Is the ban API exploitable?

I’ve heard apparently that the roblox ban API can be abused by exploiters to ban random players or steal your hardware (something like that). Is it true that the API is actually vulnerable?

If so, I guess I should make a datastore ban system or whatever right?

1 Like

What?

2 Likes

You seem to have misunderstood what other people have said. The Ban API is just as secure as the Datastore API: It is only accessible by the Server, therefore, a backdoor would need to be present for it to be abusable by exploiters.

Steal your hardware… Like… A burglary??

No, they cannot. The Ban API is server-side, they can’t even access it unless you have a backdoor in your game. Not even normal server-scripts can see IP addresses.

1 Like

he probably means like steal hardware info (IP adress, etc.)

1 Like

I see, makes sense

filler text

Yeah, that’s what I meant. its a rumor that’s been spread. I just wanted to know if its true.

Ban API uses MAC Adresses and in conjunction with HWID identifiers & more.

Other players probably won’t be banned unless the attacker actually knows how the BanApi works in & out and can spoof their own HWID accordingly to the target player’s identifiers.

Which did I mention is really Unique!

However, since this service is not out of Beta yet, there may be some breaking changes. Use with caution.

And stealing hardware info? Is that possible?

I mean not really with the BanApi

If the guy gets access to your device with a malware or whatever he might as well cause more issues for you

Isn’t the ban API kind of dangerous though because I feel like eventually someone will exploit it one way or another, as there will be high demand for cheaters.

Meh not really actually makes Banning players quite easier

Can’t say more than that since the API is still in beta