Remote event security: I discovered a method

[Zivao]

@Guest9132342

I figured out a way to secure remote events 100% of the time. Its so simple:

Congratulations Sherlock. You figured out something every programmer already knows. This also isn’t “100%” secure - remote loggers exist where the client can intercept things sent and received through events. Pre-Byfron this wouldn’t work for advanced exploiters.

[Guest9132342]

show me where on this image you can see remote event contents

[LividDreaming (fish)]

You should stop arguing with someone so blatantly trolling, just report and move on, no need to waste time entertaining this guy

[MikesDSL (Miks)]

What is the "Dex Explorer"?

Dex Explorer Players can create their own games and participate in those created by others on the hugely popular online gaming platform known as Roblox. The site does, however, have its fair share of exploiters who employ hacking tools to outplay other players. Dex Explorer, a well-liked exploit tool that some players use to control and investigate the game’s code, is one such cheat tool. Dex Explorer is frequently included in the “CoreGui” or “PlayerGui”. [bild] Dex Explorer allows users t…

The person actually talking about dex explorer says they can see local scripts here… Also its not like dex is the only exploit possible.

[MikesDSL (Miks)]

oh youre right sorry XD thanks

[Zivao]

The DEX explorer is capable of viewing and decompiling local scripts. In this case you could just look for the client sided script that fires the event with the passcode and then do it yourself when you view the script using DEX and find the code out.

Not to mention the amount of remote logger exploit softwares that exist which can directly intercept and read incoming and sent data in remotes. This isn’t secure at all and won’t be until Byfron is completely rolled to all devices… until a bypass is found in future.

[Guest9132342]

I just read the thing and it says nothing about remote events lol

[nothing_1649 (gom_a)]

so then you use a different exploit that can

[MineJulRBX]

You can right click on scripts and are provided with the option to view them and others.
This is widely public information you can find by simply searching for it, as well it has been discussed before on DevForum.

An exploiter can inject a script, which loops through and reads all remote events, and all remote signals sent to the exploiter’s client from the server. They can connect to all the remote events with the injected script.
They can inject exactly anything other local scripts can do, which is loop through and read remote event signals.

I would like to refer back to my original reply which provides other possibilities for securing remotes, although are neither true solutions. You just have to make sure the server checks and modifies things, not the client.

Remote event security: I discovered a method

That’s false, any code run on the client is running on the exploiters device and can be decompiled by the exploiter, server scripts on the server cannot be read as they are ran on Roblox, not on the player’s device. They can also read any events and messages sent from the server, to their client, to gain understanding on how you communicate with events. They can inject code that reads remote signals. There are 3 things you could try to help make a event secure. Use UUIDs and give remotes new U…

[Zivao]

I don’t think he gets the hint of he clearly just isn’t knowledgeable in this area. Don’t bother wasting your time trying to explain it to someone in denial and chooses to not understand it regardless of how many times it’s explained to them.

[Ihaveash0rtname]

This is not new and really isn’t secure. Exploits can read what arguments you send and can see the calling script’s bytecode and reconstructed source. Nevertheless, this is obsolete.