The Binding of Isaac: Rebirth

The Binding of Isaac: Rebirth

Isaac On Twitch Reloaded
JSG Mar 24, 2021 @ 7:42am
[WARNING]: What is Luadebug and Why You Should be Wary of it?
This mod, and some others, request you to use luadebug as a requirement but what is it really and does it do?
What is Luadebug?
Luadebug unlocks many of the modding api limitations, which is good, but some of those limitations (like unrestricted file/internet access) are there to protect your PC from malicious attacks from mods. What does this mean?, essentially, it means your PC is vulnerable to attacks from any mods you may have enabled.
"I know this mods creator and Mod, I know it's safe!"
This is the main excuse I often hear, why is this flawed?, because, on Steam, mods can update at any given time, without your permission...any mod on your mods list could add a malware any day and you wont even notice. In other words, a mod can be safe on the day you download it but become unsafe any day after that.
What Can I do about it?
The safest way to run luadbeug mods is to isolate them, so you make sure that only the mod that requires luadebug is enabled and the rest are disabled....and that after you finish playing with the luadebug mod, you remove the lua debug launch parameter before enabling any of the other mods.
Now, ofc, the author of the luamod requirement mod can also ♥♥♥♥ you up, so make sure you trust said creator before enabling luadebug and even take a look at the mods files if you can and/or know how to do it.

If you got any questions just toss them in this thread if you want.
< >
Showing 1-4 of 4 comments
VirtualZer0  [developer] Mar 24, 2021 @ 11:47am 
This is absolutely correct information. If you really want to make sure the mod is safe, inspect the source code in the official repository and install mod from there via ZIP archive

https://github.com/VirtualZer0/IsaacOnTwitchReloaded
https://github.com/VirtualZer0/IsaacOnTwitchReloaded-site
JSG Mar 24, 2021 @ 7:00pm 
Yea, the current version seems safe and seems pretty well done on top of that. I just copypaste this on every mod that uses luadebug to raise awareness of the risks of using it....because, even when this mod is safe, other mods that may be enabled at the same time as this, when luadebug is on, may introduce a luadebug exploit in any update, even if they claim to not require luadebug at all, lol. So, yea, I insist on the "run luadebug mods you trust alone".
Last edited by JSG; Mar 24, 2021 @ 7:01pm
VirtualZer0  [developer] Mar 24, 2021 @ 8:50pm 
I wrote this message more as an addition to your words. Checking code in the mod folder can give a false sense of security, as the mod can always be updated with malicious code. Manual installation without auto-update is the only way to guarantee 100% safety of mods requiring --luadebug
JSG Mar 24, 2021 @ 9:24pm 
Yea, manual instalation would be a solution as long as you only run one mod, but it's worthless if you are going to have other auto-updated mods on at the same time. Again, the biggest issue is that you dont really know which mods use luadebug functionality, mods that actually ask you to enable it are way less likely to actually ♥♥♥♥ you up than some random ones that noone would suspect and work just fine without luadebug BUT have a check to see if it's on and do the nasties.
< >
Showing 1-4 of 4 comments
Per page: 1530 50