Heartbleed, and why you should change your password
Two days ago a serious vulnerability (that’s been named “Heartbleed”) in the popular cryptographic software OpenSSL was made public. This weakness could potentially be exploited to steal information, such as login information, that normally would be protected by encryption. This software is used by roughly two thirds of the internet so a lot of services were or are at risk of being affected.
What did Mojang do?
As soon as we realized the severity of the exploit we decided to shut down all of our systems until a fix was available. This is why you were unable to log in yesterday. We then made sure that all of our services that use SSL no longer had this vulnerability before bringing them back online. We also updated all of our SSL certificates.
What should I do?
Change your Mojang/Minecraft account password
Since uses of the exploit leaves no traces, there’s no way for us to guarantee that your password hasn’t been compromised. Therefore, if you typed in your password into any of our games or websites during the last couple of days we strongly advice you to change it. Even if you haven’t logged in, it can still be a good idea the to change your password. One can never be too careful on the internet!
Also see our help article on choosing a good password.
Change your other passwords
Remember that since many other parts of the internet was affected as well you should also change your password for any other services that you have logged in to recently.
Anything else that I need to know?
Legacy launcher discontinuned
Due to this incident we’ve been forced to discontinue support for the legacy Minecraft launcher (the one used before version 1.6). If you’re using a Minecraft version older than 1.6 you need to download the current launcher (version 1.3.11) from minecraft.net. The current launcher lets you play older versions of Minecraft as well so you can still play on your pre-1.6 servers.
For developers
Since the legacy launcher no longer works we are also retiring the old login.minecraft.net service. If you have created your own Minecraft authentication that uses this scheme you will need to migrate it to the new authentication scheme. The new authentication scheme is described in this community wiki for private use.
“[WARNING] Can’t keep up! Did the system time change, or is the server overloaded?”という警告が出ていたので色々調べてみた。文面からは原因がはっきりしないが、発生する条件が限定されている部分もあるので、その辺の条件から推測できる所もあったのでメモしておく。
マルチサーバーで「You are not permitted to use アイテム名」というエラーが出る場合、 Essentials というサーバープラグインの設定の問題らしい。 Google では英語のスレッドばかりが出てきて日本語の情報がなかったので一応紹介。エラーを直すには、 Essentials のパーミッション設定を見直すか、プラグインを外す必要がある。
You are not permitted to use [item] | Bukkit Forums
最近なんとなく導入してみた Forge という Mod で導入する時に幾つか上手くいかなかった点とその解決方法。
どれをダウンロードしていいかわからない
Forge は複数のバージョンがあり、また古いバージョンと新しいバージョンでいろいろと差があって判りにくかった。今はシングルの内部的なマルチ化の影響を受けて Client 版と Server 版を統合した “Universal 版 “というのがあり、それを入れればよさそう。
導入した後起動しても画面が黒いまま表示されない場合
導入後に起動した時 Mojang のロゴまでは表示されその後で画面が黒くなってしまっていた。色々試してみると mod のロードに失敗していたのが分かったので。”%AppData%\.minecraft” にある mods フォルダの中を一度空にして起動すれば起動すできるようになった。競合する mod が mods フォルダにある場合 mod のロードが失敗するのでどれが問題になっているか一つ一つ入れていけば分かると思う。
The Java 7 Runtime Environment, update versions 6 and below, has a serious security vulnerability that is fixed in the latest update. All Firefox users are strongly encouraged to update as soon as possible. This can be done on the Plugin Check page.
誰に影響しますか？
All Firefox users who have the Java 7 plugin, update 6 and below.
: minecraft 
