Hacker News Reader

Game mods are a minefield of adware, malware, and outright rootkits that compromise PCs. The Minecraft developers messed up a long time ago by doing two things. Not making mods easy to use and not having an official mod repository that offers safe downloads. Even the decent sites offering mod downloads have issues with ads laden with malware.

View on HN

Further to this: mods are so hard that some people use a mod launcher. This replaces the official Mojang Minecraft launcher. But part of the role of the launcher is to log on the player. These alternative launchers just ask the player for their Minecraft username and password! And this is just what the community accepts.

http://www.reddit.com/r/Minecraft/comments/30orgd/is_there_a...

Are Minecraft mods actually securely implemented?

Could a nefarious mod that didn't include a launcher still read the user/pass out of RAM?

Mod is just a JAR file that's loaded into Minecraft process. So yeah, no protection whatsoever.

Reply on news.ycombinator.com