Is L2J's gameserver security indefinitelly compromised ?

It's very easy to call everyone an AI slop vibe coder nowadays when they disagree with you. Let me educate you a bit on the history of Java emulation of Lineage 2 to make my point clearer.

L2J took a very bad turn around 2010.

Around that date, most of people people who were capable programmers that created L2J and L2JFree simply for fun, were starting to get replaced by people who were primarily server-owners or paid-developers who simply wanted either recognition or to steer the project towards personal agendas.

A lot of the L2JServer code got rewritten back then, by so called "senior developers" who decided to "move things to the Datapack" and other niche ideas. This "rewrite" of older code lead to the introduction of most exploits that work today and that AI keeps finding.

For example, around that time, Zoey76 who was leading L2JServer decided to rewrite the favourites module of the community board. That code was perfectly fine, and he rewrote it in a very bad way that introduced a memory leak that can be triggered by a malicious user that can lead to OOM on the server. A lot of packs who forked from L2JServer both private and public have this issue nowadays.

Generally the quality of the developers after 2010 went down because most of these people were qualified asslickers and not qualified developers.

The same rewrite era led to the introduction of a nasty adena dupe exploit that is currently working in many servers using re-bidding from a clan leader that changed a clan and then cancelling the bit. This was fixed, new developers regressed it.

And it's not just the era of L2JServer's 2010+ years. Later on Mobius took control of the scene and he has done a lot of such mistakes too. And it's not just open source. L2Scripts, check the 2020 leak, you can craft manor packets to plant baium rings instead of crops. aCis has messed up zone system, you can become invulnerable in multiple ways and nobody can kill you too. I can go on and on about how insecure ALL the packs are.

"But if you point an AI to the code it will tell you the security issues". Note quietly. AI is a reflection of your skills, if you dont know where to look, how to look, how the mechanics of the code work it wont find anything. There are people who use AI and people who CAN USE AI. It's different.

The reality is for someone who knows what he is doing and an AI agent, it's easy to "demote" the security of all these decent packs to "mediocre".

In some months I'm planning to open a server of my own. I'm terrified to the idea of not knowing all my security vulnerabilities and of a hacker who can come and TRASH it for fun ...

These are existing risks for all of us, that a lot of you dont seem to be taking under consideration ...

By aguy · 1 minute ago1 min
Is L2J's gameserver security indefinitelly compromised ?

It couldn't have been explained better.
People who consider themselves senior developers because they know how to write text to an AI, whose QA is simply to jump in and see if it works without understanding the actual mechanics or what they entail, is frustrating.
Furthermore, treating developers as if they're nothing because AI can do the same things we do is simply ridiculous.
Imagine you have to create a recipe for a contest and you have zero cooking experience, and your opponent is a professional chef. Even using AI, the odds of winning are low. The same applies here.

By rexen · 1 hour ago1 hr
Is L2J's gameserver security indefinitelly compromised ?

@aguy For me, its not sad at all. Developers are finally saved to write whatever they want, however they want, since apparently anyone can build anything nowadays.

People like you take a codebase built through years of blood, sweat, and tears, dismiss the developers behind it, and then complain when exploits and vulnerabilities aren't fixed because ai told them that needs fixing.

Do you even comprehend what it takes to maintain an open source ? Do you have any idea how many clueless people are flooding projects with dozens of pull requests every day, many of which contain ai generated hallucinations ?

Do you understand what it takes for a developer to read, review, test, and fully understand ai slop proposed fix before blindly merging it into production ?

Imagine driving a bus with 20+ people constantly telling you how to press the pedals, steer the wheel, and make turns when none of them even has a drivers license because ai told them how a bus should be driven.

By Seamless · 2 hours ago2 hr
NPC Temples Pack with Effects (Interlude).7z

Can you show me crash log?

By NevesOma · 4 hours ago4 hr
[L2J] L2ByPass Reborn

Update: dungeons, invasions and a wiki
A new update is live on L2ByPass. The highlights:
The ByPass Dungeon — your own instance of the Four Sepulchers, solo or with a party of 4. Clear five rooms and a boss in 30 minutes for 4,000 Coin of Luck and 100 Golden Box each (party clear).
Invasions — while a run is going, other players can invade it. Break the Invaders' Gate to keep them out, or lose your reward to them.
Votes that pay — type .vote in game: every vote gives a Vote Gem, spent at the Vote Shop on Portal Keys, the Dungeon Hourglass and the Scroll of Valor.
The wiki is open — every item, drop, NPC, event and command, plus a guide to your first dungeon run: https://wiki.l2bypass.com
Also: Energy Stones that recharge themselves, buffs back after a monster cancel, a bigger Scarlet van Halisha drop, and a pile of interface fixes.
Full list: https://l2bypass.com/news/2026-11-10-dungeons-invasions-and-a-wiki
Discord: https://discord.gg/Nt9XSwG72R

By L2ByPass · 4 hours ago4 hr

l2 Utils problem

Featured Replies

Create an account or sign in to comment

Posts

Is L2J's gameserver security indefinitelly compromised ?

Is L2J's gameserver security indefinitelly compromised ?

Is L2J's gameserver security indefinitelly compromised ?

NPC Temples Pack with Effects (Interlude).7z

[L2J] L2ByPass Reborn

Topics

Lagacy L2REBORN

Black Chaotic Weapons

🤖 HeistBot

NPC Temples Pack with Effects (Interlude).7z

L2 Good Vs Evil !

Important Information

Account

Navigation

Search

Configure browser push notifications

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)