Can exploiters view mesh Ids?

[gavdingo (Burger)]

I use a lot of 3d models for my games and I was wondering if exploiters/hackers can view the mesh Ids. If they can, is there a way to prevent this?

[Autterfly]

Yes, if the client needs to have the data to display it, they can view it. No, there is no way to prevent it.

Place theft - Why ROBLOX places are already as secure as it's possible to get them

There have been some concerns expressed about how easy it is to steal places on ROBLOX: among numerous discussions on the main site. In general, users feel that it’s too easy to steal places. It is not possible for Roblox to prevent place stealing. You can’t play a Roblox game, or any game for that matter, if your client doesn’t know what the game/level should look like – you’d just be seeing a blank screen, so Roblox has to send clients information about the game. This information can be us…

[VegetationBush (FartedWayTooHard)]

The simple answer: yes.

Let’s put it this way: Get a local script(which exploiters use), then execute this code:

print(workspace.Mesh.MeshId)

Now they have the mesh Id.

[Kadravaa (Kadrava)]

The only way to protect this is to make your inventory private so that it can not be directly stolen from your profile page, but there is no way to prevent it with an exploit.

[Mr_Static]

Correct if I am wrong. I don’t do much mesh work. However can’t they just get a MeshPart on their own game and paste the MeshId that they stole in and then have the model?

[Kadravaa (Kadrava)]

Yes, they can and it is a very common thing that people do.

[DoctorBurn]

I can join your game right now, and download your entire map and all local scripts, as that is what the client can see.

[DoctorBurn]

Meshes are uploaded to roblox when imported, so if given the rbxassetid, you can import them yourself without having the original.

[DoctorBurn]

Sorry for posting so much on this topic, but also, if you are to showcase a build to someone before receiving payment. Don’t. Screenshare with them, send thousands of pictures, but don’t typically let them into a game to view the build/model before payment is received, as it can be downloaded. You don’t need the meshid to steal it, as you can just download the meshpart with a simple exploit script.

[FAMEDYT]

People should be aware that scam artists are a thing and that letting them into your team-create before payment is only going to give them a chance to download a full copy of that work you just did for them.