1. nicatronTg
    Created by nicatronTg
    Oct 17, 2016 at 2:58 AM
    Welcome to TShock for Terraria 4.3.20 for Terraria This is an important security release. You should update as soon as possible. Download now, via Github Releases.

    Notable changes:
    • Security improvement: The auth system is now automatically disabled if a superadmin exists in the database (@Enerdy).
    • Removed the auth-verify command since auth now serves its purpose when necessary (@Enerdy).
    • Security: /" exploit can no longer break chat mute filters (@Simon311).
    • Fixed an issue where sometimes players could connect briefly during server shutdown, leading to errors (@Simon311).
    • Fixed wyverns despawning & not behaving like normal (@WhiteXZ).
    • Fixed major security issue where InvokeClientConnect could be exploited to do terrible, terrible things (@Simon311, @nicatronTg, @popstarfreas, @ProfessorXZ, @WhiteXZ).

    If you only want the security update just update the TerrariaServer executable.

    The first time use auth system has been rebuilt. /auth supersedes /auth-verify, and if a SuperAdmin exists, then the auth system will be automatically disabled.

    Technical exploit details can be found on the git commit. This can, at minimum, be used to avoid server mutes, change names, bypass grief checks based on timeouts and thresholds, and more. We extend extreme thanks to @Simon311 for testing all implications associated with this issue.
  2. nicatronTg
    Created by nicatronTg
    Oct 15, 2016
    If you've been in Slack, you've noticed that most of our builds are performed by two continuous integration servers: Travis CI & Bamboo. Travis has been building TShock for a long time, but we've always maintained our own build server because of the necessity to offer unstable downloads.

    Beginning today, we've shut down Bamboo entirely in favor of Travis. The build logs are now here and the downloads are now here. The build logs are broken down by branch and every release is numbered according to its Travis build number. As always, aside from the master builds, general-devel is unstable and not suggested for use in production.

    With that being said, if you are a user who lives on the edge, be prepared to start reporting Travis build numbers and not Bamboo build numbers for bugs.

    The rationale behind the change is simple: Bamboo is another server we're running and that's not good from a risk scenario. Bamboo frequently issues security patches that need to be installed same-day, meaning we're left with a vulnerable server running on the internet for sometimes hours before its patched. With Travis, we're not running anything locally. Everything is much nicer and more secure.

  3. nicatronTg
    Created by nicatronTg
    Oct 14, 2016
    We've tagged some issues with Hacktoberfest on the TShock repo. From now until October 31st, you can win a limited edition t-shirt and stickers from DigitalOcean if you submit 4 Hacktoberfest pull requests anywhere on Github.

    You need to sign up first, but once you do, just make four pull requests and you're set. We've tagged a handful of issues that we'd like done by new community members and are eager to see what happens as a result. Have fun!
  4. Wight
    Created by Wight
    Oct 4, 2016
    It's that time again, another Terraria update has come and the apocalypse looms...
    But have no fear, TShock is here!
    That's right, this release introduces compatibility for Terraria and also chucks in a few bug fixes (free of charge!) so that you can get back to murdering random NPCs ASAP.

    • Compatibility with Terraria (@Simon311)
    • API: Version tick 1.25 (@Simon311)
    • API: Resolved some issues with the ItemForceIntoChest hook (@WhiteXZ, @Patrikkk)
    • API: Resolved some shonky code that caused Vitamins and other Ankh Shield related items to drop at strange rates or not at all (@ProfessorXZ, @WhiteXZ, @nicatronTg)
    • Fixed magical ice blocks not working correctly (@ProfessorXZ)

    As usual you can download via GitHub Releases.
  5. nicatronTg
    Created by nicatronTg
    Sep 27, 2016
    If you live in America you need to register to vote. Voting is one of the rights the founding fathers fought for, and it's basically in your blood. Register today.