‘-’ quero ver me mostra que isso realmente funciona 2 Eles podem literalmente reescrever seu código para impedir que sejam kickados.
Yes and I will add my own input to this. Each game has specific tasks and data that need to be protected in its own unique and individual way. There is no “one size fits all” or “universal” protection from exploits because each scenario is unique. For example… a teleport exploit might be useful in a game like natural disaster survival because you have to survive disasters and teleportation is great for survival but in a game like the mimic where you have to do a lot of unique tasks that require you to actually solve puzzles and things like that… teleporting is still useful but there is a lot more required than just teleporting which makes it a much smaller perpetrator for games like the mimic compared to ones like natural disaster survival.
The reason exploiters use the CoreGui is because we can’t access it. If Roblox changes that, not only we will be able to spy on core gui actions, that might put users at risk, but it will also just make exploiters change tactics. Remember an exploiter can do whatever they want on their machine, they can have entire UIs that work through the windows API and aren’t in-game at all(just overlays), their tools can be in panels that the Roblox app can’t access at all.
UIs are not the actual vulnerabilities in your game, but just the media they use to take advantage of it. An exploiter can render whatever they want in their client and you can do nothing about it. At the end of the day all you have to focus on is server-side security so their harm can’t replicate to the server or to other players.
4 Likes
I understand what you meant but we are talking more about menus in general, the menus are all created in coregui if roblox allows searches in coregui
This is exactly what happens… They added reject character deletions to stop people from being able to do things like this: https://www.youtube.com/watch?v=U9Zg8-dGKfo
Really all they did was make it impossible for people like me to help moderate games with flingers in it so I can make the flingers rage quit by killing them with tool scripts.
There are still plenty of games that are completely vulnerable to flingers going around flinging people and thanks to Roblox it is now impossible to do anything about it.
So by them fixing one problem it then leads to another potentially worse problem and the cycle never ends.
I don’t think there is any good reason for them to allow searches in coregui for developers based upon my explanation
It makes no sense that the exploit can create tabs in CoreGui and we as developers don’t even have access to look up the basics
1 Like
You’re right. Something not making sense does not equate to it being something they can fix without creating new and worsening problems.
1 Like
I’m talking about Roblox allowing you to search for objects, not modify, delete or create them, just search. Roblox has some functions that generate notifications, such as sendNotification, as well as functions that disable things in CoreGui, among others. In other words, Roblox has the upper hand.
Literally just this, thank you. It looks like people through this post simply forgot client sided anti-exploits get easily bypassed because, just as you said, the client will have control over what is on its domain, and a client script to check if there were modifications to the CoreGUI is not an exception.
1 Like
I didn’t forget this and I’ve been preaching for people to switch to server scripts to create anti exploits but unfortunately you’re right there is quite a number of people that still use client sided anti exploits for their game
my brain will explode in approximately 5 seconds
4 Likes
namoral mesmo ja cansei de tentar explicar o bgl e traduzir pro ingles
with a simple hook function you can prevent something from being indexed by any script even if we had access to the coregui we wouldn’t be able to find most exploits
roblox can’t control what exploiters do on their machine
2 Likes
I’m not talking about detecting the executors or preventing them from handling remote events. I’m referring, in general, to menus like Infinite Yield, Dark Dex, etc. They’re all built into CoreGui, and if we had access to search within CoreGui, we’d be able to detect them, even if they tried to protect themselves with weak measures like using the same name as existing tabs in CoreGui or random letters.
Anyway, what complicates this discussion is that some people say that having access to search in CoreGui would be completely useless 
. But if Roblox allowed this, we could detect a lot of menus at first. Later, of course, they’d find other ways to hide, but until then, it would be a considerable help.
I never mentioned remote events?
and again as i said exploiters could either use a hook or disable the script
1 Like
I’m referring to the people who commented on this post. In the case of my game, if the exploit disables or deletes the local script that I made as an anti-exploit, it’s not a problem, since it’s part of the framework.
If they disable, delete or modify the information sent, the weapons simply stop working and don’t do damage. This also makes the aimbot menus useless. Furthermore, by disabling or deleting the local script of the framework, all the other codes end up bugging, since everything is centralized in a single script.
In short, it would be great if Roblox would allow the search option in any way. I’m not saying that this would allow you to create a code that offers 100% protection, but it would certainly help a lot.
And most of the time those client sided anti-exploits are just unecessarily using a lot of the client’s memory, too. It’s simply not worth it.
1 Like
rapaz que povo mais duvidosamente desprovido de inteligência
depends on how and what you implement but most will barely affect performance if at all and can kill off most scripts in one go