It’d be a very complex process to determine who can be considered “qualified” for such a thing, so I don’t think it’s currently feasible, and sadly I don’t see anything like it happening in the near future as something somewhat officially/officially supported by Roblox. I believe having experienced exploiters trying to break your game is the best way to find flaws, because there’s always going to be something lurking somewhere you haven’t checked. I definitely support the idea and would be all for it.

It’s definitely a grey area in whether it’s allowed to hire and/or pay a person to do such, so I’d definitely suggest steering clear of it until there’s an official statement regarding it. There are a few cases of white/grey hat exploiters being somewhat employed by game developers to find flaws in their games. Especially when the common robbers that actually have malicious intent use those tools to break into it.Īnd given the fact that the idea was based around using real exploiters and hackers, creating a custom executor for them is out of topic since one of the reason behind the concept is to also be kept up to date with the tools they are using, understand what they can and cannot do, the more you understand the other end of the spectrum, the easier it is to uphold yours. If I’m going to hire people to break into my house and compensate their success with money given the condition that they explain thoroughly how they did it, it simply isn’t a good idea to rob the tools they would usually use from them. The idea revolves in building a system that will,ġ ) Use real Exploiters and Hackers by defaultĢ ) Encourage people to try and break the security for the bountyĤ ) By default, this will attract more knowledgable exploiters to come and break the securityĥ ) By default, each bypass will make the security stronger than beforeĦ ) Be kept up to date with the tools/methods exploiters are using at all time If you’re hiring real exploiters, they’re probably going to use their Lua VM exploits anyway (like Synapse X), instead of whatever command bar thing you can provide. Again, I am not saying that this is a MUST for all roblox developers, but for those of us who do care this much in regards to security, are we allowed to create and act upon this idea? Basically what I’m wondering is what are the rules on this for us developers, are we allowed to somewhat adopt and act upon this idea for our game securities as well?Īnd if it is not allowed towards random exploiters, are we allowed to do so with boss white hat owners? Because I do strongly believe that this is a very healthy method in handling security. Now of course I am just an atom as compared to them, and we know Roblox themselves work closely with white hats to improve their security. I’m sure some of us are aware that big companies such as Microsoft does this to create a formidable security, as you can read here. And it will easily filter out the 99% of common exploiters who knows only basic lua while they attempt to cheat in games, not to mention the ones who does not even know lua / understand client-server relationship. I’m well experienced in that debate, I am simply wondering if this would be allowed according to roblox rules.īasically the idea is to have security in my game that is constantly tested by a competent group of exploiters / white hats who will attempt to destroy the security everyday, the bounty is simply there to encourage people to try and break the anti exploit and by nature, the longer this goes on for, the better it is for the security.

As the topic says, I am wondering if it is legal according to Roblox Rules to invite exploiters to a security game test, and pay them robux/usd if they make a harmful bypass under the conditions that I am informed of the vulnerablity that they exploited to do so.ĭo note that I am well aware of the vulnerabilities of the client and the complexities in securing it including the fact that it is impossible to completely secure the client, but I do also believe that making exploiting more difficult for the general exploiters is better than making the game fully vulnerable.

Roblox hack clients 2019