In the other news, a local hammer manufacturer sued by the local jewelry store for producing a tool a local criminal used to break into it, despite the manual saying it's not meant for this use. I hope it already is a rule when it comes to lua scripts. The only reason for obfuscating lua code I can think about is to hide its contents, which (IMO) goes against the open source nature of Beam content and poses a decent security risk (even excluding this vulnerability we're discussing in this thread). On a side note, this one here makes me curious – it only popped out a few weeks ago, didn't get that much coverage, and now everybody is blaming Beam for "allowing" it to happen. Beam is a very niche vector of attack, even if you want to spread malware to randoms on the internet. If they aimed at Disney, it sounds more like they used Beam to cover up their actual ways. Or, someone deliberately wants to smear poop over BeamNG's name.
Around the time of this, BeamNG was actually quite unsafe. FFI wasn't the only issue, there were some other ways of gaining arbitrary code execution. And even after the original FFI patch, there was a way around that one as well but that's also fixed now. The last few patches have made the game much safer, but there are still issues and they are working on them. BeamNG is a very good target, you get people downloading mods off of third party sites all the time, and a lot of those people don't know how unsafe that can be. And multiplayer makes it a lot more dangerous, all you need to do to get infected is join a BeamMP server that has a malicious mod. So BeamNG is a decent target, especially considering how it was very easy to gain arbitrary code execution. To avoid all this, don't download mods off of third party sites. I've always checked every mod, even one's off of patreon. Everyone should do the same. It's hard though because even HTML can be unsafe, same with Javascript.
I was about to say that it's basically like every other bigger game, but then I realized that BeamMP makes it much much worse. I expect that you don't even need to actually use the infected mod, as just enabling it (which it does by default) can trigger the malicious Lua code.
Some Disney employee downloaded a mod which had a hidden virus in it and hackers stole 1 TB of data from that company Source: AR12GAMING, idk if they’re relible
His sourceless claims were pretty bold. I don’t think people are aware of the legality problems that can arise from ranting off headlines as facts.
Seriously lol, im from Britain and all they spew out their mouths is lies, lies and more lies. They especially love protecting pedophiles and covering up their dodgy pasts. Disgrace of a news network, but theyre all like this nowadays.
So are the people that downloaded that leaked mk4 mod cooked? I assume its this: https://www.beamng.com/threads/volkswagen-golf-mk4-big-update.95015/page-7 Or another guy's mk4, forgetting his name. Sheik I think?
Do you not cross reference the news... ever? I mean it's kinda their thing... They mislead and fabricate whatever they need to push a narrative. I could go on however, this isn't the time or place to do so
Well 0.32.5 i think was to release some delayed content, or to tide us over until 0.33. And mod approvals are suspended because a bunch of flurries hacked Disney using a Beam.ng mod. So their combing all repo mods just to make sure their safe.
Spoiler I would expect that (and I've already seen it an innumerable amount of times) from private news networks. I'm from Spain and we have a public news source for the whole country called RTVE and another separate public network for each autonomous community. These are all trustable since they try to be as impartial as possible and do not twist news for greater attention since they are funded with our money lol However yes, there are lots of private news sources that twist their headlines to their likings and their sponsors' likings Sorry this is out of topic and will end right here
When they're done doing whatever they're doing, and the mod updates come in, it will be like christmas morning