Place Stealing Exploit - Regardless of Filtering

If this were any other game that’s been copied, I wouldn’t care, it’s simply that there’s coveted content on it which other people would not hesitate to literally copypaste into their game. We’ve had this happen before with games like Parlus’, and they were massively popular for a long time.

That and a lot of content is behind a wall due to balancing reasons, so players will immediately choose a game that has them all easily obtainable over the original.

[quote]
Well shit, this is really disturbing.

Roblox should consider going after him in court for this - a class-action lawsuit on behalf of us developers would be very appropriate imo. [/quote]

I’m no lawyer but as roblox does state that, “All content created on roblox is owned by roblox”, they wouldn’t have much of a case since technically nothing is getting stolen as it can only be publish on roblox which still keeps it as their content.

We’ve reported this game but it’s STILL up and has more players than ours:

[quote]
Well shit, this is really disturbing.

Roblox should consider going after him in court for this - a class-action lawsuit on behalf of us developers would be very appropriate imo. [/quote]

I’m no lawyer but as roblox does state that, “All content created on roblox is owned by roblox”, they wouldn’t have much of a case since technically nothing is getting stolen as it can only be publish on roblox which still keeps it as their content.[/quote]

Yes, but selling things without government consent (you don’t pay taxes on it) is soliciting, which is illegal. It’s also illegl to resale copyrighted material after you purchase it, ergo, it’s illegal to sell games owned by roblox for “real” money.

[quote] [quote=“Revolucien” post=188939]
Well shit, this is really disturbing.

Roblox should consider going after him in court for this - a class-action lawsuit on behalf of us developers would be very appropriate imo. [/quote]

I’m no lawyer but as roblox does state that, “All content created on roblox is owned by roblox”, they wouldn’t have much of a case since technically nothing is getting stolen as it can only be publish on roblox which still keeps it as their content.[/quote]

Yes, but selling things without government consent (you don’t pay taxes on it) is soliciting, which is illegal. It’s also illegl to resale copyrighted material after you purchase it, ergo, it’s illegal to sell games owned by roblox for “real” money.[/quote]

Echo explained the issue on page 2 for taking legal action. I will just quickly quote him.

ROBLOX would have to spend more money to sue him than they’d gain from him, and what if he isn’t in a country that he can be sued in (i.e. China)?[/quote]

My RPG consists of 8 universe places and loads assets from multiple models to populate the new servers with the recent database. Many scripts rely on checking placeids and whatnot to determine what action to take.

For once in my life, it would seem this system has given me an advantage.

@Ruk: I would use that system of multiple places… but… the teleport service and really hurt user experience if it takes 4 tries to connect to a server or 5 minutes to load a few decals.

I’ve never experienced issues connecting to servers? Only when a server is full, which we have no method of knowing. Perhaps a method to get information regarding a server instance (along with a method for a list of server instances).

The issue I have is that it’s very hard to keep the game connected when there are few methods to communicate between servers. Teleporting a group of players would be a game changer.

[quote] Lets talk about HTTP external database passwords that got exposed.

…Like my automatic anti-exploit DB.

Roblox would really use a concept that was used in web servers, where DB connections were stored behind the public directories. [/quote]

You should create a web-server API, which uses an authentication token that you save into your datastore (possibly another in the script for good measure), which would handle all database connections for you. This way there is no single point of failure like your DB password which would give the exploiter full access.

I found apoc rising stolen AR: Reimagined - Roblox

This doesn’t look fixed

There were a few more but I couldn’t remember the links, this exploit is still active and dangerous.

I’m still having people upload versions of my game, but I think it’s just the original stolen place file when the exploit wasn’t patched.

I’m still having people upload versions of my game, but I think it’s just the original stolen place file when the exploit wasn’t patched.[/quote]
The exploit isn’t even patched

Wait wait wait wait wait, what?
I just asked the author about this confirmation, and according to him, he never said that.
Are you going off of the fact that he closed the offer on v3rmillion? If so, he did that because he “has made enough money”, and because the panic was overwhelming him, not because of the patch.
What source are you getting this from Convex?[/quote]

Someone managed to steal loleris’s Mad Games.

The owner says he’s a member of V3rmillion.

According to that guy, that is just an alt account, and his main is from 06.
If that is the case, we could narrow down to his main.

I honestly want to know for sure from other developers that the exploit is fixed. I can’t show much of my game, because of the fear that it will get leaked before its released, and I lose all credibility for my work.

Also, the fact that that website is selling content that is owned by roblox ,could that not allow roblox to sue that website, or get it shut down? I mean they are making money off of Roblox’s content. It could also be doing damage to roblox itself costing it money.

Also:

The exploit has been fixed last week (8/10). Have no fear.

The places linked above are the places that were stolen before the patch, as far as I know. If you have information that proves otherwise, post here in a confidential section or PM me.

This is purely based on what I’ve heard, as I have no proof of this, buuuttt-

I’ve heard one of the exploits were patched. However, there were two exploits. The exploit that was used to sell places was considered the “public” exploit. If it got patched, they wouldn’t care since they have a private method they won’t let out. If this stands true, this means there is still an exploit still about.

However, this is purely based on what I’ve heard. No one seems to take any of my information seriously, so I don’t expect serious responses. Meh.

At this point we believe we know the exact method used to steal places so we can say that the patch on 08/10 worked. The replies before that were less clear because we did not know at that point what method was used - we just assumed that it works in a certain way and blocked that. Now we know that worked.

It’s still possible that exploiters have a completely separate method that is still viable. This is not very likely at this point - but if you have any concrete information please send it my way.

The same hacker (The0neAnd0nly), has stated that this hasn’t been patched, but it has been made harder but not impossible. He also stated that the “ROBLOX Access Key” is / was

If this is the “Access Key” and it is something important, he still can get access to the “Key” at any time. He has distributed this key to the public.

Once again, I do not know if this is just a fake key, but this is just to help you guys out, so hopefully this is somewhat helpful.

[quote]
And yes, as clone says, he was the one behind the reason “ROBLOX” got friends back in the time. [/quote]

Like I said, this literally just happened like 2-3 days ago.
Roblox still has 1 friend because of this.

He has unimaginable power at his hands right now.
He can get any asset, and he can add or remove anyone’s friends.
But he has no intent to “bring doom and destruction” to roblox. He just wants to make money.[/quote]

-Cough cough- Then he can get a job.