Luigi Auriemma

Hi!

I was looking through recently released public beta version of Minecraft server (multiplayer/alpha)
So, i wanted to see how login packets are sent/recieved, and i got this:

000ABCDE
A = Length of Username Packet (from here to password length)
B = Length of username
C = Username
D = Length of password
E = Password

So, i made a simple listener, and i recieved the username, tho the password isn't passed from client to server yet, so it's just: "Password"

So, i thougt that there could be possible fake players bug, but im not really sure

if you have a doubt you can just test it.
if the protocol is so simple you can just dump this first packet or data block (if tcp) in a file and then send it to your local server using multiple netcat sessions or directly tcpfp: tcpfp -f dump.dat SERVER PORT