HexMod
HexMod copied to clipboard
Create Deployers can trigger Toolsmith Impeti with its owner as the caster
Modloader
Forge
Minecraft version
1.20.1
Hex Casting version
0.11.1-7-efc8899
Modloader version
47.2.30
Modpack info
No response
The latest.log file
No response
Issue description
Create Deployers can trigger Toolsmith Impeti with its owner (the one who placed it) as the caster. This allows affecting a player remotely without her permission or even instantly killing her (see #663) if a bad guy manages to steal her deployer. This is much easier than True Name stealing and has worse consequences.
Just note that Deployers can be easily moved using Minecart Assemblers.
Steps to reproduce
- Have two players (Alice and Bob) join the same world.
- Make a spell circle containing Mind's Reflection and Reveal.
- Bob: Place a deployer facing the impetus.
- Alice: Make the deployer work, possibly by using a hand crank. ❎ Note that the spell will reveal Bob instead of Null.
A spell circle as described in #663 can kill Bob regardless the distance.
Other information
Curiously, deployers holding casting items will not cast the Hex with its owner as the caster. Running Mind's Reflection and Compass Purification will result in the deployer's position in this case.
this is due to how create deployers make a fake-player of the player who placed them. there is (probably) a way we could add a config to disable fakeplayer starting circles.