Ancestors

Written by Fred :godot: on 2024-11-28 at 16:27

Thoughts on #Godot #security breach 🧵 :

• While I'm "glad" that exploit has to come from non-official sources, I find problematic how dismissive the community is about it. Specially when the "non-official source" is not an obvious shady site on the internet, but #Github, the same site that hosts the Godot repository. The fact that the loader bypassed Github scanning IS a concerning factor, even if it needs an human factor, people not verifying the author of the repo, for it to work.

=> More informations about this toot | More toots from fred@mastodon.gamedev.place

Toot

Written by Fred :godot: on 2024-11-28 at 17:01

• To conclude for the time being; security cannot be understated. Not only for the software side, but human side as well. Users, developers and players, should be made aware of known risks around your product.

I highlight the risk this brings to DLCs and mods, where caution is the lowest. If your game support external resources, please consider noting your community about it. Be proactive, not reactive, when it's too late already.

=> More informations about this toot | More toots from fred@mastodon.gamedev.place

Descendants