i've just written an article on my experiments & experiences with my TRMNL X that i've had for a little over a month now, focusing on writing plugins for it & a little on the device itself.
you can read it here 😊 – maddy.tech/trmnl-diaries/
maddy.tech
The TRMNL Diaries | Technology | Maddy Miller
A few weeks after getting my TRMNL X e‑ink screen, I tried building my own plugins. The process was surprisingly different from what I expected.
![WorldEdit
WorldEdit is an editing tool developed by software group EngineHub that assists the player in building structures and with creating customized terrain. It offers a variety of tools such as brushes and block replacers; and actions such as copying and pasting and filling and selecting geometric shapes. These tools can speed up building time compared to building without the mod as it offers functionality which the game does not have out of the box.[38][39][40] The mod has been featured on the Minecraft website as one of the most popular building tools,[41] been used in United States patents,[42][43][44] and cited in scientific papers.[45][46] It was initially released worldwide on 28 September 2010 as a plugin for the hMod modification, and has since been ported as a Bukkit plugin and as a mod for the Fabric and Forge mod loaders.[47][48][49][50][51]
Malware
Minecraft mods have been an attack vector of malware by downloading and running malicious mods.[52][53]
In March 2017, Slovak cyber company ESET revealed that 87 examples of trojan horse malware were distributed through the Google Play Store under the guise of Minecraft mods. Their purpose was to either display adverts or con players into downloading other apps. Combined, these fake mods gathered over 1,000,000 downloads in the first three months of early 2017.
In June 2023, attackers gained access to popular mods and modpacks including "Better Minecraft" and created new releases which contained malware, dubbed "Fractureiser" after the Curseforge account that uploaded it.
In July 2023, an arbitrary code execution vulnerability was found in several Forge-based Minecraft mods such as BdLib and EnderCore. The malware was named "BleedingPipe" by a Minecraft security community. It takes advantage of mods incorrectly using deserialization in the "ObjectInputStream" class. Although the vulnerability existed since 2017, a blog post by MMPA brought it mainstream, spreading its use before fixes could be made.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:6hha7lrqrgj2fwtuh4jnugtu/bafkreifhn2hzwg5efbm4ftrczj3cnd4u4v623oe6n7g4uryumebbj62uka)
