Jump to content
  • Sky
  • Blueberry
  • Slate
  • Blackcurrant
  • Watermelon
  • Strawberry
  • Orange
  • Banana
  • Apple
  • Emerald
  • Chocolate
  • Charcoal
  1. OpenComputers

    1. Announcements

      OpenComputers official announcements.

      130
      posts
    2. Feedback

      Tell us what you think.

      421
      posts
    3. IRC

      #OC channel discussion
      irc.esper.net #oc

      26
      posts
  2. Code Central

    1. Support

      Ask for support from the OpenComputers community

      4.3k
      posts
    2. Showcase

      Showcase what you have created for OC. No 'malware' or other junk!

      3k
      posts
    3. Tutorials

      Help other users out. Please no 'false tutorials'

      138
      posts
  3. Addons & More

    1. Addons Mods

      Show off your OC addons mods

      245
      posts
    2. Architectures

      Discussions for Architectures

      183
      posts
    3. OpenEngineering Task Force

      Discussion board for the OETF documents

      95
      posts
  4. General

    1. Lounge

      Just lounge around or have an open discussion.

      336
      posts
    2. Forum Games

      Fight boredom!

      73
      posts
    3. Showcase

      Show off your creations! (not for your programs)

      154
      posts
    4. Servers

      A place to advertise your servers

      188
      posts
  5. Archives

    1. Public Archives

      OpenComputers public archive forum

      8
      posts
  • Recently Browsing   0 members

    No registered users viewing this page.

  • Who's Online   0 Members, 0 Anonymous, 93 Guests (See full list)

    There are no registered users currently online

  • Topics

  • Posts

    • Known bugs (I may update this list with new comments): Special colours (comments for ex.) will be forgotten if their corresponding character is offscreen (this was really funny the first time I found this). Tabulations are written to the screen as "HT", are not highlighted when selected, and cannot be added in. Suggested additions: A way to change the colours associated with keywords without going through the code and changing it (maybe in the config file?)
    • A security and bugfix release of OpenComputers, version 1.8.3, has been released for Minecraft 1.7.10 and 1.12.2. It should be available on major mod distribution platforms within about an hour (this post will be updated accordingly): Modrinth: Download CurseForge: Download GitHub: 1.7.10, 1.12.2 This version contains a proper fix for CVE-2023-37261: SSRF to cloud (f.e. AWS, GCP, Azure) service metadata services (IMDS) and local IPv6 addresses not blocked by default, as well as enhancements to the Internet Card's connection filtering system. As such, upgrading to this version is considered essential in particular for server administrators. Special thanks to Jonathan Leitschuh for bringing this issue to our attention. A detailed write-up about the vulnerability can be found at this link - what follows is a simplified explanation. The vulnerability concerns omissions in OpenComputers's packet filtering rules, in particular: The list of "local" IPv4 addresses blocked in OpenComputers by default was incomplete, and did not cover many regions which do not belong to the public Internet, including typical metadata addresses used by cloud services. OpenComputers's Internet Card featured no IPv6 address filtering mechanism whatsoever. These two omissions allow an attacker to make HTTP and TCP requests on the server's local network (be it through the non-blocked IPv4 addresses or through IPv6 addresses) using a Computer with an Internet Card. Depending on the hosting provider used, other services available on the private network, and any potential other vulnerabilities, this can be used as a launching point for retrieving sensitive exploitation or probing This issue affects every version of OpenComputers with an Internet Card. This includes versions for Minecraft 1.6.x, 1.8.9, 1.10.2 and 1.11.2, for which we cannot currently release satisfactory updated versions due to tooling limitations and time constraints. The best solution is to update the mod to OpenComputers 1.8.3, if possible in your situation (you control the modpack and are on a supported Minecraft version). Users of the "GregTech: New Horizons" modpack will receive an update separately and are advised to follow the modpack's announcements. Other than that, here is a list of alternative mitigations that do not require an update: (If you're using OpenComputers 1.2.x, please update. That version has many more long-patched holes.) Using the allow list ("internet.whitelist") to explicitly list allowed domains and IPs. Disabling the Internet Card completely. Adding the following entries to the block list ("internet.blacklist" option) - Note that "224.0.0.0/3" has a side effect of blocking all IPv6 accesses, due to the way IPv6 address handling is implemented in OpenComputers >= 1.3.0, <= 1.8.2: "100.64.0.0/10", "169.254.0.0/16", "192.0.0.0/24", "192.0.2.0/24", "198.18.0.0/15", "198.51.100.0/24", "203.0.113.0/24", "224.0.0.0/3"  
    • Most of the features in OC-Staging, with the exception of renderer rewrites, have been merged to OC 1.8.0+. This should no longer be used.
    • Thx for the correction! Glad you like it
    • To access the remaining slots you need to connect through character's head.  
  • Popular Contributors

    Nobody has received reputation this week.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use and Privacy Policy.