Prevent outside users grabbing IPs.
complete
SapphireSouls
VRChat's safety system falls through horrendously when blocking a malicious user leads to them grabbing my IP and launching a DDOS attack on me out of spite.
I understand there's other posts on the issue of DDOS'ing, but my request specifically is that IPs are somehow encrypted or 'masked' once users are connected to VRChat.
Log In
Fax
complete
Since 2019, we've made changes that make getting another user's IP more difficult. For example, we use a different system for transmitting voice data.
SubsonicJackal
Or you can just not play in public instances if you are worried about getting DDoS'ed. Not an optimal solution, but if you are paranoid your only other option is a VPN. This is an issue with Steam Networking, not VRChat itself.
NayuVRC
FurriestWolf
NayuVRC: Its all fun and games until some stranger on VRChat named BanWave thinks your username is too furry so he grabs your IP, says your irl location aloud for everyone to hear, then DDoSes you for some sort of sick joke.
This was just yesterday, mind you.
MrTing
FurriestWolf: This is just more reason why you should be investing in a VPN, rather then putting the blame on the developers that have nothing to fault for their infrastructure working properly.
SapphireSouls
NayuVRC: I shouldn't have to fork out for a decent VPN just because there's a security hole in a game. Free VPNs are garbage unless you wanna lag around everywhere.
a
aytimothy
NayuVRC: Not sure if tupper knows, but VPN = more hops = more lag, and sometimes protocols aren't supported, which means no connection. AFAIK, this could be fixed with a client-server architecture, but I doubt VRChat's going to do that. In that case, there's nothing really you can do.
You're just as subseptable here to a DDOS attack as you are torrenting (in fact most client torrents display IP addresses in a way you can just copy-paste it into a DDOS service). In short, it's a by-design problem, and don't think it should be fixed. All the user can do is avoid malicious actors and VRChat adding more client-side execution security (the last thing we want is remote execution), of which VRChat (unfortunately) has a higher concentration of.
Choxy ~💙~
FurriestWolf: Yup basically VRChat in a nutshell anymore. VRChat getting them kickbacks from people buying vpn's amiright?
Laser
I bet they are trying this but doing so isnt easy and likely adds a lot of latency/complexity..
GotoFinal
isn't vrchat p2p game if I remember correctly? and then they would need to proxy everything themselves and that would probably be both expensive and would increase ping
狐小百合
I've seen this happen to some friends in our VRChat group, the culprit was even bragging about how they could do it out loud.
ImTiara
Just use a client. The devs arent doing shit when it comes to essential security so people have to do it themself instead
GotoFinal
ImTiara: I don't think client will hide your IP, unless you use VPN too
ImTiara
GotoFinal: Spoofing the steamid aka setting it to 0 will prevent others from grabbing your ip. Using the oculus version of vrchat has the same effect or running it without steam in the background
FurriestWolf
ImTiara: you can't change your steamid unless you switch accounts
BloodWork
mostly a Steam Issue and not VRChat
Artorikus
They can DDOS us for realh?! Omg...
YeetusTheFetus
I 100% agree with you but sadly the devs will never listen. They have proven to be incompetent in the recent months and that also makes it seem more like a dream that they will ever do this.
Load More
→