Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mark known and potential MALWARE mods as incompatible #1389

Merged
merged 2 commits into from
Feb 10, 2022

Conversation

originalfoo
Copy link
Member

@originalfoo originalfoo commented Feb 10, 2022

EDIT:

Steam user Chaos, aka Holy Water (same person), has added malware specifically targeting multiple modders by their Steam IDs, including TM:PE devs, to Network Extensions 3 mod (which to this day still contains an old copy of TM:PE lol).

A sample of code from NExt3:

https://github.com/drok/NetworkExtensions3/blob/0c705c394e6bc48ad5776941bf73d8c5629a183a/Transit.Framework/_Extensions/NetInfoExtensions.Lane.cs#L29-L38

And an image if he blocks access to the repo at later date:

sample code from NExt3

He already has a list of ~60 people in NExt 3 - including people who worked on NExt back in the day, myself included! (to this day NExt3 still has "Transit Addon Mod" components), to alter road speeds should they use the mod.

He has also been caught (by actually telling everyone he did it) adding a "tripwire" to his mods so that they break if used with the main Harmony mod that most of the community uses, and then he uses those bugs as "evidence" that the mod he's attacking is broken (it's not, obviously given the 1+ million users it has!).

While altering road speeds is not a big deal, the fact that he's making lists and actively disrupting the community - whilst at the same time claiming that he is the victim of harrassment - is cause for concern. Noably, Harmony includes Mono Cecil. And now it's in the hands of a lunatic with a track record of harassing people, targeted malware, and tripwire bugs.

As such, there's no way we can support his mods - and there's no telling what he's put in his Harmony mod which uses Mono Cecil.

Steam user `Chaos`, aka `Holy Water` (same person), has added malware specifically targeting multiple modders by their Steam IDs, including TM:PE devs, to Network Extensions 3 mod (which to this day still contains an old copy of TM:PE lol).

He has also been caught (by actually telling everyone he did it) adding a "tripwire" to his mods so that they break if used with the main Harmony mod that most of the community uses.
@originalfoo originalfoo added EXTERNAL Mod conflict or other external factor COMPATIBILITY Mod (in)compatibility / checker labels Feb 10, 2022
@originalfoo originalfoo self-assigned this Feb 10, 2022
@krzychu124 krzychu124 merged commit e18058a into master Feb 10, 2022
@krzychu124 krzychu124 deleted the block-malware-mods branch February 10, 2022 19:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
COMPATIBILITY Mod (in)compatibility / checker EXTERNAL Mod conflict or other external factor
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants