people who were primarily server-owners or paid-developers who simply wanted either recognition or to steer the project towards personal agendas.

A lot of the L2JServer code got rewritten back then, by so called "senior developers" who decided to "move things to the Datapack" and other niche ideas. This "rewrite" of older code lead to the introduction of most exploits that work today and that AI keeps finding.

For example, around that time, Zoey76 who was leading L2JServer decided to rewrite the favourites module of the community board. That code was perfectly fine, and he rewrote it in a very bad way that introduced a memory leak that can be triggered by a malicious user that can lead to OOM on the server. A lot of packs who forked from L2JServer both private and public have this issue nowadays.

Generally the quality of the developers after 2010 went down because most of these people were qualified asslickers and not qualified developers.

The same rewrite era led to the introduction of a nasty adena dupe exploit that is currently working in many servers using re-bidding from a clan leader that changed a clan and then cancelling the bit. This was fixed, new developers regressed it.

And it's not just the era of L2JServer's 2010+ years. Later on Mobius took control of the scene and he has done a lot of such mistakes too. And it's not just open source. L2Scripts, check the 2020 leak, you can craft manor packets to plant baium rings instead of crops. aCis has messed up zone system, you can become invulnerable in multiple ways and nobody can kill you too. I can go on and on about how insecure ALL the packs are.

"But if you point an AI to the code it will tell you the security issues". Note quietly. AI is a reflection of your skills, if you dont know where to look, how to look, how the mechanics of the code work it wont find anything. There are people who use AI and people who CAN USE AI. It's different.

The reality is for someone who knows what he is doing and an AI agent, it's easy to "demote" the security of all these decent packs to "mediocre".

In some months I'm planning to open a server of my own. I'm terrified to the idea of not knowing all my security vulnerabilities and of a hacker who can come and TRASH it for fun ...

These are existing risks for all of us, that a lot of you dont seem to be taking under consideration ...

Edited by aguy

Create an account or sign in to comment

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.