VRChat added VRCA (?maybe VRCW too) protection
-
@trejectt Yep, saw one video where client user was able to extract avtr file w/o encryption. And from other source I found out that it is indeed client-sided. Files on VRC servers are still un-encrypted, and encrypted locally. So if anyone have a backup of previous VRC client version, they can still load and rip. Or wait for someone to decompile VRC and make another tool...
-
I downgraded VRChat, but I can’t launch it because a warning message says, "Please update."
-
@trejectt Yep, saw one video where client user was able to extract avtr file w/o encryption. And from other source I found out that it is indeed client-sided. Files on VRC servers are still un-encrypted, and encrypted locally. So if anyone have a backup of previous VRC client version, they can still load and rip. Or wait for someone to decompile VRC and make another tool...
@Real-Visitor what if the connection download is intercepted? what would happen?
I'm bad at understanding english word
I fix .vrca/.vrcw stuff for free and for fun! Depending on file, every outcome and vary might be different than the original avatar has due to the toggles and much more, send me a pm if you need an avi that need to fix or cracking a password locked avatar or send me .vrca file or through my pms and i will extract/fix them for you!
request is semi-open, only on unencrypted __data file aka .vrca or .vrcw
-
@avatarofcorn I heard personally they did it because they've started a partnership with Booth, but unsure how true that really is. At least the community had time, but I fear vrchat is certainly gonna turn into Pokechat for vrca's.
@Hardware98 It was clear as day what the outcome would have been when EAC was rammed down everyone's throats to the protest of nearly forty thousand downvotes on the Canny. Didn't take long for them to charge for what mods and other social VR platforms do for free. Notice how development time now is spent on monetization, instead of fixing bugs and improving the existing system. I suppose the massive layoffs last year were to remove staff members who gave half a damn about the community. The rest aren't talking but you can figure it out from how angry Merlin got. (For those who don't recognize this name, he's the guy who brought us UdonSharp and was hired to overhaul the broken Udon system when he was suddenly fired.)
@Reym Try setting up a transparent MITM proxy with a self-signed TLS cert. Your mileage might vary, given the ring-0 rootkit on the machine.
-
@avatarofcorn ring-0?
-
S SeraphicRoses referenced this topic on
-
@Real-Visitor what if the connection download is intercepted? what would happen?
-
I know nothing, but I have noticed that while the Avatar is in use a __lock file is created in that path. I cannot do anything with this file, but when unloaded it disappears.
-
@Reym Client users can still take pure VRCA files, due to them not being encrypted server side
-
@trejectt Yep, saw one video where client user was able to extract avtr file w/o encryption. And from other source I found out that it is indeed client-sided. Files on VRC servers are still un-encrypted, and encrypted locally. So if anyone have a backup of previous VRC client version, they can still load and rip. Or wait for someone to decompile VRC and make another tool...
-
@Hardware98 It was clear as day what the outcome would have been when EAC was rammed down everyone's throats to the protest of nearly forty thousand downvotes on the Canny. Didn't take long for them to charge for what mods and other social VR platforms do for free. Notice how development time now is spent on monetization, instead of fixing bugs and improving the existing system. I suppose the massive layoffs last year were to remove staff members who gave half a damn about the community. The rest aren't talking but you can figure it out from how angry Merlin got. (For those who don't recognize this name, he's the guy who brought us UdonSharp and was hired to overhaul the broken Udon system when he was suddenly fired.)
@Reym Try setting up a transparent MITM proxy with a self-signed TLS cert. Your mileage might vary, given the ring-0 rootkit on the machine.
@avatarofcorn Yeah I remember that shit. I also downvoted, I think everyone did. Horrible way the platform is going honestly and it's only going to get worse. Genuinely hope they don't start putting ads in the game, but I see that as the next step. Hopefully people will protest then too.
-
so how do i rip now?
-
@Linze Idk, if it stores that file temporarily somewhere, then possibly, but not sure.
Give 90% that they store the file in ram. -
A certain mod developer says that "the encryption is being done server-side," but I don’t know what’s actually correct
Dumping RAM should give you everything. Anyone want to see if the old Ninja Ripper trick works anymore?
@chocolate It's not. That's not a good source of information.
-
A certain mod developer says that "the encryption is being done server-side," but I don’t know what’s actually correct
@chocolate
I doubt it is, there have been several clips floating around of modders and client users still easily able to rip, not to mention there was an exploit where people were using an older version of the game and they were still able to rip, this flaw in the system was quickly patched (IIRC it was within 24 hours actually)Currently investigating ways to bypass VRC's new encryption on VRCA's and VRCW's. Msg me if you have any leads
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login