The Gonso Systen is a privacy risk
-
@estuds So as much as I want to show you, I do not have a gonso protected avatar to demonstrate how to easily remove it not via the encryption thing. We found another way.
@MicaThePuppy Is there a way to explain it w/o seeing needing an avatar to demonstrate?
-
@estuds So as much as I want to show you, I do not have a gonso protected avatar to demonstrate how to easily remove it not via the encryption thing. We found another way.
-
So why not share how to do it to make it easier for others to learn? Why gatekeep?
@Sylvian I'm not gatekeeping lol, it's just hard to explain especially when I'm not the one who initially did this. It was my friend and she doesn't exactly have an easier explanation. We surprisingly have a life outside vrchat BS like this so it's not on our priorities to make a tutorial and I also don't, yknow, want to be targeted by gonso lovers.
And unfortunately, I already have been called a "Self report" just for not trusting the system before finding out.
This way also requires blender weight painting knowledge as getting the FBX messes with weight painting a bit by completely erasing it.
-
@Sylvian I'm not gatekeeping lol, it's just hard to explain especially when I'm not the one who initially did this. It was my friend and she doesn't exactly have an easier explanation. We surprisingly have a life outside vrchat BS like this so it's not on our priorities to make a tutorial and I also don't, yknow, want to be targeted by gonso lovers.
And unfortunately, I already have been called a "Self report" just for not trusting the system before finding out.
This way also requires blender weight painting knowledge as getting the FBX messes with weight painting a bit by completely erasing it.
@MicaThePuppy Could i learn? I have a gonso avi i bought
-
@Sylvian I'm not gatekeeping lol, it's just hard to explain especially when I'm not the one who initially did this. It was my friend and she doesn't exactly have an easier explanation. We surprisingly have a life outside vrchat BS like this so it's not on our priorities to make a tutorial and I also don't, yknow, want to be targeted by gonso lovers.
And unfortunately, I already have been called a "Self report" just for not trusting the system before finding out.
This way also requires blender weight painting knowledge as getting the FBX messes with weight painting a bit by completely erasing it.
@MicaThePuppy Would you be okay if I dm you asking about the method privately? I really want this model but don't wanna get locked out of using it for one stupid way or another since gonso is watching these forums so I'm sure keeping the method hush hush is probably best just so gonso's stupid ass doesn't think about tightening the security or patching the bypass you're referring to.
-
R Runmyblade referenced this topic on
-
@estuds So as much as I want to show you, I do not have a gonso protected avatar to demonstrate how to easily remove it not via the encryption thing. We found another way.
@MicaThePuppy is there a way to decrpty quest files as wel?
-
@nandorunner420 I heard that from someone it only takes one flag sometimes and it was gonso themselves who flagged them and gonso blocked them when trying to contact them.
@MicaThePuppy is it safe to uploud a gonzoed avi to ur main acount?? and can u try ish or derect me in the way of a way to dycrept one? i hv a ton of strawbunny avis
-
I'm gonna say this here and now. I am not in contact with the person I mentioned that decoded this system. I had to go my separate ways with them but if I can recover the footage I took throughout the whole conversation we had about this I will upload the exact steps she took to get the avatar FBX. Again this is not a beginner level thing, you MUST have unity and blender knowledge to get the full avatar back without the system and I am NOT going to do it for you. Mainly cause I don't even have a gonso bought avatar to even see this system for myself.
-
@MicaThePuppy is it safe to uploud a gonzoed avi to ur main acount?? and can u try ish or derect me in the way of a way to dycrept one? i hv a ton of strawbunny avis
@surisweets Yes there is a lot of ways and safe ways to do it
-
So according to some research I did, Gonso system creates an HTTPs connection to gonso's server. Acording to the information I found, that connection should be to link your vrchat name to a license so it's kinda like this:
License: p7812... - VRC Name: John ---------> Gonso server
Gonso server ---------> Confirms this information and provides you temporary access to the fileThere's still a lot of scattered information though. I've seen one version saying your name is stored first, and another saying it's only added when you activate the licence in Unity.
An HTTPS connection also needs an IP, so in theory the server can see and store your public IP. If you want to hide that, you'd need a VPN or proxy.
The more interesting part is the HWID. I believe Gonso may use Unity's SystemInfo.deviceUniqueIdentifier.
Depending on the Unity version, that identifier can be generated from things like:
- Motherboard serial
- BIOS serial
- CPU UniqueId
- Disk serial
- Windows OS serial
However, Unity normally turns these into a device identifier/hash rather than directly sending all the raw serials.
A lot more research is still needed though. I don't really understand why this system isn't better documented with actual technical proof.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login