Hacker News Reader

Code execution in a JVM is typically equivalent to code execution on the host where it's running.

Because this vulnerability affects both clients and servers, it sounds like a good way for someone to write a worm that ends up creating a giant botnet by spreading from servers to clients and vice-versa.

View on HN

Wow. How have I not realized this. Imagine something like this on vanilla. The implications would be incredible. From 1 player to the server to every client AND THEN to every other server the clients join and so on. I can imagine that only taking days for a majority takeover.

Something like the Samy worn

Or just imagine it in OptiFine which for a long time every sane "vanilla" player used. Yes Java can be decompiled, but on top OF is closed source. At least Sodium and friends are better now.

Reply on news.ycombinator.com