This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.
On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that
| from requests.adapters import HTTPAdapter, Retry | |
| from requests import Session | |
| retries = Retry( | |
| total=5, backoff_factor=1, status_forcelist=[502, 503, 504] | |
| ) | |
| session = Session() # reuse tcp connection | |
| session.mount("http://", HTTPAdapter(max_retries=retries)) | |
| session.mount("https://", HTTPAdapter(max_retries=retries)) |
| import { Ai } from './vendor/@cloudflare/ai.js'; | |
| export default { | |
| async fetch(request, env) { | |
| const ai = new Ai(env.AI); | |
| // prompt - simple completion style input | |
| // let simple = { | |
| // prompt: 'Tell me a joke about Cloudflare' | |
| // }; |
| DEMZF-UCKEE-HB222-DJDDH-594U5 | |
| DMAZF-UCKEE-A6222-8CADP-HQZ7H | |
| DPAZF-UCKEE-FH222-ET546-DLRGT | |
| DRNZF-UCKEE-UK222-RWNLU-XVZH7 | |
| DSBZF-UCKEE-BF222-K24JB-S9JLC | |
| DSHZF-UCKEE-D3222-NMB93-UKSQF | |
| DTHZF-UCKEE-BW222-Q2BKZ-NXPU8 | |
| DVAZF-UCKEE-J7222-5UHCT-QSRFE | |
| DVEZF-UCKEE-PR222-ZAPFE-4C49Q |
| - GEOSITE,hoyoverse,Genshin Impact | |
| - DOMAIN,overseauspider.yuanshen.com,Genshin Impact | |
| - DOMAIN,dispatchosglobal.yuanshen.com,Genshin Impact | |
| - DOMAIN,osasiadispatch.yuanshen.com,Genshin Impact | |
| - DOMAIN,oseurodispatch.yuanshen.com,Genshin Impact | |
| - DOMAIN,osusadispatch.yuanshen.com,Genshin Impact | |
| - AND,((DST-PORT,22101-22102),(NETWORK,UDP)),Genshin Impact | |
| # Update | |
| - DOMAIN,autopatchhk.yuanshen.com,Genshin Impact |
Originally introduced in 1.19.1, chat reporting has undergone many changes in Mojang's attempts to eliminate the exploits and make the system functional. The purpose of this paper is to document the current technical state of chat reporting on an ongoing basis, and to provide a reference for the community to use when discussing the system. To that end I will try to keep it as unbiased as possible.
Chat reporting heavily relies on cryptographic commitments and signatures to ensure that reported chat messages are not tampered with. The basic idea is that all players sign their chat messages with their private key, and then send the signature along with the message to the server.
Chat signing keypair is not generated by the client as one could expect; instead, it is issued by Mojang's services and is tied to the player's account. This means that the keypair is shared between all clients that the player uses, and the player can't change it. The keypair is f
