screwful
|
  |
| Joined: 30 Aug 2011 |
| Total Posts: 126 |
|
|
| 13 Jul 2012 12:24 PM |
I was just thinking.. What if exploiters somehow made a data persistence exploit? Im not quite sure how or if it would work.
Thoughts? |
|
|
| Report Abuse |
|
|
HotThoth
|
  |
 |
| Joined: 24 Aug 2010 |
| Total Posts: 1176 |
|
|
| 13 Jul 2012 12:34 PM |
They did. It wasn't too bad. :)
Data Persistence is loaded through script, so anything that's going to be loaded into a non-exploited game has to go through that script first.
This means if an exploiter breaks a bunch of things and tries to spread a virus through Data Persistence, his virus still has to go through the game-maker's script. So if the game-maker removes any script gotten from Data Persistence before putting it in the game, there will be no way to spread viruses through Data Persistence.
- HotThoth |
|
|
| Report Abuse |
|
|
|
| 13 Jul 2012 12:34 PM |
What do you mean? You can already exploit data persistence by finding which value it saves from and changing it to what you want.
~ Do you want fries with that? ~ |
|
|
| Report Abuse |
|
|
Garnished
|
  |
| Joined: 09 Apr 2012 |
| Total Posts: 12695 |
|
|
| 13 Jul 2012 12:37 PM |
Already done boy.
-Shell/Java/AHK/HTML Master.- |
|
|
| Report Abuse |
|
|
screwful
|
  |
| Joined: 30 Aug 2011 |
| Total Posts: 126 |
|
|
| 13 Jul 2012 12:40 PM |
I meant what HotThoth was talking about. Not simply changing values so you could be a higher level in a game.
A simple Virus using data persitence.
But what if it was leaked?
It would be pretty hard to delete tons of scripts coming from random exploiter infecting games. |
|
|
| Report Abuse |
|
|
Garnished
|
  |
| Joined: 09 Apr 2012 |
| Total Posts: 12695 |
|
|
| 13 Jul 2012 12:50 PM |
That would be very hard making a script that made a virus.
And those Vaccine and PROPERGRMMRNEED3D things don't work...
-Shell/Java/AHK/HTML Master.- |
|
|
| Report Abuse |
|
|
screwful
|
  |
| Joined: 30 Aug 2011 |
| Total Posts: 126 |
|
|
| 13 Jul 2012 02:41 PM |
Seeing how roblox is still vulnerable to this stuff. I think it is. |
|
|
| Report Abuse |
|
|
xSIXx
|
  |
| Joined: 06 Aug 2010 |
| Total Posts: 9202 |
|
|
| 13 Jul 2012 03:16 PM |
@gar
i support free model viruses... roblox should too.
it discourages the use for the,. |
|
|
| Report Abuse |
|
|
|
| 13 Jul 2012 03:20 PM |
| I used to have that key to the services... I could have killed DP via the link provided in that "secure script." But then I was like, "Naaah, DP isn't worth it atm..." And so it wasn't. |
|
|
| Report Abuse |
|
|
|
| 13 Jul 2012 03:45 PM |
| They can't spread a DP virus in-game. Why? Because every other server doesn't have the script to load the DP. |
|
|
| Report Abuse |
|
|
belial52
|
  |
| Joined: 10 Oct 2009 |
| Total Posts: 8074 |
|
|
| 13 Jul 2012 04:01 PM |
| You used to be able to do it in games like Welcome to roblox building. All you would've had to do is insert a script into a single part that spread itself, when the player left it would be saved with the parts and loaded into another server when that player joins another one, allowing the script to spread into everyone else's building parts and get saved to those players and so on and so on. |
|
|
| Report Abuse |
|
|
|
| 13 Jul 2012 04:03 PM |
| @popin: Cool story bro, TELL IT AGAIN :D |
|
|
| Report Abuse |
|
|
screwful
|
  |
| Joined: 30 Aug 2011 |
| Total Posts: 126 |
|
|
| 13 Jul 2012 05:15 PM |
Wow really? The parts could save through your player? I note how this is possible seeing as were loaded into workspace as parts but.. I was just asking.
It was just for future reference.. If an exploiter found out a way to do that again. |
|
|
| Report Abuse |
|
|
HotThoth
|
  |
 |
| Joined: 24 Aug 2010 |
| Total Posts: 1176 |
|
|
| 13 Jul 2012 06:04 PM |
Nah, it should only be possible to exploit on a per-server basis. So either the exploiter has to go into every server of the game he wants to mess with, or he has to make his script spread through DP (it will only spread inside of that particular game, and the game-maker can pretty easily write a script to stop it).
- HotThoth |
|
|
| Report Abuse |
|
|
belial52
|
  |
| Joined: 10 Oct 2009 |
| Total Posts: 8074 |
|
|
| 13 Jul 2012 06:10 PM |
@HotThoth, What I'm saying is if you are in a building game, such as Welcome To Roblox Building, you could have made a script that spread into the players' built items and insert itself into other parts, then when that player left it would be saved and would be loaded in the next server the player went to.
But, now you can't do that anymore since scripts don't replicate the same way they used to. |
|
|
| Report Abuse |
|
|
Quenty
|
  |
| Joined: 03 Sep 2009 |
| Total Posts: 9316 |
|
|
| 13 Jul 2012 06:12 PM |
| ^ Thus, another reason found why never to use the SaveObjects() feature of data persistence. |
|
|
| Report Abuse |
|
|
HotThoth
|
  |
 |
| Joined: 24 Aug 2010 |
| Total Posts: 1176 |
|
|
| 13 Jul 2012 06:14 PM |
@belial52: that's exactly the problem we used to have; there are two easy ways around it--
1.) [The best/easiest way]. If you're not supposed to be saving/loading scripts with DP, then just kill any script when you load it. That way viruses will never spread across servers.
2.) [What WTRB does]. If you still want to or need to save and load scripts, make a list of all the script hashes you want to allow before-hand (because you know all of your scripts). Then, whenever you insert a script from DP, see if its hash is on the list. If not, remove.
- HotThoth |
|
|
| Report Abuse |
|
|
HotThoth
|
  |
 |
| Joined: 24 Aug 2010 |
| Total Posts: 1176 |
|
|
| 13 Jul 2012 06:14 PM |
| And scripts still replicate the way they used to. For now. |
|
|
| Report Abuse |
|
|
screwful
|
  |
| Joined: 30 Aug 2011 |
| Total Posts: 126 |
|
|
| 13 Jul 2012 06:58 PM |
What about the old classic games? That are NEVER updated? What can we do for them?
And I realize that games have alot of scripts the exploit can randomly barrow it in a random script and make another script to make sure its not deleted and keeps coming back and back etc. |
|
|
| Report Abuse |
|
|
screwful
|
  |
| Joined: 30 Aug 2011 |
| Total Posts: 126 |
|
| |
|
screwful
|
  |
| Joined: 30 Aug 2011 |
| Total Posts: 126 |
|
|
| 13 Jul 2012 08:48 PM |
| Well just pointing it out seeing as though this would be one of the most major problems in roblox let alone dll. |
|
|
| Report Abuse |
|
|