Jump to content
  • Sky
  • Blueberry
  • Slate
  • Blackcurrant
  • Watermelon
  • Strawberry
  • Orange
  • Banana
  • Apple
  • Emerald
  • Chocolate
  • Charcoal

asie

Members
  • Content Count

    24
  • Joined

  • Last visited

  • Days Won

    18

Posts posted by asie

  1. A security and bugfix release of OpenComputers, version 1.8.3, has been released for Minecraft 1.7.10 and 1.12.2.

    It should be available on major mod distribution platforms within about an hour (this post will be updated accordingly):

    This version contains a proper fix for CVE-2023-37261: SSRF to cloud (f.e. AWS, GCP, Azure) service metadata services (IMDS) and local IPv6 addresses not blocked by default, as well as enhancements to the Internet Card's connection filtering system. As such, upgrading to this version is considered essential in particular for server administrators.

    Special thanks to Jonathan Leitschuh for bringing this issue to our attention.

    A detailed write-up about the vulnerability can be found at this link - what follows is a simplified explanation.

    The vulnerability concerns omissions in OpenComputers's packet filtering rules, in particular:

    • The list of "local" IPv4 addresses blocked in OpenComputers by default was incomplete, and did not cover many regions which do not belong to the public Internet, including typical metadata addresses used by cloud services.
    • OpenComputers's Internet Card featured no IPv6 address filtering mechanism whatsoever.

    These two omissions allow an attacker to make HTTP and TCP requests on the server's local network (be it through the non-blocked IPv4 addresses or through IPv6 addresses) using a Computer with an Internet Card. Depending on the hosting provider used, other services available on the private network, and any potential other vulnerabilities, this can be used as a launching point for retrieving sensitive exploitation or probing

    This issue affects every version of OpenComputers with an Internet Card. This includes versions for Minecraft 1.6.x, 1.8.9, 1.10.2 and 1.11.2, for which we cannot currently release satisfactory updated versions due to tooling limitations and time constraints.

    The best solution is to update the mod to OpenComputers 1.8.3, if possible in your situation (you control the modpack and are on a supported Minecraft version). Users of the "GregTech: New Horizons" modpack will receive an update separately and are advised to follow the modpack's announcements. Other than that, here is a list of alternative mitigations that do not require an update:

    • (If you're using OpenComputers 1.2.x, please update. That version has many more long-patched holes.)
    • Using the allow list ("internet.whitelist") to explicitly list allowed domains and IPs.
    • Disabling the Internet Card completely.
    • Adding the following entries to the block list ("internet.blacklist" option) - Note that "224.0.0.0/3" has a side effect of blocking all IPv6 accesses, due to the way IPv6 address handling is implemented in OpenComputers >= 1.3.0, <= 1.8.2:
          "100.64.0.0/10",
          "169.254.0.0/16",
          "192.0.0.0/24",
          "192.0.2.0/24",
          "198.18.0.0/15",
          "198.51.100.0/24",
          "203.0.113.0/24",
          "224.0.0.0/3"

     

  2. Hey! I'm asie, and while I'm not an official certified OpenComputers developer, I contribute to the project from time to time. However, for a long time, I've had some types of patches in the pipeline that couldn't quite reach the upstream - fixes and changes like:

    • a screen renderer rewrite, with major performance boosts;
    • updates to JNLua and LuaJ, fixing bugs and significantly improving performance;
    • Lua 5.4.0 support.

    For the purpose of testing these changes as a way to see if they are ready for mass adoption, I've created a fork of OpenComputers called OC-Staging. It is available right here to download. The more people give their feedback (even if it's as simple as "I've ran it on my server, no problems found!"), the sooner we can bring those changes and improvements to upstream - and also, free resources to working on more exciting changes!

    To give feedback, please post in the feedback thread or report bugs on the issue tracker. You can also find me on the #oc IRC on EsperNet.

  3. A while back, I've quietly released an unofficial, experimental OpenComputers fork called OC-Staging, available here. The key features as of writing include:

    • Optimized GPU rendering code, providing up to 2x better performance (in terms of frame rendering time),
    • LuaJ and JNLua bugfixes and updates,
    • Native Lua performance improvements,
    • Lua 5.4 support! (currently on lua-5.4.0-beta)

    This is the feedback thread for this fork, as input is sought before merging the changes back into OpenComputers due to their potentially invasive nature (for bug reports, please use the issue tracker).

  4. I don't know. Make sure OpenOS is properly installed and that you're not booting from a floppy disk?

    Also, you may want to update - OpenComputers 1.6.1 is pretty old, 1.5 years old in fact.

  5. Those of you who have followed my OpenComputers work might be aware of CTIF, my high-quality image converter for OpenComputers. However, it has always required an external converter to pre-process image files. Others may be aware of greaser's ocpng, an utility-turned-library for displaying regular PNG files without pre-processing - however, that capped out at 160x50 as it only used low-resolution characters.

    However, I am proud to present pngview - a .PNG viewer right in OpenComputers, based off greaser's ocpng library but capable of displaying images at up to 320x200. Unfortunately, it does not display images as well as CTIF - it has far more severe limitations related to being a simple Lua script that, as such, cannot perform calculations that complex. In particular, it handles slowly changing gradients a lot worse and is incapable of finding additional colors to supplement the image's palette the way CTIF does.

    bWAR

    Comparison: the top image is viewed via pngview, the bottom image is rendered via CTIF.

    Known issues:

    • Currently, it only works on Tier 3, as the palette calculation process relies primarily on the 240 RGB colors exclusive to it.
    • It does not perform any image scaling, so ~320x200 is the maximum image size (on Tier 3).

    Downloads:

    pngview is part of a Lua script collection called octagon.

  6. On 4/25/2017 at 4:08 AM, RandomRedMage said:

    Was wondering if this was still being worked on? It's been a while since I last poked my head in, but would be great to have some apis to work with it beyond just the simple viewer to view images.

    I'm not focusing on APIs myself - the viewers are provided as part of the source code distribution and I'd love if someone turned them into a proper API!

    Anyhow, CTIF 0.2.0 is out! It improves the image rendering quality a bit (especially on "tier 2" - sadly, at the cost of performance) and makes usage of OpenComputers's higher resolutions (160*50 is only an area, not the actual maximum size).

  7. I've spent a fair amount of time trying to get the maximum image quality out of OpenComputers. It all began with BTM15's quick need for a presentation tool, giving us 160x100 at 256 colors - not a huge accomplishment, but a start. BTM16 later brought us 320x100 with adaptive palettes - better, but still not quite there.

     

    Recently, I have started working on it again, and thanks to a mini-competition between me and GreaseMonkey I managed to arrive at something rather high quality - the ChenThread Image Format, complete with its own CTIFConverter. It is 320x200, thanks to the new font's block-based nature of the Braille area of Unicode. (It also supports a 160x100 @ 16 color mode for OpenComputers' Tier 2 mode.)

     

    The converter, source code and reference viewer is available here. Keep in mind that, as this is a reference viewer, it will not be as fast as it could be - it does no GPU call optimizations whatsoever beyond the simplest ones. I will try to release a better version later.

     

    Here's an example of the quality you can get out of this:

     

    bkSF.png

     

    hLds.png

     

    M31p.png

     

    Ox0C.png

  8. This is an old post! The new Computronics for 1.7.10 and beyond can be found at here (mirror).

     

     

    Hey! This is my new mod, Computronics. It adds some new interesting peripherals, including simple Cameras, Cassette Tapes and MiscP's Iron Note Blocks.

    The Cameras let you (and Robots) gather information (distance) about your surroundings, the Cassette Tapes let you record and play back music with a special format and... Iron Note Blocks are noteblocky. More features are planned, though!

    RTYChuDl.png

    WIKI AND DOWNLOADS: http://mc.shinonome.ch  https://wiki.vexatos.com/wiki:computronics

     

    Edit by Sangar: changed URL as per Vexatos' request.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use and Privacy Policy.