AlixSystem

* Added early support for AlixAtaraxia * Added 26.3 support * Added ClockSkew fingerprinting (when using Ataraxia) * Fixed 2FA setup and recovery security issues * Fixed token persistence, caching, and database synchronization * Added email verification support (to Spigot) * Added panic mode commands and persistent enable/disable controls * Fixed panic mode activation and deactivation timing issues * Fixed firewall enforcement and connection rate limiting * Improved anti-bot detection using SYN fingerprints and MTU analysis * Updated PacketEvents * Fixed startup crashes on newer Paper versions * Fixed Geyser/Floodgate compatibility with newer Geyser versions * Fixed email verification vulnerabilities and added request timeouts * Fixed multiple authentication bypasses and brute-force protection issues * Fixed account recovery, email verification, and 2FA attempt limits * Fixed database persistence issues with login settings * Improved GDPR account deletion and data cleanup * Fixed several configuration-related crashes and validation issues * Fixed various concurrency issues and potential memory leaks * Improved configuration security and file permissions * Fixed message localization and translation handling * Removed unused code and improved error handling * Fixed various command permission and validation issues * Added email verification commands * Added panic mode and player help commands * Fixed unauthorized access vulnerabilities in admin commands * Fixed server shutdown crashes caused by stale connections * Fixed account recovery commands being blocked during login GUIs * Fixed excessive resource usage in captcha and connection handling

Changes since 3.10.0 (DEV-2) * Fixed a nasty issue related to partial writes on congested networks * 'allow-case-sensitive-nicknames' is now false by default * Optimized v4 ip look-ups * Properly accounted for legacy ping * Fixed improper firewalls

* Fixed non-premium players getting an invalid packet message instead of the actual packet (except the very first person) * Added a fail-safe for non-limbo after-verification packet resend

* Fixed version checker errors & offloaded it to blocking execution scheduler

* Fixed SEGFAULT upon panic mode activation (my bad bruh) * Fixed random timeouts (and possibly false firewalling) caused by a race condition * Fixed console spam caused by bots scanning the internet * Improved premium data request sources (Removed AshCon, set Mojang as primary source) * All 'matscan' scans will now be firewalled by default * Added an 'auto' option to premium-uuid * Removed obsolete Internal NIO Interceptor firewall type * Fixed empty password salt hashing issues * Fixed invalid and near-zero timeouts for all firewall entries * Modernized antibot algorithms: C1 -> C2, B2 -> B3 * Removed 'virtual-limbo-server' & '__no-premium-auth-but-keep-identity' from config.yml * Fixed premium auth disconnect errors * Fixed new bedrock players receiving "[No captcha]"

* Fixed some HAProxy set-up issues, such as indefinite waiting and pre-login checks not properly working * Fixed 'Invalid host' sometimes appearing for niche handshake formats * Fixed invalid packet disconnects at password validity feedback

* Added 26.2 support * Drastically reduced additional latency caused by Alix during join * Fixed several errors causing random disconnects to players * Enhanced bot attack & DDoS detection algorithms (Some new ones are still in production) * Optimized several critical parts of connection handling * Added automatic HAProxy support * Reduced the firewall's memory footprint & introduced time-based firewall entries * Added Panic Mode, which allows only already-registered players to join, activated whenever suspicious network activity is detected * Players will now, by default, be sent to the virtual limbo for login, if possible, in order to reduce main server pressure. If this option causes issues or isn't desired, it can be turned off at 'virtual-limbo-login' in config.yml * Enhanced automatic host recognition, now accounting for a reverse-proxy * Added the ability to configure whether users with differently-cased, but ignoring case equal nicknames, should be allowed to join * Reworked Alix's Fast Unsafe Epoll init mechanic * Added atomic file writes & graceful continues at read fail * Fixed 'Already connecting (...)' sometimes appearing for players * Premium requests are now always cached, reducing rate limits * The virtual limbo can no longer be turned off, due to the extreme optimization and functionality it provides. As such, manual visual captcha should no longer ever appear for any player * Fixed several virtual limbo issues, related to a read never completing

* Hotfix for 3.8.1, where new premium players would timeout due to a console error

+ Added 26.1 Support + Added /as rf, used for forcefully registering a player + (Hopefully) Added support for premium player renames * Fixed invalid BCrypt passwords logic

* Fixed possible random client disconnects on some linux machines due to internal flushing error and reversed compression logic * Added a few new configuration options * Changed default encoding strategy to runtime caching instead of pregenerating all * Fixed IP not updating after login