For those who use PolyMC, the most pressing question at the moment would be "what should I do right now"; one of the discussions had a link to the following gist https://gist.github.com/Earthcomputer/dc65391f84a2c19ebac6c3... which says that the two most important steps (before opening PolyMC, otherwise it could auto-update) would be to disable automatic updates, and change the metadata server to the one from the MultiMC project (from which PolyMC had forked).
That gist also links to an issue on the flatpak package (<https://github.com/flathub/org.polymc.PolyMC/issues/35>); if I understood the situation correctly, if you're using the flatpak package, they will do the metadata server change for you (and it probably never had automatic updates enabled, since updates should be through flatpak itself).
No, the person who owns the GitHub organization kicked out all other developers with zero notice and started talking about how he's purging the "leftoids" from the project and that all other contributors were "promoting radicalist leftist queer ideology".
The owner whose account might be hacked or might just have decided to do this kicking out all the active devs from the github project at the same time is some important context to go with the issue.
The other maintainers have already started a fork.
Various people (such as the creator of the PolyMC fork that is confusingly named PollyMC, notice the amount of 'l's) suggest to change the metadata server: https://github.com/fn2006/PollyMC/commit/121f6b2a4e05fa15b41.... I would personally suggest to use this fork because it does not require access to your MS account, so even if it was compromised the risk would end up being limited in comparison.
Side note: I find it sad to see how people took the chance to spread misinfo.
Example 2: claim that the PolyMC developer received death threats: https://news.ycombinator.com/item?id=33240644, I have not seen any evidence for this claim in the repo nor in the reddit and twitter threads. It might have been in DMs but the developer hasn't said anything about it to my knowledge.
Readit News
That gist also links to an issue on the flatpak package (<https://github.com/flathub/org.polymc.PolyMC/issues/35>); if I understood the situation correctly, if you're using the flatpak package, they will do the metadata server change for you (and it probably never had automatic updates enabled, since updates should be through flatpak itself).
They aren't ran in a sandbox or anything, so whoever controls meta.polymc.org can run whatever they want on your machine.
What's the issue here? I'm not sure I understand the context.
[1]: https://www.reddit.com/r/PolyMCLauncher/comments/y6k4x7/swit... [2]: https://github.com/PolyMC/PolyMC/commit/ccf282593dcdbe189c99...
The other maintainers have already started a fork.
https://github.com/PlaceholderMC/PlaceholderMC
https://steamcommunity.com/id/LennyMcLennington/
https://www.washingtonpost.com/wp-srv/national/longterm/unab...
Deleted Comment
Various people (such as the creator of the PolyMC fork that is confusingly named PollyMC, notice the amount of 'l's) suggest to change the metadata server: https://github.com/fn2006/PollyMC/commit/121f6b2a4e05fa15b41.... I would personally suggest to use this fork because it does not require access to your MS account, so even if it was compromised the risk would end up being limited in comparison.
Side note: I find it sad to see how people took the chance to spread misinfo.
Example 1: claim that the MultiMC (not PolyMC!) developer is an alt right person who hates trans and gay people https://www.reddit.com/r/PolyMCLauncher/comments/y6k4x7/swit... (they took that idea from https://twitter.com/13yodeerfox/status/1582106791327899648, which did not even mention anything about lgbt)
Example 2: claim that the PolyMC developer received death threats: https://news.ycombinator.com/item?id=33240644, I have not seen any evidence for this claim in the repo nor in the reddit and twitter threads. It might have been in DMs but the developer hasn't said anything about it to my knowledge.
Dead Comment
Dead Comment