I’ve been getting sent death threats by the “large” community due to being a “spy” or leaking this game breaking issue.
To those UGC creators, the same people who are sending death threats to me and attempting to get my information leaked, those who are reading this, I will tell you this:
Attempt what you’re doing again (all of the things listed above, even black marketing and even CREATING those rule breaking accessories, your main accounts, throwaway accounts, group accounts, group holders, alt accounts will all be leaked and reported to ROBLOX for abuse of the Roblox systems (appealing knowing that what you’re doing is wrong) and many other bad things that I currently do not feel like listing right now. I am warning you. Thank you for reading!
This is actually because Roblox’s .mesh format reads every 3 vertices as a triangle, which means even if the edges are clipping together, it still counts as a face. Scaling the mesh will increase the face’s area (and thus the calculated mass) without actually make the mesh bigger.
Essentially, a check has been added that should hopefully prevent some, if not all of these massive UGC items from being uploaded from now.
I’m working with an engineer or two to resolve this vulnerability along with a few other ones involving crashing, massive avatars, etc. Hopefully these issues should all be resolved in the coming days and weeks.
This is the worst check code ever. I optimized it, if it helps:
if FFlagUGCValidationPositionCheck then
local maxBounds = 10000
local axes = {"X", "Y", "Z"}
for _, v in ipairs(axes) do
local a1 = handle.Position[v]
local a2 = boundsCF.Position[v]
if math.abs(a1) > maxBounds or math.abs(a2) > maxBounds then
return false, { "Position is outside of bounds" }
end
end
end
