Inactive [Web/Chat]| Facebook | [1.2.5-R1.0]

Discussion in 'Inactive/Unsupported Plugins' started by CookieSoft, Apr 29, 2012.

  1. Offline

    CookieSoft

    [​IMG]
    Facebookv0.1
    It's a cool plugin to login from minecraft to your facebook account!
    "What's done up to now?"
    Every player can login into his/her account, then the displayname will changed to the
    facebook name!
    "Future?"
    In future we will make an open source lib for developers and more functions for the plugin!
    "Open Sorce?"
    No not at the moment, but the plugin will be open source.
    "Save? What about security?"
    No there is no security yet, but there will be and md5 security. And if a developer has an good idea for good security pls pn me!
    "What about the version?"
    So... You can the the version is 0.1 at the moment. That mean there are some bugs and errors and it's a kind of "preview"

    Screenshot
    [​IMG]
    Commands
    /login <email> <pass>

    Download
    You can download the plugin here
    [NEW] Source [facebook.rar] here

    Now i hope the plugin helps you! You can send me feedback, too!
    If there is a youtuber who wants to make a video about this plugin :) ... pls pn me !
     
  2. Offline

    aciid

    Looks good :eek: I'll check it out.
     
    CookieSoft likes this.
  3. Offline

    CookieSoft

    Thx :)))
     
  4. Offline

    A5H73Y

    Looks unsecure "/
    But has potential...
     
    CookieSoft likes this.
  5. Offline

    CookieSoft

    Yes but i wrote it in the description I know and I'm try to make it secure ;)
     
  6. Offline

    A5H73Y

    Hmm i see, i would make that your priority before you add anything else.
     
  7. Offline

    CookieSoft

    ok
     
  8. Offline

    edocsyl

    Or Make it open source that we can see whats happen with our data.
     
    CookieSoft likes this.
  9. Offline

    CookieSoft

    Yes will!

    Ok i released the source ! It's only a .rar not github!

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 25, 2016
  10. Offline

    Deathmarine Retired Staff

    I think this is nice however security is a big thing with me. Here is a good working method of returning a md5 hash.
    Show Spoiler

    public static String encrypt(String password)throws Exception{
    MessageDigest md = MessageDigest.getInstance("MD5");
    md.update(password.getBytes());
    byte byteData[] = md.digest();
    StringBuffer sb = new StringBuffer();
    for (int i = 0; i < byteData.length; i++) {
    sb.append(Integer.toString((byteData & 0xff) + 0x100, 16).substring(1));
    }
    StringBuffer hexString = new StringBuffer();
    for (int i=0;i<byteData.length;i++) {
    String hex=Integer.toHexString(0xff & byteData);
    if(hex.length()==1) hexString.append('0');
    hexString.append(hex);
    }
    return hexString.toString();
    }
     
    CookieSoft likes this.
  11. Offline

    Mr Washington

    md5 can get broken much easier than some other encryption like SHA1. Use SHA1 in my opinion!
     
  12. Offline

    aciid

    Tastes even better salted
     
  13. Offline

    CookieSoft

    WOW thx man!!!!!

    Yes but you can break a facebook account easilier without minecraft and md5 :DD

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 25, 2016
  14. Offline

    Mr Washington

    True enough. Im just saying, from a users perspective, I would rather not have my data put out there at all without some VERY secure encryption. Idk just my ideas!
     
    CookieSoft likes this.
  15. Offline

    CookieSoft

    Yes can be true
     
  16. Offline

    edocsyl

    CookieSoft Hmm, ths dl for the source code isn't working...
     
  17. Offline

    Ziden

    connection.addRequestProperty("Referer", "http://graph.facebook.com/gunp0wder");

    smarty ^^

    i like this idea and i hope to see this coming forward, for instance sending fb messages and changing status, would be great !

    Ur using cookies , isnt using the FB Api bettah ?
    Thanks for ur attention !
     
  18. Offline

    dark_hunter

    Too much salt is bad for your heath.

    Can you upload somewhere else please?

    EDIT:
    Went to that page, where the hell do you download it? Everywhere I click download it takes me to ilivid.com and clearly that's not it.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 25, 2016
  19. Offline

    Splaze

    Awesome! But its confusing with xauth and that plugin [With the /login]
     
  20. Offline

    jithins

    so any updates? to 1.4.2?
     
  21. Offline

    Sushi

    I would even ditch the whole hash thing and just use facebook connect (write a facebook app on heroku or something that auths with facebook connection and create a backend REST API to the facebook app that your plugin can use)
     
  22. Offline

    Gravity Retired Staff

    Dude....

    In any case, I kind of shudder to hear the words "md5" and "security" in one sentence. You should really invest in learning about hashing, encryption, different types of algorithms, etc. if you want to be messing around with people's facebooks.
     
  23. Offline

    Sushi

    I second this, I would recommend blowfish (bcrypt) + salt or SHA256/SHA512 + salt.

    Still, facebook OAuth is pretty good.
     
  24. Offline

    CookieSoft

    Srry bros for the long waiting time I hadn't time to fix or change anything currently I'm working on a new version so I will not update the source link. Come back soon :)...
     

Share This Page