1. Trouble with the game?
    Try the troubleshooter!

    Dismiss Notice
  2. Issues with the game?
    Check the Known Issues list before reporting!

    Dismiss Notice

I'm so confused.

Discussion in 'General Discussion' started by MarcDoesRacing, Jul 25, 2024.

  1. ghost_cauli

    ghost_cauli
    Expand Collapse

    Joined:
    Jul 14, 2022
    Messages:
    1,208
    In the other news, a local hammer manufacturer sued by the local jewelry store for producing a tool a local criminal used to break into it, despite the manual saying it's not meant for this use.

    I hope it already is a rule when it comes to lua scripts. The only reason for obfuscating lua code I can think about is to hide its contents, which (IMO) goes against the open source nature of Beam content and poses a decent security risk (even excluding this vulnerability we're discussing in this thread).



    On a side note, this one here makes me curious – it only popped out a few weeks ago, didn't get that much coverage, and now everybody is blaming Beam for "allowing" it to happen.

    Beam is a very niche vector of attack, even if you want to spread malware to randoms on the internet. If they aimed at Disney, it sounds more like they used Beam to cover up their actual ways. Or, someone deliberately wants to smear poop over BeamNG's name.
     
    • Agree Agree x 3
  2. daniel-w

    daniel-w
    Expand Collapse
    BeamNG Team

    Joined:
    Jan 28, 2017
    Messages:
    282
    Around the time of this, BeamNG was actually quite unsafe. FFI wasn't the only issue, there were some other ways of gaining arbitrary code execution. And even after the original FFI patch, there was a way around that one as well but that's also fixed now. The last few patches have made the game much safer, but there are still issues and they are working on them.
    BeamNG is a very good target, you get people downloading mods off of third party sites all the time, and a lot of those people don't know how unsafe that can be. And multiplayer makes it a lot more dangerous, all you need to do to get infected is join a BeamMP server that has a malicious mod. So BeamNG is a decent target, especially considering how it was very easy to gain arbitrary code execution.

    To avoid all this, don't download mods off of third party sites. I've always checked every mod, even one's off of patreon. Everyone should do the same.
    It's hard though because even HTML can be unsafe, same with Javascript.
     
    • Agree Agree x 3
  3. ghost_cauli

    ghost_cauli
    Expand Collapse

    Joined:
    Jul 14, 2022
    Messages:
    1,208
    I was about to say that it's basically like every other bigger game, but then I realized that BeamMP makes it much much worse. I expect that you don't even need to actually use the infected mod, as just enabling it (which it does by default) can trigger the malicious Lua code.
     
  4. Wassup487

    Wassup487
    Expand Collapse

    Joined:
    Aug 15, 2023
    Messages:
    1,135
    Can someone tell me about the Disney thing? I was completely unaware
     
  5. ZackIGuess

    ZackIGuess
    Expand Collapse

    Joined:
    Jun 8, 2023
    Messages:
    115
    Some Disney employee downloaded a mod which had a hidden virus in it and hackers stole 1 TB of data from that company
    Source: AR12GAMING, idk if they’re relible
     
  6. Blood-PawWerewolf

    Blood-PawWerewolf
    Expand Collapse

    Joined:
    Jan 18, 2016
    Messages:
    710
    AR12GAMING is a racing game YouTuber and a Twitch streamer. he's no news source.
     
    • Agree Agree x 1
  7. ZackIGuess

    ZackIGuess
    Expand Collapse

    Joined:
    Jun 8, 2023
    Messages:
    115
    oh thanks, good to know. I just saw his tweet about it
     
  8. Blood-PawWerewolf

    Blood-PawWerewolf
    Expand Collapse

    Joined:
    Jan 18, 2016
    Messages:
    710
    Yeah, he’s just informing people about it, knowing he and his viewers play BeamNG.
     
  9. Wassup487

    Wassup487
    Expand Collapse

    Joined:
    Aug 15, 2023
    Messages:
    1,135
    ok thank you for telling me
     
  10. jscxnt

    jscxnt
    Expand Collapse

    Joined:
    Jul 14, 2024
    Messages:
    344
    Sorry but 'BBC' and 'trustable source' do NOT belong in the same sentence.. ever
     
    • Agree Agree x 3
  11. TalksWithNoise

    TalksWithNoise
    Expand Collapse

    Joined:
    Jul 10, 2023
    Messages:
    263
    His sourceless claims were pretty bold. I don’t think people are aware of the legality problems that can arise from ranting off headlines as facts.
     
  12. brunifdez

    brunifdez
    Expand Collapse

    Joined:
    Nov 8, 2023
    Messages:
    186
    The British broadcasting channel? You mean it seriously or is it for some other reason
     
  13. jscxnt

    jscxnt
    Expand Collapse

    Joined:
    Jul 14, 2024
    Messages:
    344
    Seriously lol, im from Britain and all they spew out their mouths is lies, lies and more lies. They especially love protecting pedophiles and covering up their dodgy pasts.
    Disgrace of a news network, but theyre all like this nowadays.
     
    • Agree Agree x 9
  14. ImJacksBrother

    ImJacksBrother
    Expand Collapse

    Joined:
    Jun 28, 2020
    Messages:
    630
  15. brunifdez

    brunifdez
    Expand Collapse

    Joined:
    Nov 8, 2023
    Messages:
    186
    Woah! I honestly wouldn't expect that from a public network but still...
     
  16. jjjjj

    jjjjj
    Expand Collapse

    Joined:
    Aug 7, 2016
    Messages:
    650
    Do you not cross reference the news... ever? I mean it's kinda their thing... They mislead and fabricate whatever they need to push a narrative. I could go on however, this isn't the time or place to do so
     
    • Agree Agree x 1
  17. Musicman27

    Musicman27
    Expand Collapse

    Joined:
    Dec 13, 2023
    Messages:
    2,568
    Well 0.32.5 i think was to release some delayed content, or to tide us over until 0.33.

    And mod approvals are suspended because a bunch of flurries hacked Disney using a Beam.ng mod. So their combing all repo mods just to make sure their safe.
     
  18. brunifdez

    brunifdez
    Expand Collapse

    Joined:
    Nov 8, 2023
    Messages:
    186
    I would expect that (and I've already seen it an innumerable amount of times) from private news networks. I'm from Spain and we have a public news source for the whole country called RTVE and another separate public network for each autonomous community. These are all trustable since they try to be as impartial as possible and do not twist news for greater attention since they are funded with our money lol

    However yes, there are lots of private news sources that twist their headlines to their likings and their sponsors' likings

    Sorry this is out of topic and will end right here
     
  19. Trombepis

    Trombepis
    Expand Collapse

    Joined:
    Jan 28, 2018
    Messages:
    14
    When they're done doing whatever they're doing, and the mod updates come in, it will be like christmas morning
     
    • Agree Agree x 1
  20. pigeonperson

    pigeonperson
    Expand Collapse

    Joined:
    Nov 22, 2023
    Messages:
    776
    Did they ever fix the back end of the repository after the Hirochi CCF?
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice