Name Spoofing Patch

Its patched as the new signature has been rolled out according to the FFlag watcher. https://fflag.eryn.io/history/PCDesktopClient/DFFlagTestFullSig42

The rprxy.xyz site is quite neat.

This is a network vulneurability and not a traditional exploit. It’s done by modifying the information that is sent from the client to the server before the client loads in, therefore things like playeradded will fire after the info has already been spoofed

A roblox staff just said name spoofing was patched now. (Well for DisplayName)

Username spoofing was patched aswell.

1 Like


I guess they were trying to get a new signing system for the old public key pinning method

There was a two part patch. The first part involved the membership type and account age as these were pretty safe to do. The second part added a handful of extra fields to the signed data, among these were UserName and DisplayName.

9 Likes

Will Roblox be patching this soon?

It’s already patched it seems like, look at the post above by ConvexHero.

1 Like

Oh alright. Thank you for the help!