VRChat added VRCA (?maybe VRCW too) protection
-
@DeepDishBussy It's all started in 2022, not just now. When they rolled out EAC many people concerned that some kind of marketplace inside VRChat is now imminent. Now we have it, along with other useless payed shit. RipperStore shutdown without any excuse year later after implementation of EAC is also kinda suspicious, guys prob got paid for it.
This post is deleted! -
[[topic:post-is-deleted]]
@DeepDishBussy I was always confused about this bit of history. I remember lots of people talking about Ripperstore being shut down, way back when but what is this site we're on rn? A revival? Some side site? since it says forum
What differentiates it from Ripperstore in the past -
@DeepDishBussy I was always confused about this bit of history. I remember lots of people talking about Ripperstore being shut down, way back when but what is this site we're on rn? A revival? Some side site? since it says forum
What differentiates it from Ripperstore in the past@Alisan Ripperstore in the past was not a forum. Hence why the full name of this site is "Ripperstore Forums". It used to be a huge library of logged avatars that were uploaded to VRChat. You could download them using credits, and convert them through a service that RipperStore originally provided. It was way different from what it is now.
-
This post is deleted!
-
[[topic:post-is-deleted]]
@StinkerGuy115 Good one. But I doubt eventually it will shutdown. This reminds me of what VRCPirate does in past, they shutdown their avatar downloader because VRChat staff trapped their bot accounts.
I'm not profressional technician, leave your own mind, original sentences "the bot grabs the avatar info from vrchat server anyway, they can easily catch you up by manually use your bot and put an invalid/trap avatar id" -
Well just adding in that i logged into vrchat and i see "The security checks on this avatar have failed and it cannot be selected." Either its a bug cause their servers have been doing down and theyre trying to implement the new market place...or vrchat might be killing off some models who knows.
Im leaning to it being a bug im just putting this issue out here for people who future google this issue.
-
hope we can find a work around..
-
@qwwee Only "bypass" that's known is having a modified client. People around say you can just "intercept" the model during the download process. Its been confirmed here and on other places, as well as recently on a VRChat forum.
https://feedback.vrchat.com/bug-reports/p/the-new-vrca-client-side-encryption-can-still-be-bypassed
-
I am hesitant at sharing what I know as I am sure the devs watch these forums but I assume it is safe to at least share this:
-
everything must be decrypted before it get's passed to the Unity Engine. Otherwise it is just gibberish. Find out the functions/classes called or the memory address space used for the byte stream and bam you got it.
-
VRChat must use a fast encryption/decryption (vrc_fast_crypto.dll ???) method otherwise players would notice a lot of lag when loading models. Fast methods tend to mean less secure methods.
2a. Think about it, the model is downloaded unencrypted for a reason, to just download an unencrypted model then encrypt it then decrypt it is slow, this leads me to one conclusion: its for the Unity Engine. The encryption is just for your local cache, this allows for fast rendering and prevention of lag. In a hex editor, compare the __data file that is stored in the Unity/Temp folder that gets immediately deleted vs the __data file in the VRChat/Cache folder. You'll notice something
-
-
This post is deleted!
-
I am hesitant at sharing what I know as I am sure the devs watch these forums but I assume it is safe to at least share this:
-
everything must be decrypted before it get's passed to the Unity Engine. Otherwise it is just gibberish. Find out the functions/classes called or the memory address space used for the byte stream and bam you got it.
-
VRChat must use a fast encryption/decryption (vrc_fast_crypto.dll ???) method otherwise players would notice a lot of lag when loading models. Fast methods tend to mean less secure methods.
2a. Think about it, the model is downloaded unencrypted for a reason, to just download an unencrypted model then encrypt it then decrypt it is slow, this leads me to one conclusion: its for the Unity Engine. The encryption is just for your local cache, this allows for fast rendering and prevention of lag. In a hex editor, compare the __data file that is stored in the Unity/Temp folder that gets immediately deleted vs the __data file in the VRChat/Cache folder. You'll notice something
This post is deleted! -
-
This post is deleted!
-
@qwwee Only "bypass" that's known is having a modified client. People around say you can just "intercept" the model during the download process. Its been confirmed here and on other places, as well as recently on a VRChat forum.
https://feedback.vrchat.com/bug-reports/p/the-new-vrca-client-side-encryption-can-still-be-bypassed
@StinkerGuy115 I would like to add you on Discord to learn more details, if thatβs alright with you.
-
Oh my I did not realize I got this popular >A< dang. Yes I figured out how to rip models again. No I am not telling you how to do it (devs are lurking).
I might make a thread so people can request avatar vrca files by putting an avatar ID and i put the vrca out, but then that might get me into a lotta trouble sharing around avatars vrchat sells lol. I will think about it. I dont rip to redistribute assets or make a profit, I do it cause I like tinkering with stuff and it helped me learn how to make avatars.
I was motivated to do it again cause theres so many broken models on vrchat that I fix up/improve and upload to my account. I spent years learning unity, the VRChatSDK, and other computer junk to do what I do lol.
AND IM NOT GIVING PEOPLE MY DISCORD I DONT KNOW YOU PEOPLE
-
Oh my I did not realize I got this popular >A< dang. Yes I figured out how to rip models again. No I am not telling you how to do it (devs are lurking).
I might make a thread so people can request avatar vrca files by putting an avatar ID and i put the vrca out, but then that might get me into a lotta trouble sharing around avatars vrchat sells lol. I will think about it. I dont rip to redistribute assets or make a profit, I do it cause I like tinkering with stuff and it helped me learn how to make avatars.
I was motivated to do it again cause theres so many broken models on vrchat that I fix up/improve and upload to my account. I spent years learning unity, the VRChatSDK, and other computer junk to do what I do lol.
AND IM NOT GIVING PEOPLE MY DISCORD I DONT KNOW YOU PEOPLE
@StinkerGuy115 you mentioned avi ID, does that mean you are able to do it while not in the same place ingame?
-
I am hesitant at sharing what I know as I am sure the devs watch these forums but I assume it is safe to at least share this:
-
everything must be decrypted before it get's passed to the Unity Engine. Otherwise it is just gibberish. Find out the functions/classes called or the memory address space used for the byte stream and bam you got it.
-
VRChat must use a fast encryption/decryption (vrc_fast_crypto.dll ???) method otherwise players would notice a lot of lag when loading models. Fast methods tend to mean less secure methods.
2a. Think about it, the model is downloaded unencrypted for a reason, to just download an unencrypted model then encrypt it then decrypt it is slow, this leads me to one conclusion: its for the Unity Engine. The encryption is just for your local cache, this allows for fast rendering and prevention of lag. In a hex editor, compare the __data file that is stored in the Unity/Temp folder that gets immediately deleted vs the __data file in the VRChat/Cache folder. You'll notice something
@StinkerGuy115 i believe in unity/temp they also get encrypted same like vrchat/cache folder? i know what you mean but i do not see any difference
-
-
Oh my I did not realize I got this popular >A< dang. Yes I figured out how to rip models again. No I am not telling you how to do it (devs are lurking).
I might make a thread so people can request avatar vrca files by putting an avatar ID and i put the vrca out, but then that might get me into a lotta trouble sharing around avatars vrchat sells lol. I will think about it. I dont rip to redistribute assets or make a profit, I do it cause I like tinkering with stuff and it helped me learn how to make avatars.
I was motivated to do it again cause theres so many broken models on vrchat that I fix up/improve and upload to my account. I spent years learning unity, the VRChatSDK, and other computer junk to do what I do lol.
AND IM NOT GIVING PEOPLE MY DISCORD I DONT KNOW YOU PEOPLE
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better π
Register Login