Minifiers are not used to keep code private. They are used to increase performance / reduce bandwidth. Jquery for example well formatted, fully documented is approximately 4 times larger than the minified code.
Web developer, can confirm. Minifying is supposed to reduce the file size of code, it can be easily beautified even in the developer tools of most browsers.
Sandboxing is basically changing the environment to restrict or add particular things. An example would bd Robloxā version of Lua: theyāve sandboxed it heavily so that it comes with built in functions like Instance.new and so that you canāt do certain things, like access most of the debug library.
To add on, obfuscation shouldnāt be used to recreate the functionality of private modules. Private modules were (for the most part) secure, whereas obfuscation, like @3dsboy08 said, is (fairly) easy to crack. This is why we need an official alternative.
also, what are you doing here lol your suppose to be a bad boi
As of right now, private modules are still being supported. Not sure why they didnāt flip the flag last night, but its working still.
I know, hopefully they are reconsidering
Theyāre probably not enabling the change until monday, they dont flip flags on weekends
Private Modules should not be removed on Roblox for several reasons:
-Admin scripts will render as useless
-Game copyright protections modules will render as useless when it comes to taking down copied games that are using the loader of that module
-Games will have less security
-Games will be more likely to be unsecured without private module support
-Games will be exposed at stealing and exploiting
To be honest, removing private modules support will render the games as insecure and possibly useless and when it comes to control of a game with the admin and copyright protection system, thatās a no more.
I consider that the Private Modules support should stay on Roblox in order to be secure as it is now.
it can be easily beautified
However, you lose comments, local variable names, and spacing that were in the original code. You need to use advanced techniques to determine what exactly the code is doing.
Likeā¦ reading the code? Its not very difficult to do.
Anyone worth their salt at Lua can look at code and know what itās doing without āadvanced techniquesā. Even if itās written to be intentionally confusing and hard to understand at a glance, itās doable with a bit of time.
If you beautify minified code, it is still going to be harder to read than the original. I think maybe his point would be that for less than advanced users, who are also most likely to fall prey to malicious scripts, that might cross the threshold of what they can handle.
Hopefully its as its said the flags to be flipped to turn off private modules get done on monday when they are back at work, ready to see them gone .
As the NSA likes to say: no code is unbreakable. No matter how creatively you obfuscate, somewhere thereās a math prodigy who can decrypt it in minutes. They might not even need any math skills; I gave an example earlier of someone who concealed their module using nested square root functions, and I was able to instantly decode it by just using print().
Because of the positive implications it has for people who are having their games destroyed by having private modules inside of them? Also the fact that removing them further encourages open-source products within the Roblox community.
Developers arenāt being forced to ālose incomeā, they can easily set up external services which their code interacts with using API keys, as multiple people have already stated multiple times on this thread. There is a lot of alternative ways to gain revenue without using private modules.
Because a lot developers are using them to put in backdoors, update games on groups and accounts that got banned, and making closed source scripts that could be open source or use api keys for.
Should read this post. So much better of an alternative than removing a non-malicious service. Also, not a lot of people have the resources to make an external site with API keys. Thatās fundamentally something roblox should already have, licensing.
Itās still the equivalent of toppling a building to swat a fly. Too many Ro-businesses have become collateral damage in the war against a small minority of malicious users.
If you want api key functionality in roblox without an external service, make a feature request for it. As of now removing third party closed source modules is good as it stops a lot of malicious activity and supports open source.
Weāre arguing that they should have provided an alternative on Roblox before removing this feature. It has been around for a while now. They couldāve formed an alternative solution that developers can easily use before announcing this.
Also, as Iāve said before, this feature shouldnāt be removed purely because some people are using it maliciously. Everything can be malicious. There are some people that are using it for good, though.