Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document "Video Collection" #115

Open
forkiesassds opened this issue Feb 2, 2023 · 8 comments
Open

Document "Video Collection" #115

forkiesassds opened this issue Feb 2, 2023 · 8 comments

Comments

@forkiesassds
Copy link
Contributor

forkiesassds commented Feb 2, 2023

Video 1:
Historical inaccuracies - HiDPI display is being used (despite them being unicorns back in 2010-11 since 4K wasn't even a (broad) thing.), modern logo for WinRAR has been blurred out, along side the icon for a generic (non Oracle (or Sun) build) JDK.
This video shows off R4 and a data reset bug within it.
Video 2:
Historical inaccuracies - Bandicam watermark is of latest versions, where as earlier versions had a different one (investigate if bandicam was a thing back in 2010-11).
Shows off _13 Lilypad and a hidden feature within it that unveils a hidden world
Video 3:
Shows off a player in UNR.PREVIEW2 uncovering a creepy easter egg
Video 4:
Historical inaccuracies - 60FPS I guess?
A Michael P parody in R4... I don't have anything else to say
Video 5:
Shows off a player in R4 discovering an unfinished area in the hub with a bunch of recruiter players in the middle of nowhere.
Video 6:
Guide on how to bypass the bans. Later shows off version _18#. Folder is located in [userpath]\AppData\Local\3emj\Minecraft, folder structure contains DX9 related files and the file structure is like this

auth (contains act.id)
gameroot (i assume this is what would normally be .minecraft)
html_cache (cached pages)
jre (bundled java dir)
resources (sound files)
rt_libs (libraries???)
saves (world files)
d3d9_w.dll
D3DCompiler_42_w.dll
D3DX9_40.dll
D3DX9_41.dll
D3DX9_42.dll
D3DX9_43.dll
index.html
latest-stable.jar
run-jre.bat
self-launcher.exe
xinput_w.dll

act.id format:

//suspended account
text/plain;PT0zRUxPR0lOREFUQS5SZWdpb25Db2RlOjAwLkRldmVsb3Blck1vZGU6MDAuUUFQcmV2aWV3czowMS5QZXJzaXN0ZW50TG93SUQ6MjBiYy5QZXJzaXN0ZW50SGlnaElEOjMwOGQ9PQ;>>>>>; ¼0�;t    ;PT0zRS5Ib3N0bmFtZTp0ZXN0YWxwaGEubWluZWNyYWZ0Lm5ldDoxNDY0OS5zZXJ2ZXI6cHJvZD09

//base64 strings decoded
==3ELOGINDATA.RegionCode:00.DeveloperMode:00.QAPreviews:01.PersistentLowID:20bc.PersistentHighID:308d==

==3E.Hostname:testalpha.minecraft.net:14649.server:prod==

//post guide:
text/plain;PT0zRUxPR0lOREFUQS5SZWdpb25Db2RlOjAwLkRldmVsb3Blck1vZGU6MDAuUUFQcmV2aWV3czowMS5QZXJzaXN0ZW50TG93SUQ6MjBiYy5QZXJzaXN0ZW50SGlnaElEOjMwOGQ9PQ;>>>>>;   �;t    ;PT0zRS5Ib3N0bmFtZTp0ZXN0YWxwaGEubWluZWNyYWZ0Lm5ldDoxNDY0OS5zZXJ2ZXI6dGVzdD09

//base64 decoded
==3E.Hostname:testalpha.minecraft.net:14649.server:test==

Video 7:
A group of players showing off their builds and how to build. Version is assumed to be Cypress. Seems to look like AltMojang (or whatever 3emj means) has taken over Minecraft development, since their version seems to be considered the main version since some time in 2010.
Video 8:
Historical inaccuracies - recorded with a modern smartphone
A recruiter/easter egg world player in Cypress stalking the same players from video 7.

Theories:
THEY ARE IN A PARAREL UNIVERSE!!!

@forkiesassds
Copy link
Contributor Author

Ok, never mind. A lot of videos show dates from 2011...

@forkiesassds
Copy link
Contributor Author

forkiesassds commented Feb 2, 2023

About the file I should've posted a HEX dump as well. welp... Since that also contains info like player ID which is a 32bit integer (have fun when 2b+ people make an account...)
Player from video 6 has player ID of 2368781344. Guide shows that they are changing their player ID to the one of dev2's which explains why the description of "Sunrise" mentions someone has impersonated dev2.

@forkiesassds
Copy link
Contributor Author

In November 2011 R4 was latest version, in December 2011 Cypress was the latest, and in development was _18#

@RedstoneWizard08
Copy link

RedstoneWizard08 commented Feb 3, 2023

I updated everything with (hopefully) correct JSON conversions, and broken stuff like was shown in the right side of the hex editor

# ------------ Original `act.id` file ------------

text/plain;PT0zR
UxPR0lOREFUQS5SZ
Wdpb25Db2RlOjAwL
kRldmVsb3Blck1vZ
GU6MDAuUUFQcmV2a
WV3czowMS5QZXJza
XN0ZW50TG93SUQ6M
jBiYy5QZXJzaXN0Z
W50SGlnaElEOjMwO
GQ9PQ;>>>>>; ¼0�
;t    ;PT0zRS5Ib
3N0bmFtZTp0ZXN0Y
WxwaGEubWluZWNyY
WZ0Lm5ldDoxNDY0O
S5zZXJ2ZXI6cHJvZ
D09

# ------------ base64 strings decoded ------------

==3ELOGINDATA.RegionCode:00.DeveloperMode:00.QAPreviews:01.PersistentLowID:20bc.PersistentHighID:308d==

==3E.Hostname:testalpha.minecraft.net:14649.server:prod==

# ------------ as json ------------

{
    "3ELOGINDATA": {
        "RegionCode": "00",
        "DeveloperMode": "00",
        "QAPreviews": "01",
        "PersistentLowID: "20bc",
        "PersistentHighID": "308d"
    },

    "3E": {
        "Hostname": "testalpha.minecraft.net:14649",
        "server": "prod"
    }
}

# ------------ cracked `act.id` file ------------

text/plain;PT0zR
UxPR0lOREFUQS5SZ
Wdpb25Db2RlOjAwL
kRldmVsb3Blck1vZ
GU6MDAuUUFQcmV2a
WV3czowMS5QZXJza
XN0ZW50TG93SUQ6M
jBiYy5QZXJzaXN0Z
W50SGlnaElEOjMwO
GQ9PQ;>>>>>;   �
;t    ;PT0zRS5Ib
3N0bmFtZTp0ZXN0Y
WxwaGEubWluZWNyY
WZ0Lm5ldDoxNDY0O
S5zZXJ2ZXI6dGVzd
D09

# ------------ base64 decoded ------------

==3E.Hostname:testalpha.minecraft.net:14649.server:test==

# ------------ as json ------------

{
    "3E": {
        "Hostname": "testalpha.minecraft.net:14649",
        "server": "test"
    }
}
// A TypeScript reperesentation of the JSON from the `auth.id` files
// Most of the documentation is probably incorrect, they're just my best guesses.

export interface AuthID {
    // Saved login info?
    "3ELOGINDATA": {
        // Some numerical region code?
        RegionCode: number;
        // Should developer mode be active?
        DeveloperMode: boolean;
        // Should QA previews be enabled?
        QAPreviews: boolean;
        // Some sort of byte offset (start) for requesting data?
        PersistentLowID: string;
        // Some sort of byte offset (end) for requesting data?
        PersistentHighID: string;
    };
    
    // Game connection info?
    "3E": {
        // The Minecraft server URL for worlds to be hosted on.
        Hostname: string;
        // Connect to the "test," "prod," or some other server?
        server: "test" | "prod" | string;
    };
}

// The original `auth.id` file.
export const originalJson: Partial<AuthID> = {
    "3ELOGINDATA": {
        RegionCode: "00",
        DeveloperMode: false,
        QAPreviews: true,
        PersistentLowID: "20bc",
        PersistentHighID: "308d",
    },

    "3E": {
        Hostname: "testalpha.minecraft.net:14649",
        server: "prod",
    },
};

// The cracked `auth.id` file.
export const crackedJson: Partial<AuthID> = {
    "3E": {
        Hostname: "testalpha.minecraft.net:14649",
        server: "test",
    },
};

@forkiesassds
Copy link
Contributor Author

In video 6 the login error is caused by the persistent low and high IDs not being changed, also it doesn't make sense that the high bytes are labeled as low bytes and the low bytes labeled as high bytes.

@forkiesassds
Copy link
Contributor Author

The real mystery is what does 3emj stand for?

@MotherLife
Copy link

MotherLife commented Feb 4, 2023

**_

mmm

_**

@RedstoneWizard08
Copy link

The real mystery is what does 3emj stand for?

Hmmm... Googling doesn't help... I wonder if it's referenced anywhere else. I think it's the name of the company that is making the alpha branch (or the Mojang subsidiary possibly)?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants