Technic Blog

Why The Downtime?

Hi.

 

Yesterday an admin account was compromised within the Technic Platform software we use. Our servers, databases and other assorted 'very important' things were NOT compromised, only the internal software we use to administrate the Platform itself. 

The result of this was someone used the admin account to grant a brand-new account admin access, and then went around deleting packs and changing emails to accounts. Immediately this was noticed (you can’t just delete the most popular user-created modpack of all time) and the servers themselves were shut down by me. Thus, the 503 page everyone saw for the last 12+ hours. 

 

I want to be clear that our passwords are hashed and salted and can’t be accessed from the Platform software. An admin can change passwords but can’t see what the current passwords are.

 

The result of this now is that the last day or so has been erased from the Platform’s memory and it thinks it was around 24+ hours ago. Our security has been re-done and now we offer various features. The most important one would be 2-factor authentication. It’s available for any user in your profile page if you’d like to use it (and I’d suggest you do if you run any sort of business ventures with your modpack/servers). As far as another issue happening like this it should be very unlikely as admin accounts within our software can no longer admin other admins which prevents specifically what this attack did. 

 

UWM had a real-time account of all this as it happened if you are interested

https://unitedworldminers.com/technic-has-been-hacked-a-bit/

 

As for why we were attacked? There is a lot of money that is moved around because of the Platform. While we at Technic don’t run servers or accept donations, server operators use the Platform to serve their customers. Because of this there is real value that can be targeted when it comes to modpacks, servers, rankings and the accounts attached to them.  

 

Thanks for all your guys’ patience with us as we dealt with this issue. We’ll be keeping an eye out as always for anything weird that happens and hopefully have prevented other attacks that use this avenue.   

 

-KakerMix  

New Redesign

Hi.

We've gone through yet another revision of the Technic Platform and the new design is live. This new look allows more modpacks on a single page vs. the old style list, and the new design works well on *mobile* browsers which is aces. We will be going through and fixing what things we've missed and tweaking as needed.
Thanks.

Technic Merchandise and You: It Is Now Available

Now you can have it! Working with District Lines we've got Technic, Attack of the B-Team and Blightfall merch to those of you that want it. This is also a way to support Technic directly if you're into that. 
Note that the shirts are silk-screen printed and American Apparel, these are nice quality items. 

Solder v0.7.3.1 released


Solder v0.7.3.1 has just been pushed live! Make sure to report any new issues/bugs here: https://github.com/TechnicPack/TechnicSolder/issues

Bug fixes and tweaks

 

 - This fixes a major bug that prevented users from adding/hashing modversions from a local repo. #498

Credit to Ionaru for the quick report! Thank you!


Solder v0.7.3.0 released


Solder v0.7.3.0 has just been pushed live! Make sure to report any new issues/bugs here: https://github.com/TechnicPack/TechnicSolder/issues

Here's the changelogs!

New File Sizes!

Note: This requires a migration! Guide: Updating Solder

This is a completely internal change that required a massive rewrite of our URL/cURL libraries. What this will allow, is the ability for more accurate status bars/information displayed in the launcher during installation/updates. It should help show exactly what file is taking so long on those pesky big modpacks.

The Launcher currently does not support this feature but it will be implemented soon!

New alerts! (jGrowl alerts, Credit to Indemnity83)

Solder has made a big change from those annoying bootstrap alerts to a JS library, jGrowl.

This should be a much nicer change especially when updating builds! Feel free to leave a comment on the Solder issue tracker on the change and if you have any ideas to better optimize the feature.

Revamped unit testing!

Unit testing has been completely revamped to cover multiple database backends (MySQL & Postgres) as well as testing against the new PHP 7 release.

https://travis-ci.org/TechnicPack/TechnicSolder

Bug fixes and tweaks

- Completely revamped MinecraftUtils library due to UrlUtils changes. MD5 support has been dropped since this is handled by the Launcher now. Only MC versions are polled.

- Allows the deletion of the first user. Fixes #454 (Credit to EntranceJew)

- Added warnings for deleting your own account. (Credit to EntranceJew)

- Fixed typo in Contributing.md. (Credit to rockhopper72)

- Fixed commit links to API endpoint instead of the Github web page. (Credit to Isigiel)

- Fixed a bug where modpages would fail to load. (Credit to EntranceJew)

- Made .panel-body show scrollbars on overflow. Fixes #430  (Credit to EntranceJew)

- Added the latest mod version to the mod list (See image below). Fixes #401  (Credit to EntranceJew)

Latest mod version on mod list