Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Whitelist RBLX VR Controls Scheme from CoreGui Images Check #1558

Merged
merged 1 commit into from
Jun 18, 2024

Conversation

wilsontulus
Copy link
Contributor

@wilsontulus wilsontulus commented Jun 18, 2024

Roblox might've been slowly taking the "put the images in the cloud" route instead of putting them in the client itself. And the worst part is that it's uploaded through their employee's account rather than the Roblox (User ID 1) account itself.

Here's the log message from Adonis reports remotely sent through a webhook.
Note that my own Adonis fork used in productions doesn't kick players when a CoreGui detection occured since I already have known IDs related to exploiting.

i_view64_vrDNls5Skh

Notice that the player info claimed that Roblox was being rendered with 1:1 aspect ratio, doesn't have a touchscreen, and primarily uses Gamepad1 as the input type.
The mentioned AssetID redirects to this image relating to VR Controls scheme:

firefox_G5z4LjHbHq

And the uploader, worldsynth, has an official Administrator badge:

firefox_9i5VDi6AFu

Plus it's a good thing the profile is public, revealing one more decal which looks very similar each other:

firefox_xxm2BVxodU

Which, with all the explanation above, adding 2 more asset IDs into the whitelist is needed to make sure VR players, primarily Meta Quest users aren't getting false kicks on Roblox experiences with CoreGui Image checks enabled.

Roblox might've been slowly taking the "put the images in the cloud" route instead of putting them in the client itself.
@Dimenpsyonal Dimenpsyonal merged commit 5cde472 into Epix-Incorporated:master Jun 18, 2024
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants