For anyone interested about how this happened:
There was vulnerability in UGC bundling xml which allowed for execution of server-side scripts meaning access to Data Store and partial game leaks where modules would be parented to client accessible services and then de-compiled.
This is absolutely unacceptable, Roblox. This is EXTREMELY dangerous.
Exploiters have figured out how to execute server-side Luau and modify Datastore - with Loadstring disabled?
This can cause irreparable damage and material loss to thousands of games.
The engineer responsible needs to be fired as they are a demonstrable security risk. A backdoor like this isn't something you "oops!" accidentally ship to production and it hasn't happened for several years.
As developers, we DEPEND on server-side code execution to be completely firewalled from underprivileged clients. The ability to modify Datastore is alarming to say the least. That level of access can bypass gamepasses & dev products, causing material loss. The fact this is happening absolutely confounds me.
#RobloxDev
Asetasar retweeted
More progress on VELOCITY!
Development done by @automataic @NNRobloxDev @kritt_more @TPandemonia @sery_sfx @Zintenka @eirlaw_ @cheridairy
#Roblox #RobloxDev
Asetasar retweeted
got a report about this in my game and scrambled thinking I had a backdoor - turns out it was a roblox bug that allowed people to run server-side code. had no idea how to fix it
absolutely insane
the sight of this monkey was in my nightmares 😭
This is absolutely unacceptable, Roblox. This is EXTREMELY dangerous.
Exploiters have figured out how to execute server-side Luau and modify Datastore - with Loadstring disabled?
This can cause irreparable damage and material loss to thousands of games.
The engineer responsible needs to be fired as they are a demonstrable security risk. A backdoor like this isn't something you "oops!" accidentally ship to production and it hasn't happened for several years.
As developers, we DEPEND on server-side code execution to be completely firewalled from underprivileged clients. The ability to modify Datastore is alarming to say the least. That level of access can bypass gamepasses & dev products, causing material loss. The fact this is happening absolutely confounds me.
#RobloxDev
Asetasar retweeted
⚔️ - VELOCITY | Clash SFX Showcase
VFX: @eirlaw_
More sneaks in velocity's discord server (in replies) 👇
#robloxdev #sfx #robloxdevelopment #robloxstudio #roblox
Asetasar retweeted
Progress on the VFX plugin I sneak peeked a while back :P
What features do you VFX designers want? I'm looking to gather feedback.
(Also, this plugin might be free and open-source? Still deciding)
#Roblox #RobloxDev
Creating an Undertale-inspired custom text typewriter engine. Fully optimized, highly versatile, and built from scratch for smooth performance.
(Font is trash and text was generated by Roblox ai lmao.)
#RobloxDev
Asetasar retweeted
Progress on Velocity so far, showcasing the movement!
(Looks clunky from time to time because I SUCK AT MY OWN GAME!)
Shoutout to the Oxomo Games team for everything done so far: @NNRobloxDev @Nya5Cz @kritt_more @TPandemonia @sery_sfx @Zintenka @ Eirlaw
#Roblox #RobloxDev
Asetasar retweeted
We won the DoBig gamejam and the 50k USD prize for it!!!
@NNRobloxDev @Nya5Cz @kritt_more @TPandemonia were all great picks for the team, and we're excited to eventually release Velocity and our other game, Deep Depths.
#Roblox #RobloxDev
Made this game with my team in 24 hours.
More speed = more damage.
Velocity was a part of the DoBig gamejam. This was a lot of fun to do! Good luck to all other participants! :)
#RobloxDev
Asetasar retweeted
Made this game with my team in 24 hours.
More speed = more damage.
Velocity was a part of the DoBig gamejam. This was a lot of fun to do! Good luck to all other participants! :)
#RobloxDev
Been working on #DeepDepths and accidentally ported source movement!
To be fair we won't allow bunnyhopping on release... But the option is there
Working a ton on my Aseta framework which had some large updates (datasources, function sharing, optimization and restructuring)
