OpSec

New Features and Fixes

New Features

• Added a one-time hint message when a key resolution exploit is first detected, telling users they can disable chat and toast alerts.
• Replaced the "Don't Show Again" button on the update screen with "Skip This Version" to only skips the specific version shown, so future updates will still trigger the notification.
• Added interception type (TRANSLATION, KEYBIND) to distinguish between interception sources in log output.
• Added Minecraft 1.21 support.

Bypass Fix

• Fixed a server resource pack key poisoning bypass where servers could inject custom keys and their respective values via server pack. The old approach auto-whitelisted all server resource pack keys to prevent spoof detection but incorrectly whitelisted keys that are also in installed mods, allowing servers to detect mods by placing and probing mod keys in the server resource pack. Blocked keys now return the server pack value instead (matching what a vanilla client would see).

Before (1.0.5 and below):

Revealed actual client values because OpSec incorrectly whitelisted keys that are both in the server resource pack and installed mod(s).

After (1.0.6):

Now returns the server resource pack values (if it exists) just like vanilla clients.

Other Fixes

• Fixed mods with only keybind keys not appearing in whitelist and /opsec info.
• Fixed key resolution protection not activating when brand spoofing was disabled.
• Fixed key resolution alerts and logging not showing the actual returned resolved value to the server.
• Fixed dedup caches not clearing between sign/anvil screen entries, causing stale state to suppress alerts on repeated probes.

For Minecraft Fabric 1.21 to 1.21.11 Full Changelog: https://github.com/aurickk/OpSec/compare/V1.0.5...V1.0.6