Introducing the Ban API and Alt Account Detection

Depending on the game which focus on user generated content, users have the ability to load scripts to add functionality to their creation. Wondering if this can be disabled or have restrictions on what scripts can use this api, as it would be beneficial to prevent unauthorized bans by malicious entities.

5 Likes

More security and restrictions with this API needs to be in place I feel to prevent any game (not even user generated ones) from having unauthorized ban actions by malicious entities.

1 Like

Hey again; saw you responding to a bug report related to this API so wanted to pop in and ask if there’s been any results of these discussions (or if they’ve even taken place yet). No rush, just want to make sure it hasn’t been forgotten about.

Also, I know you guys are very tight-lipped about the actual alt detection mechanisms being used here, but is there any word on the concerns some have expressed about alt accounts on the same IP as a banned one not being flagged and banned? Would really appreciate some clarity here because aforementioned, if this isn’t working (or worse, hasn’t been implemented at all, which I doubt) it opens a huge loophole to the alt account detection feature as a whole, especially for devs who have replaced their previous custom-made alt-prevention systems with this new API.

Oh, and it hasn’t been mentioned by many others in this thread, but I wanted to thank you for single-handedly addressing everyone’s concerns/bugs related to this new API. It’s really awesome to have such strong communication with y’all who developed this entire system after its release, and it’s lovely having our feedback being heard and promptly addressed. It’s not something you see every day with new features (albeit it has improved in recent months), so ty :grinning:

1 Like

Also, this is huge! Please let us know once this is enabled so we can re-format our kick messages to display much nicer.

1 Like

ok i’m late to the party and all but this isn’t ai?? i understand that it may seem so but roblox has information like your hardware and stuff so they can pin a specific thing down and then flag that

1 Like

With regards to the wording, we will be keeping it as is for now. Our policy/legal team and company leadership have made it a hard requirement that a user will be able to easily disambiguate that these bans are coming from the experience they are in, rather than Roblox as a platform. In line with that, a user should be able to easily tell that the message they are seeing is coming from the experience, and by extension, its creators, rather than Roblox as a platform. We do have some leeway on the exact wording, such as dropping the “creator” part and saying “the experience’s moderation team” or something along those lines. If you, or any other creator, are harassed as a result of the wordings we have chosen, please report it immediately. We will be closely monitoring for these types of abuse.

With regards to alt accounts, the team has made a decision to minimize false positives (that is, accounts that have been flagged as an alt account of a banned user but are not actually an alt account). This unfortunately results in the very high false negative rate that everyone is commenting on. We will be looking to change these tradeoffs in the next phase of this project.

9 Likes

i think the best solution here is just “the experience”

3 Likes

For this you could just create a signal that runs under a banning wrapper. I don’t think that the use case is strong enough to warrant it’s own API

2 Likes

Understood; thanks a lot for the detailed explanation :slightly_smiling_face:

This would be awesome. My first preference would be changing the term “creator” to “moderation team”, but the thoughts of others who raised the same concern should also be considered: @NodeSupport @ElectrifyThunder @LoveingLiamGuy @bizbot19 @Sk8llz @2jammers @Pismyren :wave:

Appreciate the insight into the alt detection. Are there any approximate timelines you can provide for when the next phase will be close to release?

2 Likes

What’s the chances of us getting this? Or neutral wording?

3 Likes

Why not just have it like the kick message? “You have been banned from this game”?

5 Likes

Remove duration to make it perm.

image

Worked for me. Took me a hot minute.

5 Likes

This API is great, although disabling use of this API in Studio is a bit of a head scratcher. It would make everything way easier if we could just test the API in Studio and have it transfer over to real game servers, not only that, it would also allow developers to just use plugins or the command bar if they don’t want to use third-party software to use this API without having to open a game server. We should have this option. I already do something similar to this with DataStores and plugins, and I find it incredibly useful that I can do that.

If it’s to prevent developers from accidentally banning or unbanning players in Studio and having it transfer over to the actual game, well, the burden of not making that mistake should be on the developers themselves. I don’t see a how developer seasoned enough to know how to use this API could realistically make a mistake like that. Even if they did, they could just easily reverse it within Studio, if this API were to be made accessible in Studio. We can access and change DataStores within Studio, so why can’t we do the same with this API?

I love this API and really want to see it at its fullest potential, but right now, while I’m definitely going to use this over the way I used to handle the banning of players, it’s kind of irritating that I won’t be able to ban/unban from Studio.

Also, two additional things:
GetBanHistoryAsync doesn’t work right now, which I assume will be re-enabled later.

It would be awesome if you guys could create a method called GetBanStatusAsync or something like that, because using GetBanHistoryAsync and iterating through the pages object returned by that method is tedious if you just want to get the current status of a player ban.

4 Likes

Hi,

Im guessing ban API is down?

what kind of solution is this bro :sob:

1 Like

will there be a way or banning people in studio? And what if the dev bans themselves? how does one unban themselves if that’s even possible

1 Like

Why is ApplyToUniverse optional on BanAsync but required for UnbanAsync? It should just default to true just like BanAsync.

1 Like

This is awesome! Thank you so much!!

Am I correct to say that once a player is banned permanently with the -1 code, it is set in stone? I accidentally banned myself from my game, and now… I can no longer access my game. I unsuccessfully tried to unban myself using the following code… where 11111111111 would be my player userid

local Players = game:GetService(“Players”)

local config: UnbanConfigType = {
UserIds = {1111111111, 789},
ApplyToUniverse = false
}
local success, err = pcall(function()
return Players:UnbanAsync(config)
end)
print(success, err)

3 Likes

that is NOT a solution :sob: please someone revoke buddys API perms