These check-ins are all related to the code that has been in question. and the "New Toy" check-ins here and here Not to mention the other check-in comments around that time you will see the following: This is too fucking evil. i refered to the dev as a 'she' because the person in the lfr was called sarah and idk about you, but i generally call sarah's 'she' instead of heĪll in all, glad to see this was resolved quickly and the offending code removed quickly It made little sense to enable this developer feature, which does look more like a 'fun' tool than a actual debugger in all honesty, for the developer's SO. The reason this was a problem was not a question of whether or not it has already been abused(honestly some lfr trolling isnt 'abuse' as such), but because of the potential for abuse by allowing a UI to run console commands on your client which is a real problem and i dont believe the outcry(no pitchforks this time) was really 'overreacting' considering the circumstances however this is "PSA: elvUI has a backdoor", not a "PSA:elv is a _ and trolled my lfr group" and should be taken as such Unfortunately did not get a screenshot of the lfr group, thought it was just a simple troll(akin to dbm whispering yogg quotes when looting archaelogy fragments) and didnt expect it was capable of this much until i looked at the code afterwards. to address a few of the more common points raised: they serve no legitimate purpose and is generally irritating to removeĮDIT: wow holy shit this blew up overnight(rip inbox). I really hope in the future addon authors(and programmers in general) can refrain from placing these backdoors in their code. While this doesnt disable the backdoor fully, it ensures no one is able to make use of it.
NO BONUS ROLL ON ELVUI WOW 7.0 INSTALL
To disable this, you must goto your wow install directory\interface\addons\elvUI\core\a, ctrl+F find 'Elv-ShatteredHand' and delete all three entries under devAlts so that function should now look like I haven't looked through the rest of the code to determine if the UI is able to access anything other than console or chat but this is really dangerous having a backdoor in a UI so many players use. There is no need for such a backdoor and the fact devAlts are specifically excluded from being targetted by this system is dodgy. This is potentially very dangerous, potentially could 'kick' anyone with elvUI she wants from lfg groups, disband guilds etc. The second block of blue code similarly is able to execute whatever console commands she wants to force a user to run. The first block of blue outlined code checks for "devAlts = true" ie a devAlt is sending the command and "devAlts ~= true" ie a devAlt is NOT recieving the command then SendChatMessage(msg, channel, nil, sendTo) ie sends a chat message to any channel she wants Below is a screenshot of the elvui a:īasically the author has flagged her three characters as devAlts (see red outlined code). After LFR i decided to have a look at the ElvUI code and discovered the author actually put a backdoor in it enabling her to post messages to ANY channel and execute ANY console command on behalf of ElvUI users. So last night in LFR, a lot of people(myself included) randomly started following one person and posting random things in instance chat like 'this is elv' etc. Sargeras - A Area 52 - H Bleeding Hollow - H Tichondrius - H China Stormscale - H Sylvanas - A Aszune - A Bronzebeard - H Americas Tired of seeing Art? Filter your r/wow experience with this guide!.Murloc Mondays (New players) Reset Recruitment Midweek Mending Tanking Thursday Firepower Friday (DPS) Saturday Achievement and Loot Thread Skirmish Sundays (PvP) Blizzard Subredditsĭiablo - Starcraft - Hearthstone - Heroes of the Storm - Overwatch - WC3 - Classic WoW - Mystery -įrequently Asked Questions about Shadowlandsįrequently Asked Questions. The Undermine Journal - useful resource for goldmakers./r/classicwowtbc - World of Warcraft: Burning Crusade./r/classicwow - World of Warcraft: Classic./r/transmogrification - show us your style./r/woweconomy - goldmaking discussion & theory./r/wownoob - if you are a noob or want to help a noob.WoW Related Discords Shadowlands 9.2 is Live! Welcome to /r/wow, a subreddit about the video game World of Warcraft ! AnnouncementsĪrena World Championship returns for 2022 - watch live March 18-20 Chat
0 kommentar(er)
