-
-
Save IceCruelStuff/cd13af4a513bb0d3e4edb16e967393fe to your computer and use it in GitHub Desktop.
Revisions
-
kennytv revised this gist
Jul 29, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -115,7 +115,7 @@ Players may also opt-in to only display signed (and thus reportable) messages. #### What if their moderation team is terrible? A lot of people have voiced concerns regarding Mojang possibly outsourcing message moderation and thus having a poor quality of report processing. While it is a somewhat reasonable fear, this is still based on extremely high amounts of speculation. Looking at the facts, Microsoft already has a well working chat moderation at xbox live, where no such drama of false bans or being banned because you spoke out negatively about Microsoft has occurred - the rules regarding Minecraft chat are also a lot more lenient compared to that. With this in mind, such speculation does not make for a good argument and I implore you to wait and see what *actually* happens. *If* your worst fears do end up coming true and false bans occur with an additional lack of appeal processing, I myself will be sure to join the riot as well and provide easy to use means to disable reporting. #### Why can I be banned when playing on a private server I own? You can't if either your friends don't feel attacked by your messages or you just disable reporting with a plugin or mod. *However*... -
kennytv revised this gist
Jul 29, 2022 . 1 changed file with 3 additions and 2 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -118,9 +118,10 @@ A lot of people have voiced concerns regarding Mojang possibly outsourcing messa With this in mind, such speculation does not make for a good argument and I employ you to wait and see what *actually* happens. *If* your worst fears do end up coming true and false bans occur with an additional lack of appeal processing, I myself will be sure to join the riot as well and provide easy to use means to disable reporting. #### Why can I be banned when playing on a private server I own? You can't if either your friends don't feel attacked by your messages or you just disable reporting with a plugin or mod. *However*... Opinion time: Everything you do or say has consequences, even towards friends, and even if you don't realize they exist. You're not going to be banned for a playful and harmless insult, but considering the large number of children and young adults playing the game, such a reporting feature was long overdue. Someone who is toxic on one server isn't unlikely to behave the same on any other server. You might be capable of handling simple disputes and insults, but Mojang is better equipped to properly deal with people putting out personal threats, child predators and the alike than you are. This also includes the smaller or even private servers. Proper moderation takes time, and a lot of servers aren't able to provide that or willfully neglect it. Nevertheless, you can still easily lever out reporting on your server if you wish to do so. -
kennytv revised this gist
Jul 29, 2022 . 1 changed file with 3 additions and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -97,7 +97,9 @@ Then *they* get temporarily or permanently banned; the number of reports does no No, they need the private key only you and Mojang have to sign messages as coming from your account. **You cannot be impersonated unless you download a malicious client/mod.** #### What if my messages are taken out of context? Reports require and automatically send a handful of messages around the selected ones to be included as context. Forging false context by omitting or adding messages has been addressed and is - as far as we know - impossible. While you can theoretically remove the body of messages and only leave a signature, if even one other player writes something inbetween, reports become invalid. Even if not, you still know there was *some* message you either removed or the other person didn't see. Sending private messages also does nothing to incriminate a reported player, as that also breaks with other players writing messages, you still need a publicly visible (!) message with its full message content right before the other player replies (which also *has* to be included in the report), and with that it becomes obvious the other player did not reply to any of the private messages. #### Bedrock's text filtering is horrible, is that also going to come to Java? That's simply not going to happen considering how different the underlying tech of filtering vs. reporting/chat signing is... even if it were to, it would be trivial to disable. -
kennytv revised this gist
Jul 29, 2022 . 1 changed file with 4 additions and 4 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -88,7 +88,7 @@ Before we part ways again, here are answers to some of the more common questions No, **only reported messages are sent away** for processing. #### Am I going to be banned for joking with my friends or writing in all caps? No, Mojang have made clear they only intend on hunting down the worst of the worst (suicide threats, racial slurs, doxing, etc.). All reports will be handled in human review (aside from them most likely pre-filtering malicious reports before the final decision is made). See [here](https://help.minecraft.net/hc/en-us/articles/7149823936781) for a detailed list of punishment reasons. **You can still dick around with your friends.** #### What if someone spam reports me? Then *they* get temporarily or permanently banned; the number of reports does not matter. @@ -97,7 +97,7 @@ Then *they* get temporarily or permanently banned; the number of reports does no No, they need the private key only you and Mojang have to sign messages as coming from your account. **You cannot be impersonated unless you download a malicious client/mod.** #### What if my messages are taken out of context? Reports require and automatically send a handful of messages around the selected ones to be included as context. Forging false context by omitting or adding messages has been addressed and is - as far as we know - impossible. While you can theoretically remove the body of messages and only leave a signature, if even one other player wrote something inbetween, reports become invalid (and even if not, you still know there was *some* message you either removed or the other person didn't see). Sending private messages also does not reasonably incriminate a reported player, as that also breaks with other players writing messages, you still need a publicly visible (!) message at the end before the other player replied, and it becomes obvious the other player most likely did not reply to the private messages. #### Bedrock's text filtering is horrible, is that also going to come to Java? That's simply not going to happen considering how different the underlying tech of filtering vs. reporting/chat signing is... even if it were to, it would be trivial to disable. @@ -106,7 +106,7 @@ That's simply not going to happen considering how different the underlying tech No, and if you think you were banned without reason, you can [make an appeal](https://help.minecraft.net/hc/en-us/requests/new?ticket_form_id=360003469452). #### Can servers disable the reporting feature? Yes, very easily. However, considering this comes at the cost of effectively taking power *away* from your users, making them more vulnerable to repeated bullying, it'd not be as merciful of a move as you might think it is. Players may also opt-in to only display signed (and thus reportable) messages. @@ -116,7 +116,7 @@ A lot of people have voiced concerns regarding Mojang possibly outsourcing messa With this in mind, such speculation does not make for a good argument and I employ you to wait and see what *actually* happens. *If* your worst fears do end up coming true and false bans occur with an additional lack of appeal processing, I myself will be sure to join the riot as well and provide easy to use means to disable reporting. #### Why can I be banned when playing on a private server I own? Opinion time: Everything you do or say has consequences, even if you don't realize they exist. You're not going to be banned for a playful and harmless insult, but considering the large number of children and young adults playing the game, such a reporting feature was long overdue. Someone who is toxic on one server isn't unlikely to behave the same on any other server. You might be capable of handling simple disputes and insults, but Mojang is better equipped to properly deal with people putting out personal threats, child predators and the alike than you are. -
kennytv revised this gist
Jul 23, 2022 . 1 changed file with 1 addition and 7 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -123,10 +123,4 @@ Someone who is toxic on one server isn't unlikely to behave the same on any othe Proper moderation takes time, and a lot of servers aren't able to provide that or willfully neglect it. Nevertheless, you can still easily lever out reporting on your server if you wish to do so. #### I still have issues with this, what can I do about it? Whatever you do, don't join the angry mob; instead, provide constructive and useful feedback either on Minecraft's [feedback site](https://feedback.minecraft.net/hc/en-us) or open a ticket on their [bug tracker](https://bugs.mojang.com/) - and remember to keep it civil. -
kennytv revised this gist
Jul 21, 2022 . 1 changed file with 5 additions and 0 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -14,6 +14,11 @@ A message's signature also includes the *previous* message's signature of that s Another important part of the signature is the list last seen messages. For the last 5 players of which you've seen any messages, their last message's signature will be included. This is used to verify that, up to a certain point to guarantee fully faithful context, no messages of other players have been omitted in a report and that no messages have been added to the given context after the fact either. ### Hiding or retroactively removing messages With signed messages, Mojang *finally* introduced a packet servers can use to retroactively remove already sent out messages. So if you want to clear chat or remove individual messages without having to spam empty messages that only move up the previous messages, you can properly remove them now using the `ClientboundDeleteChatPacket` packet - the only requirement for this is that the message to be removed is a properly signed player message. With message signature now depending on previous messages' signatures as well, you obviously cannot omit any message signatures of online players without breaking the chain. In order to keep a valid chain of signatures, players that shouldn't receive the contents of a signed player message, the server instead sends out the signature data only. This means a player will know that a certain other player sent *some* message via a chat message or signed command argument, but they won't know what the message was or who received it. ### Modifying chat messages through chat previews Since servers often want to modify chat messages with custom formatting, prefixes, and suffixes before broadcasting a message, you can modify the final message to your heart's content as long as the client agrees to it. Servers can send a chat preview while the player is currently typing their message, making them sign that formatted preview instead of the original plain text. -
kennytv revised this gist
Jul 21, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -1,6 +1,6 @@ # Signed chat This gist intends on clearing up some of the misinformation surrounding signed chat/the reporting feature Mojang has added to Minecraft 1.19.1. Here you can find both technical information as well as a general explanation of how these work. ### Profile keys When joining a server, clients now send an extra profile key used for verifying a message's authenticity. This key and thus the whole signing process is optional, but by default, servers enforce secure profiles. Whenever the player sends a chat message and has joined with a key, the message will be signed using their own private key, which the server then verifies using the public key sent on join. Assuming signature, timestamp, and message contents line up, the message goes through. -
kennytv revised this gist
Jul 21, 2022 . 1 changed file with 5 additions and 5 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -10,14 +10,14 @@ On the other end, clients can also require all broadcasted player messages to be ### Message signatures Every signed message's signature include the sender's UUID matching the profile key's identity, a timestamp (though that cannot be verified with untrusted clients/servers), the signed message, and a random [salt](https://en.wikipedia.org/wiki/Salt_(cryptography)). A message's signature also includes the *previous* message's signature of that same player. This means that, with at least one message of a player provided, you can be sure that messages before that were sent in correct order and no message of that player was omitted in a report. Another important part of the signature is the list last seen messages. For the last 5 players of which you've seen any messages, their last message's signature will be included. This is used to verify that, up to a certain point to guarantee fully faithful context, no messages of other players have been omitted in a report and that no messages have been added to the given context after the fact either. ### Modifying chat messages through chat previews Since servers often want to modify chat messages with custom formatting, prefixes, and suffixes before broadcasting a message, you can modify the final message to your heart's content as long as the client agrees to it. Servers can send a chat preview while the player is currently typing their message, making them sign that formatted preview instead of the original plain text. Depending on the mode you set this to on the client, you have to press enter *twice* in order to send out the last given preview, so that you can be sure the server doesn't trick you into something you don't want to send by giving you no time to react to a change. When only one press is required as per client setting, there still is at least a short window where you don't sign the preview (signified by slighty faded background and an orange indicator before the delay has passed), but your actual input text. Here's a nice example of such a preview, where the colored component will be signed once the player presses enter to send the message:  @@ -35,7 +35,7 @@ There are two different kinds of chat messages now; player chat and system chat. If you go as far as sending a player chat message with an invalid signature, it will look like this:  System chat messages have a gray indicator. ### Custom formats using chat types While the message always needs to be verified by the player that sent it, player display name, team name, and surrounding format can be freely defined by the server. @@ -92,7 +92,7 @@ Then *they* get temporarily or permanently banned; the number of reports does no No, they need the private key only you and Mojang have to sign messages as coming from your account. **You cannot be impersonated unless you download a malicious client/mod.** #### What if my messages are taken out of context? Reports require and automatically send a handful of messages around the selected ones to be included as context. Forging false context by omitting or adding messages has been addressed and is - as far as we know - impossible. #### Bedrock's text filtering is horrible, is that also going to come to Java? That's simply not going to happen considering how different the underlying tech of filtering vs. reporting/chat signing is... even if it were to, it would be trivial to disable. -
kennytv revised this gist
Jul 21, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -12,7 +12,7 @@ Every signed message's signature include the sender's UUID matching the profile Since 1.19.1-pre4, a message's signature also includes the *previous* message's signature of that same player. This means that, with at least one message of a player provided, you can be sure that messages before that were sent in correct order and no message of that player was omitted in a report. A second more important signature change is the addition of a list last seen messages. For the last 5 players of which you've seen any messages, their last message's signature will be included. This is used to verify that, up to a certain point to guarantee fully faithful context, no messages of other players have been omitted in a report and that no messages have been added to the given context after the fact either. ### Modifying chat messages through chat previews Since servers often want to modify chat messages with custom formatting, prefixes, and suffixes before broadcasting a message, you can modify the final message to your heart's content as long as the client agrees to it. Servers can send a chat preview while the player is currently typing their message, making them sign that formatted preview instead of the original plain text. -
kennytv revised this gist
Jul 15, 2022 . 1 changed file with 4 additions and 2 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -12,11 +12,13 @@ Every signed message's signature include the sender's UUID matching the profile Since 1.19.1-pre4, a message's signature also includes the *previous* message's signature of that same player. This means that, with at least one message of a player provided, you can be sure that messages before that were sent in correct order and no message of that player was omitted in a report. A second more important signature change is the addition of a list of each player's last seen messages. This is used to verify that, up to a certain point to guarantee fully faithful context, no messages of other players are not omitted in a report and that no messages have been added to the given context after the fact either. ### Modifying chat messages through chat previews Since servers often want to modify chat messages with custom formatting, prefixes, and suffixes before broadcasting a message, you can modify the final message to your heart's content as long as the client agrees to it. Servers can send a chat preview while the player is currently typing their message, making them sign that formatted preview instead of the original plain text. Depending on the mode you set this to on the client, you have to press enter *twice* in order to send out the last given preview, so that you can be sure the server doesn't trick you into something you don't want to send by giving you no time to react to a change. When only one press is required as per client setting, there still is at least a short window where you don't sign the preview (signified by slighty faded background before the delay has passed), but your actual input text. Here's a nice example of such a preview, where the colored component will be signed once the player presses enter to send the message:  This ensures you can change parts of the message and apply formatting (as long as the player agrees to the changes). @@ -90,7 +92,7 @@ Then *they* get temporarily or permanently banned; the number of reports does no No, they need the private key only you and Mojang have to sign messages as coming from your account. **You cannot be impersonated unless you download a malicious client/mod.** #### What if my messages are taken out of context? Reports require and automatically send a handful of messages around the selected ones to be included as context. Forging false context or omitting messages has been addressed and is - as far as we know at the moment - impossible. #### Bedrock's text filtering is horrible, is that also going to come to Java? That's simply not going to happen considering how different the underlying tech of filtering vs. reporting/chat signing is... even if it were to, it would be trivial to disable. -
kennytv revised this gist
Jul 10, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -104,7 +104,7 @@ Yes, very easily. However, considering this comes at the cost of effectively tak Players may also opt-in to only display signed (and thus reportable) messages. #### What if their moderation team is terrible? A lot of people have voiced concerns regarding Mojang possibly outsourcing message moderation and thus having a poor quality of report processing. While it is a somewhat reasonable fear, this is still based on extremely high amounts of speculation. Looking at the facts, Microsoft already has a well working chat moderation at xbox live, where no such drama of false bans or being banned because you spoke out negatively about Microsoft has occurred - the rules regarding Minecraft chat are also a lot more lenient compared to that. With this in mind, such speculation does not make for a good argument and I employ you to wait and see what *actually* happens. *If* your worst fears do end up coming true and false bans occur with an additional lack of appeal processing, I myself will be sure to join the riot as well and provide easy to use means to disable reporting. -
kennytv revised this gist
Jul 10, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -103,7 +103,7 @@ Yes, very easily. However, considering this comes at the cost of effectively tak Players may also opt-in to only display signed (and thus reportable) messages. #### What if their moderation team is terrible? A lot of people have voiced concerns regarding Mojang possibly outsourcing message moderation and thus having a poor quality of report processing. While it is a somewhat reasonable fear, this is still based on extremely high amounts of speculation. Looking at the facts, Microsoft already has a well working chat moderation at xbox live, where no such drama of false bans or being banned because you spoke out negatively about Microsoft has occurred. With this in mind, such speculation does not make for a good argument and I employ you to wait and see what *actually* happens. *If* your worst fears do end up coming true and false bans occur with an additional lack of appeal processing, I myself will be sure to join the riot as well and provide easy to use means to disable reporting. -
kennytv revised this gist
Jul 10, 2022 . 1 changed file with 5 additions and 0 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -103,6 +103,11 @@ Yes, very easily. However, considering this comes at the cost of effectively tak Players may also opt-in to only display signed (and thus reportable) messages. ### What if their moderation team is terrible? A lot of people have voiced concerns regarding Mojang possibly outsourcing message moderation and thus having a poor quality of report processing. While it is a somewhat reasonable fear, this is still based on extremely high amounts of speculation. Looking at the facts, Microsoft already has a well working chat moderation at xbox live, where no such drama of false bans or being banned because you spoke out negatively about Microsoft has occurred. With this in mind, such speculation does not make for a good argument and I employ you to wait and see what *actually* happens. *If* your worst fears do end up coming true and false bans occur with an additional lack of appeal processing, I myself will be sure to join the riot as well and provide easy to use means to disable reporting. #### Why can I be banned when playing on a private server I own? Everything you do or say has consequences, even if you don't realize they exist. You're not going to be banned for a playful and harmless insult, but considering the large number of children and young adults playing the game, such a reporting feature was long overdue. -
kennytv revised this gist
Jul 9, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -72,7 +72,7 @@ You can find a full list of the Vanilla chat types [here](https://paste.gg/p/Ken ### The login and chat sequence The full login and chat flow has been visualized in this beautiful graphic:  # FAQ (Frequently Asked Questions) Before we part ways again, here are answers to some of the more common questions. [Mojang's FAQ](https://help.minecraft.net/hc/en-us/articles/7317376541197) has been updated to answer more of the pressing questions, so it's definitely worth taking a look at. -
kennytv revised this gist
Jul 9, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -12,7 +12,7 @@ Every signed message's signature include the sender's UUID matching the profile Since 1.19.1-pre4, a message's signature also includes the *previous* message's signature of that same player. This means that, with at least one message of a player provided, you can be sure that messages before that were sent in correct order and no message of that player was omitted in a report. A second more important signature change is the addition of a list of each player's last seen messages. This has not been fully implemented yet, but judging by what has been prepared in code, it might be used to verify messages of other players than the reported person are not omitted in a report and that no messages have been added after the fact either. ### Modifying chat messages through chat previews Since servers often want to modify chat messages with custom formatting, prefixes, and suffixes before broadcasting a message, you can modify the final message to your heart's content as long as the client agrees to it. Servers can send a chat preview while the player is currently typing their message, making them sign that formatted preview instead of the original plain text. -
kennytv revised this gist
Jul 9, 2022 . 1 changed file with 2 additions and 2 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -70,7 +70,7 @@ Custom chat types can be added using datapacks or by modifying the chat_type reg You can find a full list of the Vanilla chat types [here](https://paste.gg/p/KennyTV/0097634eaec944cab46cb9861cb6bfee). ### The login and chat sequence The full login and chat flow has been visualized in this beautiful graphic:  @@ -90,7 +90,7 @@ Then *they* get temporarily or permanently banned; the number of reports does no No, they need the private key only you and Mojang have to sign messages as coming from your account. **You cannot be impersonated unless you download a malicious client/mod.** #### What if my messages are taken out of context? Reports require and automatically send a handful of messages around the selected ones to be included as context. Forging false context or omitting messages has partially been addressed already and it seems like it is getting properly fixed. #### Bedrock's text filtering is horrible, is that also going to come to Java? That's simply not going to happen considering how different the underlying tech of filtering vs. reporting/chat signing is... even if it were to, it would be trivial to disable. -
kennytv revised this gist
Jul 9, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -12,7 +12,7 @@ Every signed message's signature include the sender's UUID matching the profile Since 1.19.1-pre4, a message's signature also includes the *previous* message's signature of that same player. This means that, with at least one message of a player provided, you can be sure that messages before that were sent in correct order and no message of that player was omitted in a report. A second more important signature change is the addition of a list of each player's last seen messages. This has not been fully implemented yet, but judging by what has been prepared in code, it might be used to verify messages of other players than the reported person are not omitted in a report either. ### Modifying chat messages through chat previews Since servers often want to modify chat messages with custom formatting, prefixes, and suffixes before broadcasting a message, you can modify the final message to your heart's content as long as the client agrees to it. Servers can send a chat preview while the player is currently typing their message, making them sign that formatted preview instead of the original plain text. -
kennytv revised this gist
Jul 9, 2022 . 1 changed file with 7 additions and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -1,5 +1,4 @@ # Signed chat This gist intends on clearing up some of the misinformation and drama surrounding the signed chat/reporting feature Mojang has added to Minecraft 1.19.1 as well as slowly documenting chat types a lot more in-depth. @@ -8,6 +7,13 @@ When joining a server, clients now send an extra profile key used for verifying On the other end, clients can also require all broadcasted player messages to be signed, disregarding the ones without sender verified signatures. ### Message signatures Every signed message's signature include the sender's UUID matching the profile key's identity, a timestamp (though that cannot be verified with untrusted clients/servers), the signed message, and a random [salt](https://en.wikipedia.org/wiki/Salt_(cryptography)). Since 1.19.1-pre4, a message's signature also includes the *previous* message's signature of that same player. This means that, with at least one message of a player provided, you can be sure that messages before that were sent in correct order and no message of that player was omitted in a report. A second more important signature change is the addition of a list of each player's last seen messages. This has not been fully implemented yet, but judging by what has been prepared in code, it might be used to verify messages of players other than of the reported person are not omitted in a report either. ### Modifying chat messages through chat previews Since servers often want to modify chat messages with custom formatting, prefixes, and suffixes before broadcasting a message, you can modify the final message to your heart's content as long as the client agrees to it. Servers can send a chat preview while the player is currently typing their message, making them sign that formatted preview instead of the original plain text. -
kennytv revised this gist
Jul 8, 2022 . 1 changed file with 2 additions and 0 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -1,4 +1,6 @@ # Signed chat Note: This does not yet include the changes made in 1.19.1-pre4; I'm still waiting for at least the next version for Mojang to finish what they started (which you can think of as a blockchain-lite verification of chatmessages) This gist intends on clearing up some of the misinformation and drama surrounding the signed chat/reporting feature Mojang has added to Minecraft 1.19.1 as well as slowly documenting chat types a lot more in-depth. ### Profile keys -
kennytv revised this gist
Jul 6, 2022 . 1 changed file with 6 additions and 6 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -70,23 +70,23 @@ The full login and chat flow has been visualized in this beautiful graphic: Before we part ways again, here are answers to some of the more common questions. [Mojang's FAQ](https://help.minecraft.net/hc/en-us/articles/7317376541197) has been updated to answer more of the pressing questions, so it's definitely worth taking a look at. #### Can Microsoft/Mojang see all of my messages? No, **only reported messages are sent away** for processing. #### Am I going to be banned for joking with my friends or writing in all caps? No, Mojang have made clear they only intend on hunting down the worst of the worst (suicide threats, racial slurs, doxing, etc.). All reports will be handled in human review. See [here](https://help.minecraft.net/hc/en-us/articles/7149823936781) for a detailed list of punishment reasons. **You can still dick around with your friends.** #### What if someone spam reports me? Then *they* get temporarily or permanently banned; the number of reports does not matter. #### Can't someone impersonate me and get me banned? No, they need the private key only you and Mojang have to sign messages as coming from your account. **You cannot be impersonated unless you download a malicious client/mod.** #### What if my messages are taken out of context? Reports require and automatically send a handful of messages around the selected ones to be included as context. The current implementation is still flawed in this regard, but Mojang are already aware of that. #### Bedrock's text filtering is horrible, is that also going to come to Java? That's simply not going to happen considering how different the underlying tech of filtering vs. reporting/chat signing is... even if it were to, it would be trivial to disable. #### Are all bans permanent? No, and if you think you were banned without reason, you can [make an appeal](https://help.minecraft.net/hc/en-us/requests/new?ticket_form_id=360003469452). -
kennytv revised this gist
Jul 1, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -2,7 +2,7 @@ This gist intends on clearing up some of the misinformation and drama surrounding the signed chat/reporting feature Mojang has added to Minecraft 1.19.1 as well as slowly documenting chat types a lot more in-depth. ### Profile keys When joining a server, clients now send an extra profile key used for verifying a message's authenticity. This key and thus the whole signing process is optional, but by default, servers enforce secure profiles. Whenever the player sends a chat message and has joined with a key, the message will be signed using their own private key, which the server then verifies using the public key sent on join. Assuming signature, timestamp, and message contents line up, the message goes through. On the other end, clients can also require all broadcasted player messages to be signed, disregarding the ones without sender verified signatures. -
kennytv revised this gist
Jul 1, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -18,7 +18,7 @@ Since commands such as /say, as well as custom commands to broadcast messages or In the wild, you can see this being used in Vanilla's say, me, msg, teammsg, ban, banip, and kick commands. ### Signed/unsigned player chat and system chat There are two different kinds of chat messages now; player chat and system chat. Player chat is accompanied by the message signature, system chat has no special format or signature attached. You can optionally attach an unsigned component to any player chat message, which will make it look like this (the informative popup is only displayed when you hover over the icon, which you can only see when you focus the chat window):  -
kennytv revised this gist
Jun 30, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -96,7 +96,7 @@ Yes, very easily. However, considering this comes at the cost of effectively tak Players may also opt-in to only display signed (and thus reportable) messages. #### Why can I be banned when playing on a private server I own? Everything you do or say has consequences, even if you don't realize they exist. You're not going to be banned for a playful and harmless insult, but considering the large number of children and young adults playing the game, such a reporting feature was long overdue. Someone who is toxic on one server isn't unlikely to behave the same on any other server. You might be capable of handling simple disputes and insults, but Mojang is better equipped to properly deal with people putting out personal threats, child predators and the alike than you are. -
kennytv revised this gist
Jun 30, 2022 . 1 changed file with 7 additions and 7 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -95,18 +95,18 @@ Yes, very easily. However, considering this comes at the cost of effectively tak Players may also opt-in to only display signed (and thus reportable) messages. #### Why can I be banned when playing on a private server I own? Everything you do or say has consequences, even if you don't realize they exist. You're not going to be banned for a playful and harmless insult, but considering the large number of children and young adults playing the game, such a reporting feature was long overdue and is nothing new in online games or social media platforms. Someone who is toxic on one server isn't unlikely to behave the same on any other server. You might be capable of handling simple disputes and insults, but Mojang is better equipped to properly deal with people putting out personal threats, child predators and the alike than you are. Proper moderation takes time, and a lot of servers aren't able to provide that or willfully neglect it. Nevertheless, you can still easily lever out reporting on your server if you wish to do so. #### I still have issues with this, what can I do about it? Whatever you do, don't join the angry mob; instead, provide constructive and useful feedback either on Minecraft's [feedback site](https://feedback.minecraft.net/hc/en-us) or open a ticket on their [bug tracker](https://bugs.mojang.com/) - and remember to keep it civil. # TFAQ (Too Frequently Asked Questions) #### Will Microsoft get my phone number and home address? Yes, your phone number, home address, credit card details, social security number, and mother's maiden name will be sent to Microsoft as soon as someone reports you... the actual answer is no. -
kennytv revised this gist
Jun 30, 2022 . 1 changed file with 13 additions and 5 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -66,7 +66,7 @@ You can find a full list of the Vanilla chat types [here](https://paste.gg/p/Ken The full login and chat flow has been visualized in this beautiful graphic:  # FAQ (Frequently Asked Questions) Before we part ways again, here are answers to some of the more common questions. [Mojang's FAQ](https://help.minecraft.net/hc/en-us/articles/7317376541197) has been updated to answer more of the pressing questions, so it's definitely worth taking a look at. #### Can Microsoft/Mojang see all of my messages? @@ -95,10 +95,18 @@ Yes, very easily. However, considering this comes at the cost of effectively tak Players may also opt-in to only display signed (and thus reportable) messages. #### I still have issues with this, what can I do about it? Whatever you do, don't join the angry mob; instead, provide constructive and useful feedback either on Minecraft's [feedback site](https://feedback.minecraft.net/hc/en-us) or open a ticket on their [bug tracker](https://bugs.mojang.com/) - and remember to keep it civil. # TFAQ (Too Frequently Asked Questions) #### Why can I be banned when playing on a private server I own? Everything you do or say has consequences, even if you don't realize they exist. You're not going to be banned for a playful and harmless insult, but considering the large number of children and young adults playing the game, such a reporting feature was long overdue and is nothing new in online games or social media platforms. Someone who is toxic on one server isn't unlikely to behave the same on any other server. You might be capable of handling simple disputes and insults, but Mojang is better equipped to properly deal with people putting out personal threats, child predators and the alike than you are. Proper moderation takes time, and a lot of servers aren't able to provide that or willfully neglect it. Nevertheless, you can still easily lever out reporting on your server if you wish to do so. #### Will Microsoft get my phone number and home address? Yes, your phone number, home address, credit card details, social security number, and mother's maiden name will be sent to Microsoft as soon as someone reports you. -
kennytv revised this gist
Jun 30, 2022 . 1 changed file with 4 additions and 7 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -67,7 +67,7 @@ The full login and chat flow has been visualized in this beautiful graphic:  # FAQ Before we part ways again, here are answers to some of the more common questions. [Mojang's FAQ](https://help.minecraft.net/hc/en-us/articles/7317376541197) has been updated to answer more of the pressing questions, so it's definitely worth taking a look at. #### Can Microsoft/Mojang see all of my messages? No, only reported messages are sent away for processing. @@ -76,12 +76,10 @@ No, only reported messages are sent away for processing. That's highly unlikely considering how different the underlying tech of filtering vs. reporting/chat signing is... even if it will, it would be trivial to disable it. #### Am I going to be banned for joking with my friends or writing in all caps? No, Mojang have made clear they only intend on hunting down the worst of the worst (suicide threats, racial slurs, doxing, etc.). All reports will be handled in human review. See [here](https://help.minecraft.net/hc/en-us/articles/7149823936781) for a detailed list of punishment reasons. #### What if someone spam reports me? Then *they* get temporarily or permanently banned; the number of reports does not matter. #### Can't someone impersonate me and get me banned? No, they need the private key only you and Mojang have to sign messages as coming from your account. @@ -90,8 +88,7 @@ No, they need the private key only you and Mojang have to sign messages as comin Reports require and automatically send a handful of messages around the selected ones to be included as context. The current implementation is still flawed in this regard, but Mojang are already aware of that. #### Are all bans permanent? No, and if you think you were banned without reason, you can [make an appeal](https://help.minecraft.net/hc/en-us/requests/new?ticket_form_id=360003469452). #### Can servers disable the reporting feature? Yes, very easily. However, considering this comes at the cost of effectively taking power *away* from your users, making them more vulnerable to repeated bullying, it'd be not as merciful of a move as you might think it is. -
kennytv revised this gist
Jun 30, 2022 . 1 changed file with 1 addition and 1 deletion.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -67,7 +67,7 @@ The full login and chat flow has been visualized in this beautiful graphic:  # FAQ Before we part ways again, here are answers to some of the more common questions (some inlcuding screenshots of [Mojang's FAQ](https://help.minecraft.net/hc/en-us/articles/7317376541197)): #### Can Microsoft/Mojang see all of my messages? No, only reported messages are sent away for processing. -
kennytv revised this gist
Jun 30, 2022 . 1 changed file with 5 additions and 2 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -76,10 +76,12 @@ No, only reported messages are sent away for processing. That's highly unlikely considering how different the underlying tech of filtering vs. reporting/chat signing is... even if it will, it would be trivial to disable it. #### Am I going to be banned for joking with my friends or writing in all caps? No, Mojang have made clear they only intend on hunting down the worst of the worst (suicide threats, racial slurs, doxing, etc.). All reports will (supposedly) be handled in human review. See [here](https://help.minecraft.net/hc/en-us/articles/7149823936781) for a detailed list of punishment reasons.  #### What if someone spam reports me? Then *they* get banned from reporting; it's unlikely anything will happen to you.  #### Can't someone impersonate me and get me banned? No, they need the private key only you and Mojang have to sign messages as coming from your account. @@ -88,7 +90,8 @@ No, they need the private key only you and Mojang have to sign messages as comin Reports require and automatically send a handful of messages around the selected ones to be included as context. The current implementation is still flawed in this regard, but Mojang are already aware of that. #### Are all bans permanent? No, and if you think you were banned without reason, you can make an appeal.  #### Can servers disable the reporting feature? Yes, very easily. However, considering this comes at the cost of effectively taking power *away* from your users, making them more vulnerable to repeated bullying, it'd be not as merciful of a move as you might think it is. -
kennytv revised this gist
Jun 30, 2022 . 1 changed file with 26 additions and 24 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -18,40 +18,38 @@ Since commands such as /say, as well as custom commands to broadcast messages or In the wild, you can see this being used in Vanilla's say, me, msg, teammsg, ban, banip, and kick commands. ### Player chat vs. system chat There are two different kinds of chat messages now; player chat and system chat. Player chat is accompanied by the message signature, system chat has no special format or signature attached. You can optionally attach an unsigned component to any player chat message, which will make it look like this (the informative popup is only displayed when you hover over the icon, which you can only see when you focus the chat window):  If you go as far as sending a player chat message with an invalid signature, it will look like this:  System chat messages have no extra formatting. ### Custom formats using chat types While the message always needs to be verified by the player that sent it, player display name, team name, and surrounding format can be freely defined by the server. One of the default chat types looks like this when serialized: ```json { "name":"minecraft:team_msg_command", "id":3, "element":{ "chat":{ "translation_key":"chat.type.team.text", "parameters":[ "team_name", "sender", "content" ] }, "narration":{ "translation_key":"chat.type.text.narrate", "parameters":[ "sender", "content" ] } } }, @@ -62,7 +60,11 @@ Chat type formats can be easily made custom, e.g. turning the translatable into Custom chat types can be added using datapacks or by modifying the chat_type registry in the server (which modded servers such as Paper will need to add API for in the future). Custom chat types will then be sent to each player once when they join. With this, you can in theory also send the same message using different formats to different players, only the actual content is always fixed as part of the signed message. You can find a full list of the Vanilla chat types [here](https://paste.gg/p/KennyTV/0097634eaec944cab46cb9861cb6bfee). ### The login sequence The full login and chat flow has been visualized in this beautiful graphic:  # FAQ Before we part ways again, here are answers to some of the more common questions: -
kennytv revised this gist
Jun 29, 2022 . 1 changed file with 2 additions and 2 deletions.There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -83,7 +83,7 @@ Then *they* get banned from reporting; it's unlikely anything will happen to you No, they need the private key only you and Mojang have to sign messages as coming from your account. #### What if my messages are taken out of context? Reports require and automatically send a handful of messages around the selected ones to be included as context. The current implementation is still flawed in this regard, but Mojang are already aware of that. #### Are all bans permanent? No, and if you think you were banned without reason, you can make an appeal. Other than that, we're still waiting on more clarification from Mojang. @@ -98,5 +98,5 @@ Everything you do or say has consequences, even if you don't realize they exist. Nevertheless, you can still easily lever out reporting on your server if you wish to do so. #### I still have issues with this, what can I do about it? Whatever you do, don't join the angry mob; instead, provide constructive and useful feedback either on Minecraft's [feedback site](https://feedback.minecraft.net/hc/en-us) or open a ticket on their [bug tracker](https://bugs.mojang.com/) - and remember to keep it civil.
NewerOlder