TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

530 点作者 leijurv大约 1 年前

18 条评论

dzdt大约 1 年前
Back in 1999-2000 there was an &quot;International RoShamBo Programming Competition&quot; [1] where computer bots competed in the game of rock-paper-scissors. The baseline bot participant just selected its play randomly, which is a theoretically unbeatable strategy. One joke entry to the competition was carefully designed to beat the random baseline ... by reversing the state of the random number generator and then predicting with 100% accuracy what the random player would play.<p>Edit: the random-reversing bot was &quot;Nostradamus&quot; by Tim Dierks, which was declared the winner of the &quot;supermodified&quot; class of programs in the First International RoShamBo Programming Competition. [2]<p>[1] <a href="https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20180719050311&#x2F;http:&#x2F;&#x2F;webdocs.cs.ualberta.ca&#x2F;~darse&#x2F;rsbpc2.html" rel="nofollow">https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20180719050311&#x2F;http:&#x2F;&#x2F;webdocs.cs...</a><p>[2] <a href="https:&#x2F;&#x2F;groups.google.com&#x2F;g&#x2F;comp.ai.games&#x2F;c&#x2F;qvJqOLOg-oc" rel="nofollow">https:&#x2F;&#x2F;groups.google.com&#x2F;g&#x2F;comp.ai.games&#x2F;c&#x2F;qvJqOLOg-oc</a>
评论 #40081037 未加载
评论 #40081169 未加载
评论 #40080652 未加载
评论 #40083182 未加载
评论 #40084004 未加载
chc4大约 1 年前
LLL lattice reduction is the same algorithm that can be used for cracking PuTTY keys from biased nonces from the CVE a few days ago. &#x27;tptacek explained a bit about the attack (and links to a cryptopals problem for it, which I can almost pretend to understand if I squint) <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=40045377">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=40045377</a><p>In a similar vein, the SciCraft minecraft server had a creeper farm which used some sort of black magic setup in order to deterministically manipulate an RNG state to trigger a &quot;random&quot; lightning strike at a specific block every frame in order to get better creeper drops. <a href="https:&#x2F;&#x2F;youtu.be&#x2F;TM7SutJyDCk" rel="nofollow">https:&#x2F;&#x2F;youtu.be&#x2F;TM7SutJyDCk</a>
评论 #40083189 未加载
评论 #40083482 未加载
评论 #40081459 未加载
NoMoreNicksLeft大约 1 年前
Oh god. You just wake up one morning, to see blocks in the sky that weren&#x27;t there the night before, ghostly and foglike, until a moment later they&#x27;re visible as redstone and observer and slime, and you can see the dropping infinite TNT. All because the server gave away your position. You can still escape it, there might even be a few seconds to grab what you can out of the chest and run, or to build an obsidian shelter, but that&#x27;s about it. Not enough time to build a precisely aimed cannon and you couldn&#x27;t get the elevation right anyway. Maybe if you had an elytra and some rockets you could go sabotage, even then there&#x27;s this big worldeater hole just 16 chunks away. Have they lava trapped all the nearby nether portals?
pclmulqdq大约 1 年前
I have seen a lot of interesting and funny RNG issues, but this is one of the most sophisticated exploits for the least payout. A wonderful work of art.
评论 #40080870 未加载
评论 #40081757 未加载
bee_rider大约 1 年前
Pretty cool exploit.<p>The idea of a free for all bug abusing server is pretty neat, a whole ‘nother level of the game.<p>I guess this is what “actually fighting” (rather than just using in-game battling mechanics) would look like if the metaverse really happened ever.
评论 #40080709 未加载
评论 #40081396 未加载
评论 #40082203 未加载
评论 #40080480 未加载
评论 #40082891 未加载
ZeWaka大约 1 年前
Just watched the video on this! It&#x27;s definitely a cautionary tale of having your random sources interact - applicable to so many important systems.<p>I often find myself sharing the rng in my code for performance reasons, but stories like this definitely make me pause.
评论 #40080294 未加载
lxe大约 1 年前
The video on this is amazing: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=maMpMOnIJDE" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=maMpMOnIJDE</a>. I had no idea how sophisticated the community was.
评论 #40082092 未加载
评论 #40085195 未加载
niederman大约 1 年前
Even better, this style of RNG cracking has even been done <i>in-game</i>:<p><a href="https:&#x2F;&#x2F;youtu.be&#x2F;FPmQ0rnJjNc?si=tTFObcfZ-ILanL_A" rel="nofollow">https:&#x2F;&#x2F;youtu.be&#x2F;FPmQ0rnJjNc?si=tTFObcfZ-ILanL_A</a>
skitter大约 1 年前
Impressively, there&#x27;s Mess Detector, a machine built in Minecraft itself that predicts the internal state of the rng, using the position a lit tnt (instead of a block drop):<p><a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=FPmQ0rnJjNc" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=FPmQ0rnJjNc</a>
er4hn大约 1 年前
This appears to be a State Compromise Extension Attack (<a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Random_number_generator_attack" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Random_number_generator_attack</a>) which is something that PRNGs that are not CSPRNGs can be subject to.<p>At this point it feels like having PRNGs be defaults is just not that safe of a thing to offer in libraries. Like defaulting to allow TLSv1.0 or blowfish in 2024.
dzogchen大约 1 年前
I loved playing on 2b2t, until it got too popular all of the sudden when a YouTuber did a video on it.<p>2b2t (an anarchy servers in genral) are Minecraft the way it is meant to be played.
评论 #40080800 未加载
评论 #40085462 未加载
评论 #40081661 未加载
bingaling大约 1 年前
reminds me of phase space plots of weak tcp isn rng<p><a href="https:&#x2F;&#x2F;lcamtuf.coredump.cx&#x2F;oldtcp&#x2F;tcpseq.html" rel="nofollow">https:&#x2F;&#x2F;lcamtuf.coredump.cx&#x2F;oldtcp&#x2F;tcpseq.html</a><p><a href="https:&#x2F;&#x2F;lcamtuf.coredump.cx&#x2F;newtcp&#x2F;" rel="nofollow">https:&#x2F;&#x2F;lcamtuf.coredump.cx&#x2F;newtcp&#x2F;</a>
评论 #40080635 未加载
moritonal大约 1 年前
Love how it&#x27;s basically the Dark Forest logic at play. The only true way to live is to hide your location and not give off signals.
danielwmayer大约 1 年前
Yo Leijurv this is so sick! As a fellow game hacker this sort of stuff is super inspiring.<p>My girlfriend and I watch all the fitmc videos even though neither of us play minecraft, and love the ones detailing your insane tooling the most.<p>Ever since we watched the nocom one I’ve wondered what you do professionally - are you in the infosec space?<p>With the amount of math and computer science knowledge you put into your work I would guess more in algorithmic trading or something like that. No worries if you don’t want to answer, just curious!
评论 #40083000 未加载
sdwvit大约 1 年前
Some extra piece of background: 2b2t is a famous server for people trying to build great structures and then for other people to snipe their locations and grief said great structures. So this exploit makes a lot of sense.
smithcoin大约 1 年前
Leijurv, did you do any collaboration with Matt Bolan or did you guys independently discover this? I can only imagine the power of your two minds combined. Loved the video. Also laughed when I found out you named baritone for fit’s voice.
评论 #40091659 未加载
CERNoholic大约 1 年前
The video looks very much like a particle collider’s detector output.
lawrenceyan大约 1 年前
What level of compute would you need realistically to start doing things like this irl instead of in Minecraft I wonder?