If the CoreChat is disabled, can the new exploit still affect it?

Going to make a custom chat in result of the new situation with chat bans.

If Roblox’s chat is entirely disabled, is the game/person still vulnerable?

I mean the situation seems to be regarding games with intended scripts to cause the chat bans. I don’t believe it’s a problem or would be a problem for users in normal games.

2 Likes

I think it could be replicated with a third-party exploit.

If someone gets the :bulb: to make that, then we’re screwed.

This is incorrect. In June 2021 my game was targeted by an exploiter and they banned myself and several of my staff members IN MY OWN GAME by forcing the game to chat inappropriate content on our behalf. An engineer had a look at our game but the issue hasn’t been fixed evidently. This can happen on normal games.

1 Like

Yeah, I’m being skeptical about using the default chat now as well, especially after the news’ breakout.

I have a competitive group, which (at times) does have a lot of people who are experienced with using popular exploits. If this were to become a popular thing and if someone were to make a code, I’d be putting everyone at risk.

So I’m planning on disabling the CoreChat and replacing it with my own custom one.

The question tho is - would it be unexploitable despite being disabled?

This is 100 percent caused by the developer of the game purposely making a script which makes the player say inappropriate things, and reports you. I believe that disabling CoreChat simply disables it for the client, but this does not matter because it’s the developer doing this, not another player. So with this knowledge, I can safely say that disabling the chat would not do anything, and you would not need to do anything because it’s something made by the developer of the game and not an exploiter. I also believe that any game that an exploiter was able to do this do was likely not secure and had vulnerabilities in their game for the exploiter to mess with, however I could be wrong.

1 Like

We’re not talking about the developer here, we’re talking about disabling the chat as a whole in a whole different game. In this example, my game.

Disabling the Chat.LoadDefaultChat. This.

But what you asked in the post was “can the new exploit still affect it?”, but there is no exploit. What I’m trying to say is this is a developer who has made a script which gets you banned, not an exploit which anyone can do to your game. Maybe I am missing something?

Edit - Since it’s not an exploit an exploiter could do to your game, there would be no point in turning the chat off in worry of the exploit.

You’re right (I misworded it), but it’s obvious that someone can use the chat event in a third-party exploit and easily run it on their own now. If they make it, that is.

With this special person, after a few years, figuring out that this line of code is malicious, there’s no doubt people will do it.

The question tho is - would it be unexploitable despite being disabled?

what “new exploit”? theres no new exploit.

it seems your talking about that one game that takes advantage of player string filtering to frame users of saying things they didnt say. that isnt a exploit, it is just how filtering works. if there was a account threatening exploit, roblox would have patched it by now. unless some guy has some serversided exploit (there isnt one, at least not any public ones), the roblox chat is completely safe.

if you disable it, you disable the stuff that go along with it such as its remote events/functions. so if for some reason you do disable it, they cant do anything.
the only way the chat could get people banned is if your game was backdoored by a plugin or model

So to sum it up:

If I turn this off (Chat.LoadDefaultChat), it can’t be broken into, right?

yes, but theres no reason to disable it

I suppose it would be unexploitable because unless there’s a security issue in your game, exploiters could only affect things locally so only they would see it and if you were to turn that off, they wouldn’t be able to do anything.

1 Like

You have nothing to worry about as long as you know for a fact your game doesn’t have any backdoor vulnerabilities that explicitly allows exploiters to run servers-sided code.

1 Like