RIZZASTER

Whitelist Process Update Following Unauthorized Access Incident

/archive/tebex/datapacks/ · last edited 22 Aug 2021 · Billing

In early June, a minor security incident occurred when an unregistered player joined the server using a shared login from a previous user who had left the community. This breach allowed access to server features not intended for new players, including early access to certain game areas and chat privileges. The incident was detected during routine moderation checks when a user with inconsistent activity patterns began interacting in channels reserved for verified members.

The root cause was traced to an outdated method of verifying new members. Previously, the whitelist system relied on a manual list shared via a private document, which was occasionally leaked or misused. This process lacked real-time verification and made it easy for unapproved players to gain access by copying information from past lists. The risk was heightened during peak hours when moderators were monitoring multiple tasks and could not verify every join request.

As a result, the whitelist system was updated to a new, automated verification process. New applicants must now complete a short form that includes a unique code generated from a secure server-side system. This code is tied to a single use and expires after 24 hours. Moderators can then confirm identities through a private chat with the applicant using a pre-registered nickname, which must match the name used in the form. Once verified, the player is granted access and added to the whitelist database with a timestamped entry.

This change eliminated the risk of shared or reused codes, reduced manual errors, and made it easier to track who joined and when. The new system also logs all access attempts, which helps identify suspicious behavior. As part of the rollout, all existing members were reminded to re-verify their status during the next server login to ensure their information was current. No exceptions are made to the new process, and all new applicants must follow the updated steps.

Related pages

Up to /archive/tebex/datapacks/ · Archive home