It downloads and executes a Python script to *update the store page?* Log4j/log4... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tart-lemonade on Feb 3, 2025 | parent | context | favorite | on: Remote Code Execution in Marvel Rivals Game

It downloads and executes a Python script to update the store page? Log4j/log4shell, anyone?

Just build a JSON API! It's not that hard! You don't need to RCE your game every time it launches just for microtransactions.

X-Cubed on Feb 4, 2025 [–]

> Just build a JSON API! It's not that hard!

I agree that a JSON API is a better approach, but it's possible for AAA game developers to screw that up too: https://arstechnica.com/gaming/2021/03/developers-to-update-...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact