BEWARE of the Curseforge app!

I open Curseforge every day before I play and it has updates most days. It’s rare there is no update tbh.

I’m not pushing Curseforge, I have specifically said people can do what suits them best. There is nothing wrong with whatever approach people want to take.

Just find something that works for them.

I don’t use WeakAuras or similar so I probably don’t need so many updates.
But not sure why AddOns would need to be updated that regularly in any case.

WeakAuras don’t update on things like Curseforge. The base addon is what you download from Curse (or your choice of downloader or without), obviously it gets some updates. The actual written Auras you can either pick up manually from Wago.io or you can use their desktop app.

But my actual addons on Curseforge have updates most days. For example today was Bigwigs, Narcissus and something else I didn’t really pay attn, I just hit that update all button. Oh Details was the other.

If you want to seize the opportunity to pick up some basic programming knowledge, there’s a free e-book called “Automate the Boring Stuff with Python” (first hit when you search for this on Google). It’s actually perfect for tasks like the one you describe and it wouldn’t take you much time to learn how to automate this process. All of the author’s book are well done and easy to get into.

Idk about your credibility of your story, but I am booting it up right now.

You sure your siblings just didn’t uninstall it to mock you?

I don’t fear Overwolf. I am very confident in my anti-virus to keep any malicious things going on in check (as it always does).

I’ve been having technical problems with Curseforge so I’ve began to use WoWUp (Curseforge version) which has the same addons hosted on Curseforge. I’ve heard it’s more lightweight and stable as well.

Because if curseforge gets hacked, hackers will have full access to your PC via that app.

I update manually. Some day when I have some free time I may write my own nodejs version.

Or, if there is an open source addon update client, I could maybe use it too. But the curseforge app, I wouldn’t risk it

That is some next level paranoia.

1 Like

Why are people afraid of Overwolf?

no they dont get full access to the pc where it is installed on and tbh i dont know how you could come to that conclusion.

1 Like

overwolf isnt needed for curseforge but you do have the option to install overwolf when installing curseforge

The curseforge app would need to be allowed permission from Windows to gain access. Windows 10/11 wouldn’t allow a program to randomly turn rogue this way unless you really went out of your way to let it.

If you feel that way about the curseforge app what makes it different from the bnet app for example? Or any other app on your PC. If you think hackers can get into any program and have full control over your pc what would make the difference? If Sony can be hacked surely anyone can in your eyes?

work fine for me dont know shady program u are use

There are all sorts of horror stories, some are very exaggerated though. Like your pc is going to die if it runs in the background. There were obviously some genuine issues too.

I did start using Curseforge when it still ran Overwolf in the background and my god the amount of privacy options I had to go through to opt out so they couldn’t sell my data was ridiculous. However, this is something I do for all sites/apps etc. I also used settings so it only ran overwolf ran in the background while using curseforge and then closing when I close curse worked fine though.

They created the standalone app in response to criticism from the WoW community and to address some of the concerns. The standalone app works great for me, no overwolf required and is just a compact manager.

1 Like

Thanks for the explanation - I use the standalone app too, as my general approach is to only have what you need running on your computer.

It sounds like some criticisms are valid but others are overblown.

1 Like

Sure.

#https://www.reddit.com/r/feedthebeast/comments/142zxka/some_curseforge_accounts_might_be/

https: //twitter .com/CurseForge/status/1666741580022128641

Here’s some of the tweet by Curseforge (8 Jun 2023):

Following the ongoing situation we would like to provide you with clarity, answers and information about the current status of things as well as the next steps we are taking to ensure the safety of our community.

TL;DR - We have cleaned all infected files on the platform and have sealed the security breach to prevent similar files from being introduced again. If you have downloaded any of the affected files and in order to play safely, make sure to follow the steps described in our article:…

@Brainmanager - on windows 10/11 you can’t restrict an app to only access one folder, say Interface → Addons, except maybe if you create a separate windows user account and create some fine-tuned policies, and only run the curseforge app through this account. Generally, once you have the app on your computer, it can read/write most of your files. If they hack curseforge, and you get an update, and update your curse client to a compromised version, they can read and send data from your computer freely.

@Baltic There is no difference, yes, however I trust Blizzard much more compared to, say, Curseforge, in terms of IT processes and IT security, so I consider the Battle net app a measured risk, and the Curseforge app an unnecessary risk as the value it gives is very low compared to the risks. I can spend half an hour every couple of months downloading new addons while waiting in solo shuffle queue for example.

1 Like

I remember when it happened, it affected Minecraft users.

Yeah, I’m not saying it happened with the Curseforge WoW addon client, but that it happened to Curseforge as a company.

It’s the same principle: the premise of having an app that regularly downloads files to your computer requires that:

  • you trust the app authors (I DO trust them in terms of intentions, I don’t think curse wants to steal your data or install malware)
  • you trust their IT security enough that no malware will be downloaded on your computer, if they get hacked (this is the part I have a problem with)

So it happened with the Minecraft version, but it could have as easily happened with the WoW version, if the hackers had targeted that one.

But that is an extreme level of paranoia, you’d never use the internet or have an account with anything if you feared hacks. Big corporations have suffered hacks, they try to do everything to prevent them ofc.