VRChat added VRCA (?maybe VRCW too) protection
-
So... Yea, they added an encryption or custom method to load avatar bundles.
So usual methods of using AR or SARS doesn't work anymore.
What do you all think about it? (also share any news if you have any)@Real-Visitor
do not feel tired get up and start working on it soon you will success in that -
As far as I can tell from a few days worth of data I have collected, vrchat is using a client side AND server-side, session based encryption key. (Possibly based on the cookie used to authenticate the client with vrchat, and vrchat's servers providing a decryption key based on the files hash.)
The reasons I came to the conclusion:- The same world/avatar file having wildly different data but the same folder ID structure between downloads.
- vrchat will reuse the same cache files, but not after clearing the cache.
- vrchat will actively authenticate the files and verify the hash on the server before sending a decryption key. (Will not function in offline testing mode, but avatars uploaded yourself on your own account apparently function and can be used offline.)
-
As far as I can tell, you cannot decrypt any of the assets that are already encrypted because of the fact that the assets may be tied to a session id. (They have different encrypted data for the same exact file, but different session. I may be wrong, the __info file may be tied to it.)
The only way forward is to have some sort of mod that prevents vrchat from encrypting the cache, BUT you have to bypass any security features to keep from being detected.I suspect that vrchat is utilizing session based encryption and using something in the __info file to encrypt it as there is a large numerical number that changes each download.
-
Again, or just get avatars the normal way instead of putting so much effort into stealing avatars from a user in game lol
@Visaeres so real, stealing people's personal edits is weird anyway. and yeah yeah, ripping site, im aware. i obtain assets for free on here, or avatars that were sold to the public, but not people's personal work, just stop being lazy, learn how to use blender, and make your own edits with the assets you obtain lol
mwa κ°α’. .α’κ±βΛβΉ
-
@Visaeres so real, stealing people's personal edits is weird anyway. and yeah yeah, ripping site, im aware. i obtain assets for free on here, or avatars that were sold to the public, but not people's personal work, just stop being lazy, learn how to use blender, and make your own edits with the assets you obtain lol
-
@Visaeres so real, stealing people's personal edits is weird anyway. and yeah yeah, ripping site, im aware. i obtain assets for free on here, or avatars that were sold to the public, but not people's personal work, just stop being lazy, learn how to use blender, and make your own edits with the assets you obtain lol
@c0tt0nc4ndy Can i have your personal works? I'm too lazy to make anything.
-
@Visaeres so real, stealing people's personal edits is weird anyway. and yeah yeah, ripping site, im aware. i obtain assets for free on here, or avatars that were sold to the public, but not people's personal work, just stop being lazy, learn how to use blender, and make your own edits with the assets you obtain lol
@c0tt0nc4ndy i agree with you guys re: personals but man do i already miss ripping public versions of bases i want to use lol. and i was just procrastinating grabbing old avatars off my own account so i could reuse the textures and remake them but without my ex's name on them... waited like a day too long. shit sucks.
-
Right? Itβs one thing to rip models that are overpriced or sold by people that steal assets but itβs another thing to rip customs/edits from the game itself. If anything, Iβm actually glad VRChat finally put an halt to it. The only bad thing is they probably did this because they intent on having an avatars market in-game or something, outside of the pre-existing currency thing they released a while back.
-
@c0tt0nc4ndy i agree with you guys re: personals but man do i already miss ripping public versions of bases i want to use lol. and i was just procrastinating grabbing old avatars off my own account so i could reuse the textures and remake them but without my ex's name on them... waited like a day too long. shit sucks.
@zeta.zaza I am extremely lucky I predicted this would happen so I ripped every single personal model I've ever used for an extensive period of time, so I'm happy because now if I make personals they can't be ripped lol. Not like it was a problem before but its semi goated. Hate that the public can't really use public models to learn from though but honestly coming from an AVID TDA user please anyone reading this just do yourself a favor and switch to Booth. Learning, getting assets, and putting them together is so much more simpler and less stress than trying to repair someones mistake or a broken base for an avatar you really aren't gonna main that much lol.
-
@zeta.zaza I am extremely lucky I predicted this would happen so I ripped every single personal model I've ever used for an extensive period of time, so I'm happy because now if I make personals they can't be ripped lol. Not like it was a problem before but its semi goated. Hate that the public can't really use public models to learn from though but honestly coming from an AVID TDA user please anyone reading this just do yourself a favor and switch to Booth. Learning, getting assets, and putting them together is so much more simpler and less stress than trying to repair someones mistake or a broken base for an avatar you really aren't gonna main that much lol.
-
@Hardware98 Not the greatest advice lol
-
@Visaeres You tell me a world where TDA isn't hard as fuck to repair and I'll give an open ear lol.
-
@Hardware98 Wasn't referring to that part really, but no need to be rude lol
@Visaeres Not being rude, just asking what you meant. I mean I know I probably went on a tangent but I always do that shit if you know me well lol.
-
A lot of people playing the morality card here can GTFO to be blunt, this is a ripping forum and just because you announce "yeah I know it's a ripping forum" doesn't change anything, we are here to rip I don't care what it is that's being ripped. We are here to do it period.
Currently investigating ways to bypass VRC's new encryption on VRCA's and VRCW's. Msg me if you have any leads
-
A lot of people playing the morality card here can GTFO to be blunt, this is a ripping forum and just because you announce "yeah I know it's a ripping forum" doesn't change anything, we are here to rip I don't care what it is that's being ripped. We are here to do it period.
-
I found something when messing with cache, i not sure how to explain, what i did was joining world, and deleted cache, when initializing it loads? Maybe vrchat loads the cache on something
And another discovery i found that every end of encrypted __data has lot of @@@@@@@@@ spam while the not encrypted version has none, maybe it lead to somewhere, i look into this more later, will update if found anything
I'm bad at understanding english word
I fix .vrca/.vrcw stuff for free and for fun! Depending on file, every outcome and vary might be different than the original avatar has due to the toggles and much more, send me a pm if you need an avi that need to fix or cracking a password locked avatar or send me .vrca file or through my pms and i will extract/fix them for you!
request is semi-open, only on unencrypted __data file aka .vrca or .vrcw
-
This words only suits Booth avatars
I agree with those viewpoints of some who suggest people modify the avatar by themselves. Most main assets, like costumes and avatars, can be easily obtained from this forum and other similar forums.
The only reason to continue ripping Avatars is probably learning how others' works achieve some very cool features n attractive looks.
Mostly avatars are like building Lego using a bunch of prefabs, maybe kinda suffering charge by others but technically is legit cuz you remake it. If its sources/prefabs/avatar are mostly from Booth, the creator is also a modifier rather than a creator who owns the 100% copyright.
Hv no urge to rip people's works now, ugh so when u hv an access to get most assets to remake a copy work similar to what u like.Why not remake one? clean and reasonable.
They actually won't have the avatars' total copyrights, how do u claim ur modified avatars and u hv 100% copyright? The asset shops won't transfer all their copyrights to the purchaser, they only have use of rights(may have commercial rights)
Some piracy shops even sell final avatars(modified avatars) and those breaking the Terms of Use of Avatar/AssetsNow you finally have a reason can defend remaked avatars urself now.
Tbh does it still have the meaning to rip other work now? Assets leak everywhere and are even being sold at lower price in the piracy market and shared.
Since you can rip and fix, that surely can tell you don't have skill issues to remake one.Free sharing is a costly charity.
Once sharing becomes others' resale, that's a monopoly.I respect every creator and any takedown request. Please contact me using the forum function first before you decide to do anything that exposes me on social media. Thank you.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better π
Register Login