In the months since The National Review published an article on Minecraft skin templates and the potential pitfalls of the concept, many have expressed concerns about how the template will work and how it can be exploited for nefarious purposes.
A number of Minecraft skins were released with a free receipt template, and many have been reported for having been exploited.
The Free Receiver Template, as it is commonly known, allows for free receipt and gift certificates to be issued to anyone, and can be used to send items directly to the recipient.
However, in a recent post, developer Markus “Notch” Persson wrote that the template was being exploited and that the developer has taken steps to stop it.
The post is titled “Free Receipt Templates Are Being Used to Obtain Fraudulent Gift Certificates.”
The post has since been deleted from Notch’s personal Facebook page.
It is unclear if this is a direct response to the post, or if Persson has just deleted it because of some other concern.
In a tweet, Persson explained the nature of the vulnerability.
“The templates used to issue gift certificates and gift vouchers are being exploited,” he wrote.
“If anyone knows of a way to stop this, let me know.
I’m looking into this.”
Notch did not elaborate further on the vulnerability, and instead referred to the template as “a good tool” to protect against malicious activity.
“It is a great template for those who are looking for something to send someone an e-gift,” Notch wrote.
He added that he “wouldnt be surprised” if the vulnerability was exploited in the future.
The problem The Free Recipient Template is one of several free receipt templates currently being used in the game, and it has been used to grant access to some players for years.
However the vulnerability in question is a little different than the others, because it only works if a person has downloaded the template from a server.
As a result, someone who owns a copy of the template may be able to issue a free gift certificate, gift voucher, or even purchase a Minecraft skin.
The template does not automatically grant access if the user logs out or disconnects, and a screenshot of the receipt may appear in the recipient’s inbox.
As mentioned above, not everyone who has downloaded and installed the template would have access to the code.
However many people who downloaded the templates have also been reported to have received gift vouchers that were issued as gift certificates.
For example, in July, a Minecraft user named “Dakota” received a gift voucher for a Minecraft Skin, which was issued as a gift certificate by the same server that issued the Free Receivers.
However Dakota did not get access to any of the code that created the gift certificate or gift voucher.
As such, he was able to get around this vulnerability and continue using the template.
However it is unknown if this person has actually used the template, or whether he just downloaded the code and is using it in the meantime.
“We are working to fix the vulnerability,” Notched wrote.
In an email to the National Review, Notch said that he would be contacting the developer who originally released the template and asking for an explanation.
He also noted that he is aware of the potential exploitation, and said that the code he was using to issue the gift certificates “has not been modified.”
While it is unclear what the developer will do with the Free Recipients template, it is possible that the vulnerability will be patched in the coming weeks.
It remains unclear if the Free Receipt Template will be affected in any way, but it is likely to be the case that Minecraft skin creators will not be able give free receipts or gift vouchers until Mojang releases a patch for the vulnerability that is fixed.
“I can assure you that the templates that are used for free have been tested for malicious purposes and have been thoroughly checked and verified by the Mojang developers to prevent them from being used to generate fraudulent gift certificates or gift certificates,” Notches statement concluded.
Minecraft skin makers have also received criticism for the Free Facsimile feature in the recent release of Minecraft 1.9.1, which introduced the ability to “simulate” Minecraft skins.
In this feature, Minecraft skin artists can create skins that are indistinguishable from the real deal.
The developers have also recently released a patch that removes the Free Fakery feature from Minecraft 1_10.1 and Minecraft 1, and adds a “free” receipt template to the game.
Mojang has yet to provide an update on the Free Gift Vouchers vulnerability, but Notch told Polygon that they are working on a fix.
“There is no fix for this issue at this time,” he said.
“As we are aware of it, there is no solution that will prevent this issue.”
We will continue to update this article as more information becomes available.