Invite/friends+ instances are not private.

[MeowCats]

This seems to be a bug, or is this intended behaviour? when choosing a world/instance it just lets me enter those, and others can enter invite/friends worlds. Often i keep running into very rude people, losing their mind because i accidentally entered an instance which should've been not accessible.

[SapphireSouls]

Sounds like a bug?


Bearing in mind that Friends+ just means if you have a friend there, you can enter. So Friends+ worlds slowly become more accessible as more friends join.

I could make a friends+ world, invite 1 friend, suddenly not only is MY entire friends list able to enter, but so is his. And if another friend joins, their whole friends list can now enter, and so on..

But, there's also just 'Friends' which only lets YOUR friends join, not friends of friends of friends of.. you get the idea.

Are you sure you actually got into an Invite Only world without an invite? If so, definitely report it on the VRChat Canny. https://vrchat.canny.io/

[MeowCats]

It is definitely a bug, because anything other than public should mean nobody else but those in the friendslist, or friends of friends/invite can enter those.. atleast from what i know.

I'm talking about random public world instances (inside the "Worlds" tab) where it clearly shows either "public" or "invite+" for example. It lets me join those without invite, and dropping a portal is greyed out. I never intended to enter those private instances, it was just my fault for not checking the small font for "Public" or "Invite+".

This should affect everyone, i'm surprised nobody has mentioned this.. or even noticed. Does this not happen to you at all? definitely going to report this bug.

Edit: Nvm, there are people experiencing this same bug on the canny site.. from mid 2018 though. https://vrchat.canny.io/bug-reports/p/friends-instances-are-still-not-secure-due-to-world-listing-api-endpoint
or https://vrchat.canny.io/bug-reports/p/private-world-showing-as-public
I do not use any modified client whatsoever, just the standard client downloaded from steam.

Unfortunately my browser is acting up and currently doesn't let me log in on this canny site.