I think is is 100% a great idea but I do have a concern that like the ban waves there are going to be a ton of bans but this time instead of bans assets removed which do not malicious scripts which could affect game play.
I personally don’t use any free models but still others could get really affected by this. You state that “minority of developers may notice missing assets” but I really think it could affect lots then a small amount.
Its great to see that everyones game that uses assets are going to be safe.
I’m not expecting a detailed rundown of the process they’re going to use to prevent system gaming but just roughly how they intend to determine this.
Malicious code is nigh indistinguishable from regular code which brings up the issue of understanding whether or not Roblox’s plan of action is thorough and correctly catches bad actors or if safe modules may get caught in the crossfire. There’s not even any information if this is automated or not.
A secondary concern is that if moderation action is attached to the cleanup, then innocent developers could lose everything at an incorrect trigger pull.
This is showing the real Roblox moderation and how the moderation team is finally taking steps to ensure malicious code isn’t being added to games.
What it will prevent:
I think we are seeing some major changes towards the marketplace and toolbox assets that we can use for new learners and those who just want to make a quick game out of toolboxes.
Was this in response to the recent callout about the plugin marketplace being swarmed with malicious code?
It would also be nice if a developer could manually blacklist require(id) using ServerScriptService or some other security setting.
Actually i still prefer to make everything by myself
Agree with the second point. Time to plug a feature request:
Private Module Removal accomplished nothing.
This is such a good move in the right direction! It will certainly make taking assets from the marketplace a bit safer now. Will this affect plugins tho?
That would be nice but unfortunately it will take a LONG AMOUNT of time in order to blacklist every backdoors, viruses, etc.
I like this idea but would this any remove obfuscation? Currently I use this stuff for whitelist and also when selling my products through stuff like PodTech so people don’t leak code for my products?
I meant a blanket ban on the function.
require(123456789) --> ERROR: This experience has disabled Third Party modules
This is great news. Thank you so much!
This is what should have been done in the first place instead of banning innocent new players that add free models from the Roblox Platform into their game and getting their games deleted!
If you guys ever have an issue with something that has been uploaded to the Roblox Platform, take it down and deal with that user who uploaded it, not the people innocently using them!
Definitely something that is needed for the toolbox, although i don’t use the toolbox it’s good to know that other developers are/can be safe on the platform.
I think they aren’t going to say what the check is, because people might start editing their malicious scripts to hide from the check.
As for what the suspicious scripts will be replaced with, the whole model will probably be turned into a single red truss piece (as per the usual for “[ Content Deleted ]” models).
Well done Roblox, you’ve finally solved one of the biggest issues on the platform.
I’m dumbfounded that Roblox had to remove the ability to load private modules for the sake of preventing backdoor effects like this. Yet, nothing changed, people are simply just making the modules public and still generating backdoors awhile ruining perfect projects in which other developers wanted to share amazing tools and was refused to from the removal of this private module feature.
I’m astonished that Roblox had yet provided a feature to just outright block requiring out-of-game modules and/or a whitelist/blacklist for HttpService.
The only thing I have to say about this is… At least Roblox is getting rid of bad models/scripts.
I’m genuinely curious now.
Would it be possible to share the statistics regarding how many assets were detected and removed once this process is complete, if these exist? It’s obviously not necessary, but this leaves me very curious about the potential number of assets that have stacked up over time.
Glad to know the Marketplace is being freed up from a lot of these malicious assets!