Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Zephyr)
  • No Skin
Collapse
RipperStore Logo
  1. Home
  2. Community
  3. General Discussions
  4. VRChat added VRCA (?maybe VRCW too) protection

VRChat added VRCA (?maybe VRCW too) protection

Scheduled Pinned Locked Moved General Discussions
protectionvrchatvrcaripping
285 Posts 103 Posters 107.3k Views 78 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • trejecttT trejectt

    Vrchat now uses AES-GCM encryption. The only way to get any type of unencrypted vrca or vrcw is with a modded client. Otherwise dump the game and get the decryption method. And boom. But the method is lazy and there are ways around this. Cannot say more right now.

    S
    S
    sas909
    wrote on last edited by
    #10

    @trejectt Why are you so sure it's AES encryption?

    1 Reply Last reply
    0
    • C
      C
      chocolate
      wrote on last edited by
      #11

      I usually used loadbundle, and I was hoping that at least this would become usable. But if encryption measures have been implemented, there’s almost no chance it will work in the future.

      1 Reply Last reply
      0
      • trejecttT trejectt

        Vrchat now uses AES-GCM encryption. The only way to get any type of unencrypted vrca or vrcw is with a modded client. Otherwise dump the game and get the decryption method. And boom. But the method is lazy and there are ways around this. Cannot say more right now.

        "'Real' Visitor""
        "'Real' Visitor""
        "'Real' Visitor"
        wrote on last edited by
        #12

        @trejectt Yep, saw one video where client user was able to extract avtr file w/o encryption. And from other source I found out that it is indeed client-sided. Files on VRC servers are still un-encrypted, and encrypted locally. So if anyone have a backup of previous VRC client version, they can still load and rip. Or wait for someone to decompile VRC and make another tool...

        Hi "Trusted" users
        Maybe "Gumroad Fork" some day...

        trejecttT ReymR LinzeL 3 Replies Last reply
        1
        • avatarofcornA avatarofcorn

          It's added for VRCW as well. I heard about it and went on the mad scramble to back up memorable worlds from the early days and they're all scrambled. I have a feeling they only did this so people can't "port" user-made worlds to other social VR platforms since VRChat has gone down the shitter. They don't care one bit about their users and their concerns with "avatar ripping".

          Hardware98H
          Hardware98H
          Hardware98
          wrote on last edited by
          #13

          @avatarofcorn I heard personally they did it because they've started a partnership with Booth, but unsure how true that really is. At least the community had time, but I fear vrchat is certainly gonna turn into Pokechat for vrca's.

          avatarofcornA 1 Reply Last reply
          0
          • "'Real' Visitor"" "'Real' Visitor"

            @trejectt Yep, saw one video where client user was able to extract avtr file w/o encryption. And from other source I found out that it is indeed client-sided. Files on VRC servers are still un-encrypted, and encrypted locally. So if anyone have a backup of previous VRC client version, they can still load and rip. Or wait for someone to decompile VRC and make another tool...

            trejecttT
            trejecttT
            trejectt
            wrote on last edited by
            #14

            @Real-Visitor I havent found a version that lets you play. i have all the way back to last year. all force to update

            1 Reply Last reply
            😰
            0
            • C
              C
              chocolate
              wrote on last edited by
              #15

              I downgraded VRChat, but I can’t launch it because a warning message says, "Please update."

              N 1 Reply Last reply
              0
              • C chocolate

                I downgraded VRChat, but I can’t launch it because a warning message says, "Please update."

                N
                N
                NonckUnck
                wrote on last edited by
                #16

                @chocolate yeah it only worked for a few hrs into the next day.(28th) i helped someone figured it out

                1 Reply Last reply
                😢
                0
                • "'Real' Visitor"" "'Real' Visitor"

                  @trejectt Yep, saw one video where client user was able to extract avtr file w/o encryption. And from other source I found out that it is indeed client-sided. Files on VRC servers are still un-encrypted, and encrypted locally. So if anyone have a backup of previous VRC client version, they can still load and rip. Or wait for someone to decompile VRC and make another tool...

                  ReymR
                  ReymR
                  Reym
                  wrote on last edited by
                  #17

                  @Real-Visitor what if the connection download is intercepted? what would happen?

                  I'm bad at understanding english word

                  I fix .vrca/.vrcw stuff for free and for fun! Depending on file, every outcome and vary might be different than the original avatar has due to the toggles and much more, send me a pm if you need an avi that need to fix or cracking a password locked avatar or send me .vrca file or through my pms and i will extract/fix them for you!

                  request is semi-open, only on unencrypted __data file aka .vrca or .vrcw

                  "'Real' Visitor"" 1 Reply Last reply
                  0
                  • D
                    D
                    DrKWolf
                    wrote on last edited by
                    #18

                    Can someone help me on DM for getting an avatar? i still have the ID of it.
                    extracting vrca from cache doesn't work anymore, and assetripper can't load assets folder and shows unity version as 0.0.0a0

                    Looking for someone who can bypass avatar encryption. I just need to get a single avatar. Still have the ID of it.

                    1 Reply Last reply
                    0
                    • Hardware98H Hardware98

                      @avatarofcorn I heard personally they did it because they've started a partnership with Booth, but unsure how true that really is. At least the community had time, but I fear vrchat is certainly gonna turn into Pokechat for vrca's.

                      avatarofcornA
                      avatarofcornA
                      avatarofcorn
                      wrote on last edited by avatarofcorn
                      #19

                      @Hardware98 It was clear as day what the outcome would have been when EAC was rammed down everyone's throats to the protest of nearly forty thousand downvotes on the Canny. Didn't take long for them to charge for what mods and other social VR platforms do for free. Notice how development time now is spent on monetization, instead of fixing bugs and improving the existing system. I suppose the massive layoffs last year were to remove staff members who gave half a damn about the community. The rest aren't talking but you can figure it out from how angry Merlin got. (For those who don't recognize this name, he's the guy who brought us UdonSharp and was hired to overhaul the broken Udon system when he was suddenly fired.)

                      @Reym Try setting up a transparent MITM proxy with a self-signed TLS cert. Your mileage might vary, given the ring-0 rootkit on the machine.

                      Hardware98H 1 Reply Last reply
                      1
                      • ReymR
                        ReymR
                        Reym
                        wrote on last edited by
                        #20

                        @avatarofcorn ring-0?

                        I'm bad at understanding english word

                        I fix .vrca/.vrcw stuff for free and for fun! Depending on file, every outcome and vary might be different than the original avatar has due to the toggles and much more, send me a pm if you need an avi that need to fix or cracking a password locked avatar or send me .vrca file or through my pms and i will extract/fix them for you!

                        request is semi-open, only on unencrypted __data file aka .vrca or .vrcw

                        1 Reply Last reply
                        0
                        • SeraphicRosesS SeraphicRoses referenced this topic on
                        • ReymR Reym

                          @Real-Visitor what if the connection download is intercepted? what would happen?

                          "'Real' Visitor""
                          "'Real' Visitor""
                          "'Real' Visitor"
                          wrote on last edited by
                          #21

                          @Reym Client users can still take pure VRCA files, due to them not being encrypted server side

                          Hi "Trusted" users
                          Maybe "Gumroad Fork" some day...

                          LinzeL 1 Reply Last reply
                          🤦
                          0
                          • G
                            G
                            gameboydsps
                            wrote on last edited by
                            #22

                            I know nothing, but I have noticed that while the Avatar is in use a __lock file is created in that path. I cannot do anything with this file, but when unloaded it disappears.

                            1 Reply Last reply
                            0
                            • G
                              G
                              Greg77
                              wrote on last edited by
                              #23

                              So once the file on the cache is encrypted there is no way to revert it?

                              1 Reply Last reply
                              0
                              • "'Real' Visitor"" "'Real' Visitor"

                                @Reym Client users can still take pure VRCA files, due to them not being encrypted server side

                                LinzeL
                                LinzeL
                                Linze
                                wrote on last edited by
                                #24
                                This post is deleted!
                                "'Real' Visitor"" 1 Reply Last reply
                                0
                                • "'Real' Visitor"" "'Real' Visitor"

                                  @trejectt Yep, saw one video where client user was able to extract avtr file w/o encryption. And from other source I found out that it is indeed client-sided. Files on VRC servers are still un-encrypted, and encrypted locally. So if anyone have a backup of previous VRC client version, they can still load and rip. Or wait for someone to decompile VRC and make another tool...

                                  LinzeL
                                  LinzeL
                                  Linze
                                  wrote on last edited by Linze
                                  #25
                                  This post is deleted!
                                  Dr.beepD 1 Reply Last reply
                                  0
                                  • avatarofcornA avatarofcorn

                                    @Hardware98 It was clear as day what the outcome would have been when EAC was rammed down everyone's throats to the protest of nearly forty thousand downvotes on the Canny. Didn't take long for them to charge for what mods and other social VR platforms do for free. Notice how development time now is spent on monetization, instead of fixing bugs and improving the existing system. I suppose the massive layoffs last year were to remove staff members who gave half a damn about the community. The rest aren't talking but you can figure it out from how angry Merlin got. (For those who don't recognize this name, he's the guy who brought us UdonSharp and was hired to overhaul the broken Udon system when he was suddenly fired.)

                                    @Reym Try setting up a transparent MITM proxy with a self-signed TLS cert. Your mileage might vary, given the ring-0 rootkit on the machine.

                                    Hardware98H
                                    Hardware98H
                                    Hardware98
                                    wrote on last edited by
                                    #26

                                    @avatarofcorn Yeah I remember that shit. I also downvoted, I think everyone did. Horrible way the platform is going honestly and it's only going to get worse. Genuinely hope they don't start putting ads in the game, but I see that as the next step. Hopefully people will protest then too.

                                    1 Reply Last reply
                                    0
                                    • G
                                      G
                                      grapeishere
                                      wrote on last edited by
                                      #27

                                      so how do i rip now?

                                      1 Reply Last reply
                                      0
                                      • LinzeL Linze
                                        [[topic:post-is-deleted]]
                                        "'Real' Visitor""
                                        "'Real' Visitor""
                                        "'Real' Visitor"
                                        wrote on last edited by
                                        #28

                                        @Linze Idk, if it stores that file temporarily somewhere, then possibly, but not sure.
                                        Give 90% that they store the file in ram.

                                        Hi "Trusted" users
                                        Maybe "Gumroad Fork" some day...

                                        1 Reply Last reply
                                        0
                                        • ReymR
                                          ReymR
                                          Reym
                                          wrote on last edited by
                                          #29

                                          If we just read the ram, would that work?

                                          I'm bad at understanding english word

                                          I fix .vrca/.vrcw stuff for free and for fun! Depending on file, every outcome and vary might be different than the original avatar has due to the toggles and much more, send me a pm if you need an avi that need to fix or cracking a password locked avatar or send me .vrca file or through my pms and i will extract/fix them for you!

                                          request is semi-open, only on unencrypted __data file aka .vrca or .vrcw

                                          1 Reply Last reply
                                          0

                                          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                                          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                                          With your input, this post could be even better 💗

                                          Register Login
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular