Please add server-side validation
This is definitely something we're aware of, and are looking into.
@Tupper - Community Manager: If VRC would validate the client and prevent modified clients from entering the servers that would solve a lot of problems. Same goes for server side hard limits on avatar components.
They also can kick anyone when have that modified client. I experienced this today - my friend just got kicked 2-3 min after he blocked a cheater, without even voting (no voting appeared at all), and cannot join that public world for hour or so. Cheater also can see peoples who blocked him - i heard, he is speaking of this. He says hes not only remain to see avatar after being blocked, but also see special flag on top of nametag of that person.
Do something, or soon we all end up in private worlds...
@Tupper - Community Manager You should make sure to NOT send any user IP addresses in any way within packets (not confirmed) over the network.
Also no floodable commands that could let someone with a modified client permanently kick someone without administrative permissions validated by server side. @Alex77 is right. A server side validation is required.
It should not be that hard to check if the user is admin before executing a command.
This has been an ongoing problem for a long time and there is a canny posted about it still being a problem and has gotten out of control due to people leaking the client so people can abuse it as much as possible or when someone blocks them or calls them edgy. It is really annoying and hoping it gets patched next update and not sitting 3-4 updates late.