Add further Alt Prevention to BanAsync

As it stands, the “ban alt accounts” does not seem to handle new Alt Accounts being made.
In particular my game has been dealing with lately, a specific user who continuously rejoins under (username)# with the # simply increasing by one every time they are banned:

Every time we tack on the “ban alt accounts” part of the ban - and yet this person keeps on rejoining.
“Ban Alt Accounts” should tackle all newly created accounts that are obvious alts of the previous account, however it appears this is not currently a feature of the BanAsync page.

Discord has this functionality where if you try to rejoin a server you’ve been banned from & do not do any of the steps to evade the alt detection, it will ban your new account for being an alt of a previously banned account. I am fairly confident, knowing this player pretty well, that they are not doing anything to evade the detection. The detection simply is not being ran.

Additionally - to help better see how the Alt Bans are working out & confirm functionality, it would be nice to have alt accounts show up in a drop down below the original account’s ban.

Example of what that would look like:

13 Likes

Adding onto this, if an account was banned for being an alt, marking what was the original account would be great to be fully sure about the ban reason.

3 Likes

I don’t think this applies to what alt detection systems use

A good example of what we’re trying to avoid:


7 accounts in 13 minutes

2 Likes

at some point im pretty sure there was a vulnerability which gave a fingerprint of someone’s hardware, so that if developers found that fingerprint and if they joined on an alt the fingerprint was the same as someone banned they get banned too
they should add that back, the IP based one sucks

If you’re talking about what I think you are, it didn’t fingerprint their hardware and wasn’t exactly a vulnerability, just a convenient detail of how os.clock used to function before its behavior was changed (os.clock used to return the CPU time, which was something that’d persist across sessions unless the user restarted their PC, but it was changed in v651 to return the time since that instance of Roblox was started up)

They need to do hardware & ip bans.

2 Likes

I believe the reason why they are not currently willing to visually add the alt accounts on the moderation menu is for privacy concerns.

BanAsync is not perfect, sometimes when you ban someone, other family members also get banned under the same IP. Knowing that an account was unable to rejoin due to another account for whatever reason could be a privacy concern, since it could be used to track family members or other people playing in the same house (friends) and be able to know if they are living in the same household. Imagine a bigger game exploited this and decided to store accounts under the same ip, and this data leaked somehow, then you know how this will end up.

In some cases however, it can be nice to know why a user is unable to join due to an alternate account being flagged. Roblox does not currently provide any data about the original account associated with the ban.

What I suggest instead of visually showing the alt accounts being flagged, is having a unique identifier for each ban (which is not visible to developers) and that could allow us to unban an account without knowing the account behind that ban, and this id should be shown on the kick screen of the alt account. That way, we are unable to trace that account with the original, while still being able to unban the account that flags the alt account.

Regardless of that portion of my feature request, if I press “ban alt accounts” it should still ban future accounts regardless. If that’s being done in the background and not actually being logged and shown to me for privacy concerns, that’s fine. But constantly needed to track down new Alt accounts is a hassle & does not feel like it’s in the spirit of a button that is supposed to ban alts.

2 Likes

After some additional thinking about it - here would be my next proposal to deal with that specific case of privacy concerns for family accounts.

Each time a “detected alt” joins, it would show no details other than the timestamp of when it joined. Additionally if I could have control over unbanning the “An Additional Account was Banned from Joining” individually, this would help me better be able to unban family accounts without unbanning the main account.

Knowing when the account joined means I can better rule over unbans as a player could better pinpoint when they attempted to join and got banned.

1 Like