About an hour ago in this game, several exploits began occurring. Some users were able to change their player data and have it replicated to the server, even for data that has no link to any remote events. Furthermore, they were able to change the scale value of other player’s character models.
The game was set to private while I investigated if this was a backdoor for instance but no new scripts have been added for quite a while and I do not use free model scripts. Furthermore, when the game was set to private, several random individuals (who I do not believe to be exploiters) were able to join the game which should be impossible as well.
I am on Windows 10 but this doesn’t seem relevant.
Expected behavior
There has never been any incident like this since the game has launched so the expected behavior would be that people could not break filtering enabled.
I don’t use that many plugins myself and I’ve now disabled script injection for the couple that had it, but its possible other users with access to the studio have malicious plugins.
If all plugins were disabled, and I can’t find any scripts in the game explorer that aren’t mine or that look out of place, how would they be detected in a service not visible in explorer?
I turned on ‘Show hidden objects in Explorer’ but could not find anything from this either.