-
Notifications
You must be signed in to change notification settings - Fork 534
Closed
Description
I've been noticing this for a very long time, untill the negative fact of it finally clicked into my mind.
When player names log in, they SOMETIMES (Not always) appear very briefly where they last logged out, instead of at the login spawn.
This enables quick players to login with other player's accounts (Maybe while screen recording), and quickly check the coordinates, before they are sent to the normal login position.
This situation can consequently be exploitet in order to find logout coordinates from other players. And then find their bases in Factions.
Demo video of this issue: https://youtu.be/GF2GM50AjvE
Authme version: 5.2-SNAPSHOT-b870
Spigot version: Spigot for 1.9 (First release)