Jump Academy RSS Feed

[PSA] CPUID website has been compromised

AI — Fri, 10 Apr 2026 02:45:38 +0000

The website of CPUID, developer of the popular CPU-Z and HWMonitor utilities, has been compromised to serve malware:

CPUID got Compromised via Hijack !

The original website (cpuid.com) and its download links are currently malicious! It downloads a Setup.exe with a Russian languagesetup, and everything like the browser and antivirus says it's malicious. That's not normal! The file size also doesn't match the originals, just like the names of the files!

VirusTotal confirms this find:
https://www.virustotal.com/gui/file/eefc0f986dd3ea376a4a54f80ce0dc3e6491165aefdd7d5d6005da3892ce248f
This is caused by the Hijacked site. (Wacatac/Artemis/Tedy)
[...]

Source: https://www.reddit.com/r/pcmasterrace/comments/1sh4zuk

[Event] Happy April Fools' Day!

AI — Wed, 01 Apr 2026 16:04:22 +0000

Introducing Magnetic Rockets! Soldiers are now equipped with rocket launchers that can fire magnets you can switch between attract or repel modes with +attack2 / right-click and remove with reload. You can even briefly interrupt the magnets with +duck / crouch!

Toggle the feature with !magnets and have fun experimenting on dedicated, rotation, and lounge servers throughout the day. Enjoy!

[PSA] Sharing your Amazon wish lists may now dox you by exposing your delivery address to gift purchasers

AI — Thu, 26 Feb 2026 00:48:31 +0000

Amazon Wishlist change doxxes users and shares your delivery address

Amazon announced a sweeping change to its Wishlist feature that will make users’ addresses available to third-party sellers, recommending they get a PO Box to protect their privacy.

Amazon’s Lists feature lets shoppers compile items they want to buy in easily accessible groups. These lists can be private (for personal use only), or public for anyone to see, as well as shared with other users for events like wedding showers or parties.

Previously, users could block items sold by third-party sellers from their Wishlists. But starting March 25, 2026, anyone can buy you items from any seller, including third-party sellers.

This means that when someone buys you something on Amazon from a third-party seller, your shipping address will be shared with them so they can ship the item to you. This also means that parts of your address will also be visible to them during shipping for tracking updates.

[...]

Source: https://www.dexerto.com/entertainment/amazon-wishlist-change-doxxes-users-and-shares-your-delivery-address-3324823

From Amazon's email to customers (with parts bolded for emphasis):

Important note: When gifts are purchased from your shared or public lists, Amazon needs to provide your shipping address to sellers and delivery partners to fulfill these orders. During the delivery process, your address may become visible to gift purchasers through delivery updates and tracking information. To help protect your privacy, we recommend using a PO Box or non-residential address for any list you share with public audiences.

Update for Mapping Policy on Jump Academy

Mr. Squid — Mon, 12 Jan 2026 03:05:10 +0000

Hey everyone. As a result of some internal discussions, we have decided to restrict the usage of VScript on JA. Going forward there will be a general ban on VScript on all JA servers.

VScript is a powerful tool, and in some cases too powerful. There are several contributing factors to this decision but the primary points of issue are security and maintainability. Since JA's founding, the main assumption about mapping is that maps are generally safe from the point of view of the server operators. VScript introduces a structural shift in what mappers are capable of.

As it stands we just don't have the manpower to review every single map that we add to JA for potential issues with their scripts. Going forward we would like to encourage all mappers to try more conventional systems for map logic first.

Q: My map uses VScript. What does this mean for me?
A: Your map is still allowed on JA and we won't require a separate version, just be aware that any scripts included will not run on JA servers.

Q: Why is this necessary?
A: VScript is extremely powerful with similar capabilities as sourcemod plugins. At JA, our developers have always reviewed any plugins or extensions we upload to our servers for security, performance, stability, and maintainability concerns. The VScript update introduced a totally new vector for code to be added to our servers that we weren't prepared for. We think this is the best way to ensure we are able to maintain oversight on external code on JA.

Q: My VScript code is critical to the functionality of my map. Does this mean my map can't be on Jump Academy?
A: Talk to our developers (AI or Squid) about your map so we can review your code and come to a decision. We will be handling whitelisted maps on a case by case basis.

[PSA] Notepad++ updater is vulnerable to man-in-the-middle (MITM) attacks (now patched)

AI — Wed, 10 Dec 2025 21:13:18 +0000

Notepad++ v8.8.9 release: Vulnerability-fix

Some security experts recently reported incidents of traffic hijacking affecting Notepad++. According to the investigation, traffic from WinGUp (the Notepad++ updater) was occasionally redirected to malicious servers, resulting in the download of compromised executables.

The review of the reports led to identification of a weakness in the way the updater validates the integrity and authenticity of the downloaded update file. In case an attacker is able to intercept the network traffic between the updater client and the Notepad++ update infrastructure, this weakness can be leveraged by an attacker to prompt the updater to download and executed an unwanted binary (instead of the legitimate Notepad++ update binary). To mitigate this weakness and address the hijacking’s concerns raised by the security researchers, a new security enhancement is being introduced in this release of Notepad++.

Source: https://notepad-plus-plus.org/news/v889-released

[PSA] SmartTube, a popular open-source YouTube app for Android TV, was recently compromised

AI — Mon, 01 Dec 2025 23:22:21 +0000

The popular open-source SmartTube YouTube client for Android TV was compromised after an attacker gained access to the developer's signing keys, leading to a malicious update being pushed to users.

The compromise became known when multiple users reported that Play Protect, Android's built-in antivirus module, blocked SmartTube on their devices and warned them of a risk.

The developer of SmartTube, Yuriy Yuliskov, admitted that his digital keys were compromised late last week, leading to the injection of malware into the app.

Yuliskov revoked the old signature and said he would soon publish a new version with a separate app ID, urging users to move to that one instead.
[...]

Source: https://www.bleepingcomputer.com/news/security/smarttube-youtube-app-for-android-tv-breached-to-push-malicious-update

[Event] Halloween Pumpkin Jump Challenge

AI — Fri, 31 Oct 2025 15:50:12 +0000

Challenge jump maps this weekend with this year's Halloween gimmick by setting up explosive pumpkins in advance with your pumpkin rocket launcher and completing all the jumps with your shotgun in hand.

Available on our dedicated map and rotation servers! Toggle on or off with !boo.

Happy Halloween everyone.

[PSA] Discord is heading in a dystopian direction

AI — Fri, 18 Apr 2025 13:51:09 +0000

Discord's face scanning age checks 'start of a bigger shift'

Discord is testing face scanning to verify some users' ages in the UK and Australia.
[...]

The UK's online safety laws mean platforms with adult content will need to have "robust" age verification in place by July.

And social media expert Matt Navarra told the BBC "this isn't a one-off - it's the start of a bigger shift".

"Regulators want real proof, and facial recognition might be the fastest route there," he said.

But campaigners have said these types of checks are ineffective and could lead to privacy issues.

"Age assurance is becoming the new seatbelt for the internet," said Mr Navarra.

"Will it become the norm in the UK? Honestly, yes, probably."

He said he believed the incoming changes in online safety laws mean online platforms would beef up their age verification processes.

"The era of 'click here to confirm you're 13' is dead," he said.
[...]

Source: https://www.bbc.com/news/articles/cjr75wypg0vo

[Event] Happy April Fools' Day!

AI — Tue, 01 Apr 2025 13:44:48 +0000

Introducing Stickybomb Rockets!

Soldiers are now equipped with rocket launchers that can fire both regular and stickybomb-infused rockets that you can toggle with the reload key and detonate with +attack2 / MOUSE2. You can even use both rockets for the same jump!

Have fun and experiment with mixed strategies on all dedicated, rotation, and lounge servers throughout the day. Enjoy!

[Events] TF2ProJump Soldier Playoff starts in 2 hours!

AI — Sun, 26 Jan 2025 12:32:35 +0000

Check out the TF2ProJump rocket jumping tournament live stream (Day 2) on Twitch at 3:40 PM CET / 09:40 AM EST!

https://youtu.be/D-whM6EnBQ4
Details: https://jump.tf/forum/index.php?topic=3690.0
TF2ProJump Discord: https://discord.gg/yHWxQCg469
Live stream: https://www.twitch.tv/tf2jump