I’ve heard apparently that the roblox ban API can be abused by exploiters to ban random players or steal your hardware (something like that). Is it true that the API is actually vulnerable?
If so, I guess I should make a datastore ban system or whatever right?
You seem to have misunderstood what other people have said. The Ban API is just as secure as the Datastore API: It is only accessible by the Server, therefore, a backdoor would need to be present for it to be abusable by exploiters.
Steal your hardware… Like… A burglary??
No, they cannot. The Ban API is server-side, they can’t even access it unless you have a backdoor in your game. Not even normal server-scripts can see IP addresses.
Ban API uses MAC Adresses and in conjunction with HWID identifiers & more.
Other players probably won’t be banned unless the attacker actually knows how the BanApi works in & out and can spoof their own HWID accordingly to the target player’s identifiers.
Which did I mention is really Unique!
However, since this service is not out of Beta yet, there may be some breaking changes. Use with caution.
Isn’t the ban API kind of dangerous though because I feel like eventually someone will exploit it one way or another, as there will be high demand for cheaters.