they already collect a bucket load of information for their own hwid fingerprinting reasons, i’d assume for alt detection for hyperion, they query smbios and even go as far as reading your monitors hwid, so they 100% can implement a proper alt detection system, but hey, let’s give developers ip address based alt detection instead!
Some exploiters figured out that the HWID detection is NTUser/Registry-based, they simply can just change the registry or make another user.
It’s not about bypassing, the system simply doesn’t work. You don’t need to ‘try to bypass it’, it simply does not detect alts. They, for some reason, do not take the most basic information into account to detect alts and instead use some kind of poorly made AI model that requires habitual alt use before it pattern matches them. In practice this system is useless for actually banning people.
You just have to log out and log into another account and you have about an 85% chance of dodging the detection, even higher if your alt is a cold-storage alt that rarely gets used. There is no immediate IP detection, no immediate HWID fingerprinting. Lua-based fingerprinting modules work better than this, and I would recommend everyone to develop their own alt-detection systems and not rely on this one, as it’s currently quite useless.
I am hoping that the team behind this addresses the issues or at least explains why it’s so broken. The security team has been fumbling majorly recently.
I’m not a fan of the ban message. “By the creator … message from the creator” is vague because anybody could’ve banned the user. This makes it feel too personal.
Here’s a better message in my opinion:
You have been banned from this experience.
Reason Here
(Error Code: 600)
A good feature would be to add a system that allows you to configure who can access the web panel and not just the owner.
I just want alt detection to work perfectly. If alt detection fails, it’s no different than a normal ban.
I need to reconfirm if the alt detection is functional because each exploiter/harasser we ban just shows up in another alt minutes later after we take action.
The only answer I found was that it can be bypassed.
Not ‘bypassed’, it just doesn’t work in the first place. I’ve tested it myself banning a friend and he just logged into an alt and got in fine, no trickery even needed. I’ve tried contacting the security team about it, they just ignore the issue. Roblox doesn’t seem to really care about security, whether it’s their poorly functioning anti-cheat or non-functioning alt-detection. A real shame that they present these things as ‘solutions’ to real problems when all it accomplishes is misleading developers into a false sense of security.
Well, this sucks, I had very high hopes for this…
Hopefully, they can do something about this later on
Is there any chance that the reason filter could be reduced or removed completely? It very often flags completely appropriate reasons. For example my reason works as long as I do not include a moderator’s username and the date. It could be easily limited to just bad words, third party links etc.
This was apparently an important distinction to show it hadn’t come from Roblox, see this:
Yes, but after some time, they also discovered that using Different Origin ips (By creating an account with a different ip), will also not affect, even with the Alt account detection turned on.
Can agree.
Instead of banning the person like saying it was by the creator, they could just simply put something like “By a moderator”, and it wont feel so personal.
The moderation tab is just suddenly nonexistent?
Edit: Just minutes after sending this the entire platform experienced a “degraded performance” according to their status website. So this will (probably?) be fixed soon.
Edit again: 2 hours later Roblox status is back to normal but still no moderation page , I just ended up using a datastore to keep track of it for now.
Why was the topic about the moderation tab being silently deleted… silently deleted? What is going on?
https://devforum.roblox.com/t/roblox-removed-the-bans-tab-from-the-creator-dashboard/3235634
In that case they could replace “owner” with “experiences moderation team.”
Example: “You’ve been banned from the experience by its moderation team. Here’s the message they provided:”
First time seeing that post, I believe it was removed because its in the “Development Discussion” category and not the “Bug Reports” category.
Most people can’t make bug reports to begin with so I honestly find it annoying that they just silently took down a potential issue. Could have at least provided a message before locking the thread stating the reason, but ohhhh welllll.
Also still not fixed. No where to be seen.
Well this is not good timing after I made the decision do a wipe for the bans from my PERMA DEATH game where if you die you get banned. Anyone got a workaround to unban mass amounts of people right now?