generic image
Processing...
  • Games
  • Catalog
  • Develop
  • Robux
  • Search in Players
  • Search in Games
  • Search in Catalog
  • Search in Groups
  • Search in Library
  • Log In
  • Sign Up
  • Games
  • Catalog
  • Develop
  • Robux
   
ROBLOX Forum » Game Creation and Development » Scripters
Home Search
 

Re: THIS WOULD CAUSE CHAOS

Previous Thread :: Next Thread 
screwful is not online. screwful
Joined: 30 Aug 2011
Total Posts: 126
13 Jul 2012 12:24 PM
I was just thinking.. What if exploiters somehow made a data persistence exploit?
Im not quite sure how or if it would work.

Thoughts?
Report Abuse
HotThoth is not online. HotThoth
Forum Moderator
Joined: 24 Aug 2010
Total Posts: 1176
13 Jul 2012 12:34 PM
They did. It wasn't too bad. :)

Data Persistence is loaded through script, so anything that's going to be loaded into a non-exploited game has to go through that script first.

This means if an exploiter breaks a bunch of things and tries to spread a virus through Data Persistence, his virus still has to go through the game-maker's script. So if the game-maker removes any script gotten from Data Persistence before putting it in the game, there will be no way to spread viruses through Data Persistence.


- HotThoth
Report Abuse
Techboy6601 is not online. Techboy6601
Joined: 29 Jun 2009
Total Posts: 4914
13 Jul 2012 12:34 PM
What do you mean? You can already exploit data persistence by finding which value it saves from and changing it to what you want.

~ Do you want fries with that? ~
Report Abuse
Garnished is not online. Garnished
Joined: 09 Apr 2012
Total Posts: 12695
13 Jul 2012 12:37 PM
Already done boy.

-Shell/Java/AHK/HTML Master.-
Report Abuse
screwful is not online. screwful
Joined: 30 Aug 2011
Total Posts: 126
13 Jul 2012 12:40 PM
I meant what HotThoth was talking about.
Not simply changing values so you could be a higher level in a game.

A simple Virus using data persitence.

But what if it was leaked?

It would be pretty hard to delete tons of scripts coming from random exploiter infecting games.
Report Abuse
Garnished is not online. Garnished
Joined: 09 Apr 2012
Total Posts: 12695
13 Jul 2012 12:50 PM
That would be very hard making a script that made a virus.


And those Vaccine and PROPERGRMMRNEED3D things don't work...

-Shell/Java/AHK/HTML Master.-
Report Abuse
screwful is not online. screwful
Joined: 30 Aug 2011
Total Posts: 126
13 Jul 2012 02:41 PM
Seeing how roblox is still vulnerable to this stuff.
I think it is.
Report Abuse
xSIXx is not online. xSIXx
Joined: 06 Aug 2010
Total Posts: 9202
13 Jul 2012 03:16 PM
@gar

i support free model viruses... roblox should too.

it discourages the use for the,.
Report Abuse
popinman322 is not online. popinman322
Joined: 04 Mar 2009
Total Posts: 5184
13 Jul 2012 03:20 PM
I used to have that key to the services... I could have killed DP via the link provided in that "secure script." But then I was like, "Naaah, DP isn't worth it atm..." And so it wasn't.
Report Abuse
darkkiller5555 is not online. darkkiller5555
Joined: 22 Nov 2009
Total Posts: 6359
13 Jul 2012 03:45 PM
They can't spread a DP virus in-game. Why? Because every other server doesn't have the script to load the DP.
Report Abuse
belial52 is not online. belial52
Joined: 10 Oct 2009
Total Posts: 8074
13 Jul 2012 04:01 PM
You used to be able to do it in games like Welcome to roblox building. All you would've had to do is insert a script into a single part that spread itself, when the player left it would be saved with the parts and loaded into another server when that player joins another one, allowing the script to spread into everyone else's building parts and get saved to those players and so on and so on.
Report Abuse
MyrcoMyrcoMyrcoMyrco is not online. MyrcoMyrcoMyrcoMyrco
Joined: 03 Sep 2011
Total Posts: 1013
13 Jul 2012 04:03 PM
@popin: Cool story bro, TELL IT AGAIN :D
Report Abuse
screwful is not online. screwful
Joined: 30 Aug 2011
Total Posts: 126
13 Jul 2012 05:15 PM
Wow really?
The parts could save through your player?
I note how this is possible seeing as were loaded into workspace as parts but..
I was just asking.

It was just for future reference..
If an exploiter found out a way to do that again.
Report Abuse
HotThoth is not online. HotThoth
Forum Moderator
Joined: 24 Aug 2010
Total Posts: 1176
13 Jul 2012 06:04 PM
Nah, it should only be possible to exploit on a per-server basis. So either the exploiter has to go into every server of the game he wants to mess with, or he has to make his script spread through DP (it will only spread inside of that particular game, and the game-maker can pretty easily write a script to stop it).


- HotThoth
Report Abuse
belial52 is not online. belial52
Joined: 10 Oct 2009
Total Posts: 8074
13 Jul 2012 06:10 PM
@HotThoth, What I'm saying is if you are in a building game, such as Welcome To Roblox Building, you could have made a script that spread into the players' built items and insert itself into other parts, then when that player left it would be saved and would be loaded in the next server the player went to.

But, now you can't do that anymore since scripts don't replicate the same way they used to.
Report Abuse
Quenty is not online. Quenty
Joined: 03 Sep 2009
Total Posts: 9316
13 Jul 2012 06:12 PM
^ Thus, another reason found why never to use the SaveObjects() feature of data persistence.
Report Abuse
HotThoth is not online. HotThoth
Forum Moderator
Joined: 24 Aug 2010
Total Posts: 1176
13 Jul 2012 06:14 PM
@belial52: that's exactly the problem we used to have; there are two easy ways around it--

1.) [The best/easiest way]. If you're not supposed to be saving/loading scripts with DP, then just kill any script when you load it. That way viruses will never spread across servers.

2.) [What WTRB does]. If you still want to or need to save and load scripts, make a list of all the script hashes you want to allow before-hand (because you know all of your scripts). Then, whenever you insert a script from DP, see if its hash is on the list. If not, remove.


- HotThoth
Report Abuse
HotThoth is not online. HotThoth
Forum Moderator
Joined: 24 Aug 2010
Total Posts: 1176
13 Jul 2012 06:14 PM
And scripts still replicate the way they used to. For now.
Report Abuse
screwful is not online. screwful
Joined: 30 Aug 2011
Total Posts: 126
13 Jul 2012 06:58 PM
What about the old classic games?
That are NEVER updated?
What can we do for them?

And I realize that games have alot of scripts the exploit can randomly barrow it in a random script and make another script to make sure its not deleted and keeps coming back and back etc.
Report Abuse
screwful is not online. screwful
Joined: 30 Aug 2011
Total Posts: 126
13 Jul 2012 06:59 PM
Burrow*
Report Abuse
screwful is not online. screwful
Joined: 30 Aug 2011
Total Posts: 126
13 Jul 2012 08:48 PM
Well just pointing it out seeing as though this would be one of the most major problems in roblox let alone dll.
Report Abuse
Previous Thread :: Next Thread 
Page 1 of 1
 
 
ROBLOX Forum » Game Creation and Development » Scripters
   
 
   
  • About Us
  • Jobs
  • Blog
  • Parents
  • Help
  • Terms
  • Privacy

©2017 Roblox Corporation. Roblox, the Roblox logo, Robux, Bloxy, and Powering Imagination are among our registered and unregistered trademarks in the U.S. and other countries.



Progress
Starting Roblox...
Connecting to Players...
R R

Roblox is now loading. Get ready to play!

R R

You're moments away from getting into the game!

Click here for help

Check Remember my choice and click Launch Application in the dialog box above to join games faster in the future!

Gameplay sponsored by:
Loading 0% - Starting game...
Get more with Builders Club! Join Builders Club
Choose Your Avatar
I have an account
generic image