Gonso System
-
@taikeru Sorry for bumping this sorta dead thread, but from what I've seen from newer gonso dlls (albeit a few months old), they may be using a modified version of confuserex/confuserex2. Haven't had much time to actually do a deep dive but at the surface level, it definitely looks like it.
necropost whoops, i've been away for a while
yes - a newer, private version of CEX is used, of which there aren't many bypasses for. best bet is to hijack the Unity thread via task manager, shadowcopy, or by injecting into the thread and pausing it forcefully when GL runs its decrypt method; as of now i imagine the system is rudementary compared to the tools we have on hand -
ip logging....isnt that illegal cause there can find an approximate area of your location.. ? coreect me if im wrong.
also it would be great if someone made an application or importable package tool you can just slap in unity to remove gonso/block it from logging your information -
ip logging....isnt that illegal cause there can find an approximate area of your location.. ? coreect me if im wrong.
also it would be great if someone made an application or importable package tool you can just slap in unity to remove gonso/block it from logging your information@Anonymous92765 ip grabbing technically is not illegal but even if it was i doubt gonso users would care because they're delusional and crazy
-
But i heard it logs your ip and basically flags you to creators?
unconfirmed, but given the closed-source nature of the system i wouldn't put it out of the equation - so far though Gonso himself has told me directly (and proven to me) that he does not have interest in logging IPs; as far as i can tell that remains the case now
What happens to a model with gonzo if the creator no longer uses gonzo?
hopefully, like Whituu's Sakura from a while ago, it is simply updated for the purchasers to not have the system in the package; otherwise it's just up to the creator to do that themselves
And, how does one manually remove gonzo?
this one is an involved process. there isn't a singular way to remove this system, and there is definitely not a simple way to do so without a decent handle on programming and cybersec tools
both @halcyon and i have worked on ways to get around this and she still works on them now; i just help with code stuff occasionally as i've mostly lost interest in it
it boils down to a few methods:
- the first, is to decompile the GonsoLicense DLL (most versions are obfuscated with ConfuserEX - it's very easy for a user to see this by loading the DLL into something like Ghidra or DnSpy); and once you've obtained the source code, you can write your own Unity scripts to "fake" requests to the API, basically copy-pasting the
Decryptmethod so it can be decrypted manually with the key from the API- there was a tool developed by a few acquaintances of mine that circulated around this forum a while ago; it was based off of my original methods and code that ended up being heavily edited for public use
- the second is to hijack the Unity process and "stall" it while the Licenser does its tricks. the drawback of GonsoLicense is that it has one major flaw: Unity cannot load or upload encrypted files. at some point during the upload process, these files have to be decrypted to be packaged - giving users a small window in which they can grab the files if they can get around Unity's directory locking. while simpler on paper, Unity's directory lock is pretty robust and isn't easy to bypass
Personally dont believe it but why lie to your buyers?
money. i wish i could say most creators using the GonsoLicense system are doing it without malicious intent, but the bottom line is many of them are looking for quick ways to maximize their profit margins for mediocre avatar work (not the case for all, but many), where some creators like Strawbunny don't even do most of the work and outsource it - there's a reason you don't see larger, more confident creators using the system (to name a few, such as Godfall and Nikkie) - the quality of their work speaks for itself (and is usually worth the price); most importantly their interaction with the community they've built doesn't give many users a reason to maliciously steal their products
it's all business practices, and predatory ones at that
i'm aware specifically for Birdy's case that they did actually stop using Gonso, but released the non-GonsoLicense'd package under a completely separate listing on their Gumroad. whether they forced previous buyers to re-buy it or not is unknown to me
feel free to ping myself or @halcyon for more answers - we're happy to help
@taikeru said in Gonso System:
there was a tool developed by a few acquaintances of mine that circulated around this forum a while ago; it was based off of my original methods and code that ended up being heavily edited for public use
where can i find the tool?
- the first, is to decompile the GonsoLicense DLL (most versions are obfuscated with ConfuserEX - it's very easy for a user to see this by loading the DLL into something like Ghidra or DnSpy); and once you've obtained the source code, you can write your own Unity scripts to "fake" requests to the API, basically copy-pasting the
-
@taikeru said in Gonso System:
there was a tool developed by a few acquaintances of mine that circulated around this forum a while ago; it was based off of my original methods and code that ended up being heavily edited for public use
where can i find the tool?
-
V viper454 referenced this topic on
-
I have never once heard of this. This was an interesting read. I would actively go out of my way to discourage people to support creators who use such intrusive and scummy shit. Y'all aren't special enough, your work not good enough, your labor not valuable enough to try to fort knox your shit behind spyware.
Blessed be the creators who write the humble written warning. I genuinely do try to get others to buy your stuff.
-
T TheDirtyDozen referenced this topic on
-
This protection system collects your Discord ID, VRChat username, and license key (from the original buyer), and transmits them to the avatar creator. It also monitors for what it considers "suspicious behavior" and can flag your account.
On top of that, some avatars using this system restrict you from making personal edits like blender modifications to something you paid for.
If you're in the EU, this is worth knowing: under EU consumer law, sellers cannot use technical enforcement mechanisms that go beyond what's reasonable for a personal-use product. Flagging users for editing something they legitimately purchased is arguably overreach. GDPR also requires proper informed consent for data collection.
If you have concerns, you can file a complaint with your national data protection authority.
And if they don't want to play ball the EU didn't write 88 pages of GDPR legislation just to let it collect dust. Your data protection authority exists for exactly this, so use them. -
i have a quisten how do i know avi has gonso would it say it somewere in the file like gonso license pdf or somthing would they make it apparently obvoise the avi has gonso how do i tell a avi has this or asset even
-
i have a quisten how do i know avi has gonso would it say it somewere in the file like gonso license pdf or somthing would they make it apparently obvoise the avi has gonso how do i tell a avi has this or asset even
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login