Heyo, I’ve been a novice developer on Roblox for some time now. I learned the basics of scripting by reverse engineering open sourced material and by researching on sites such as developer.roblox.com. I’ve only ever made games for fun and to pass time but now I’d like to develop an actual game. Since I’ve only created games for fun I never needed to learn about security, I know the basics like never trust the client, server-side validation, etc. However, my novice brain can’t comprehend the following…
How are exploiters able to crash players in Catalog Heaven unless they buy a specific shirt on Roblox? These exploiters are essentially running an extortion scheme. How are they able to do this? Why can they only do it in this specific game and what can I do to make sure something like this isn’t possible in the game I plan to release?
Also, how are exploiters able to DDoS/Lag entire servers and why are big games like Adopt Me never a victim of it? I assume its because big games have impeccable code, but I still don’t understand how having bad code could lend you to having your game lagged by expositors.
Either backdoors in your game have been inserted allowing them to access your game and put all the stuff in your game.
If you want to prevent this, make sure to check for any scripts you don’t recall placing in your game and this will be prevented.
Make sure to limit the amount of free models. Whenever you insert a free model make sure you see whats inside so there is nothing that can mess up your game.
Yeah but theres a bunch of stuff that can do shitty things to your game. Its best to check your plugins because owning too much plugins is most possibly sure to insert stuff in your game that exploiters can tamper with. Hidden scripts, malicious plugins and other stuff that can really mess up your game.
I think there is a huge influx of people crashing servers via the ip address and port and using a DVR method. Which on a developer’s side it isn’t really fixable and is up to roblox and the server providers, adopt me probably does get impacted from this, however since they have so many game instances it barely makes a dent as the client would have to manually join the game instances to get the ip address and port.
There are also apparently scripts that can crash servers but I don’t know any patches for them and if they aren’t patched, one of them was the auto execution of a player in game.Players when the client loads the game, which has been patched for a while now.
This is fixable, its just a matter of time to fix this. Game instances? I don’t believe they can get in that game using those instances. Also, how in the actual world can they join each instance to get the address and port? They would most likely have to edit the game in studio to get that information.
I don’t think you understand how networking works, but there are free applications or many online, like NetLimiter that can show you the ip address and port of an executable. Even with roblox’s endpoints to actually launch robloxplayerbeta it returns a machine address and serverport.
Examples for cant crash server or players is dont use many remotes (made it wait on the server, no in the client), other methods can be patched by roblox but not by u, but roblox patch all crash servers/players fast (If he can do it for all games)