I don't believe this has been fixed as a game seems to have been hit by this vulnerability yesterday https://t.co/70gA7WqVw7. This would mark the fourth time the same person (this person is notorious for finding & abusing this stuff) has done this in the past 3 years.
This is absolutely unacceptable, Roblox. This is EXTREMELY dangerous.
Exploiters have figured out how to execute server-side Luau and modify Datastore - with Loadstring disabled?
This can cause irreparable damage and material loss to thousands of games.
The engineer responsible needs to be fired as they are a demonstrable security risk. A backdoor like this isn't something you "oops!" accidentally ship to production and it hasn't happened for several years.
As developers, we DEPEND on server-side code execution to be completely firewalled from underprivileged clients. The ability to modify Datastore is alarming to say the least. That level of access can bypass gamepasses & dev products, causing material loss. The fact this is happening absolutely confounds me.
#RobloxDev
I noticed there weren’t many places to practice DSA and LeetCode style problems using Luau or Lua, so I built LeetLuau to help myself and others improve their problem solving skills
Check it out: https://t.co/cQwx5ftxG8
Pandemonium was an infamous chaotic fighting game made by ICE128 around Spring 2008. The game was very unique for its time, as it had four arenas with their own quirks. Many Roblox staff had the game favorited at the peak of its popularity.
The game was relatively popular for about a year before dying down, eventually closing in 2013. Sadly, the game is lost. The game infamously has barely any footage or screenshots of it.
The Orange and Green arenas can be seen in Shedletsky's video "Explore ROBLOX" for only a few split seconds, and the Orange arena has been spotted sprinkled in the background of other Roblox videos.
A save file of this game would allow it to be properly emulated to see it in action. Unfortunately, ICE128 does not have access to it anymore, nor the files for it.
PSA!
Roblox has been enforcing a huge automated banwave which has been wrongfully terminating users with an enforcement ban, which is a ban that poisons all your accounts. The ban notes are usually for "avoiding an enforcement action" and this has been ongoing since 2024.
People are getting AI-moderated on alts which then bans all their other accounts.
Automated appeals are instantly rejecting it, and none of the bans even state what specific alt account caused the enforcement ban.
This is incredibly unfair and unprofessional. This automated system shouldn't be a thing. Roblox, please stop utilizing automated systems like this if they're incredibly imperfect.
Several of my friends, including @fededoesstuff who has helped me with researching the 2012 hacks and also runs a place archival account, also got caught up in this ban and the reason is incredibly dumb, which I will post about after this post.
The instant appeal rejection as well as a failure to state what account exactly is causing the ban is a problem.