Kids are trying to DOXX IPs and other

[LucyCookie]

I have screenshots of the two people that said they were going to doxx me. When I went up to them they tried to play it off like they weren't going to actually do that. Like any other social media, game or platform, they should have their accounts banned for trying to doxx me. Who knows if they have already done this to others already. Not sure how to add screenshots here to give you their vrchat information on who they are.

[Bunkerotter]

Originally posted by Trylk248:

https://feedback.vrchat.com/open-beta/p/eac-in-a-social-vr-game-creates-more-problems-than-it-solves

That has literally nothing to do with the issue.

OP: The only way to dox someone on VRChat would be after you yourself have given out information. VRChat doesn't use P2P connections anymore (IIRC since the release for quest, which is over 2 years ago).
If you still want to take action, contact VRChat Support on their webpage.

[OPERATOR]

Originally posted by Bunkerotter:

Originally posted by Trylk248:

https://feedback.vrchat.com/open-beta/p/eac-in-a-social-vr-game-creates-more-problems-than-it-solves

That has literally nothing to do with the issue.

OP: The only way to dox someone on VRChat would be after you yourself have given out information. VRChat doesn't use P2P connections anymore (IIRC since the release for quest, which is over 2 years ago).
If you still want to take action, contact VRChat Support on their webpage.

Also possible if you have videoplayers that allow risky urls.

[OPERATOR]

Originally posted by LucyCookie:

I have screenshots of the two people that said they were going to doxx me. When I went up to them they tried to play it off like they weren't going to actually do that. Like any other social media, game or platform, they should have their accounts banned for trying to doxx me. Who knows if they have already done this to others already. Not sure how to add screenshots here to give you their vrchat information on who they are.

Most likely just a very angry person, most people can't go that far or can do minimal things like crashing, unless there is another way to leak but as of current there isn't any really known public ones besides video players, so it's nothing to really worry over, I'd recommend if you record your sessions sometimes just in case you run into similar situations you can properly report them.

[Bunkerotter]

Originally posted by OPERATOR:

Also possible if you have videoplayers that allow risky urls.

if you have a webserver setup for it yeah, but at the same time, IP addresses aren't privat information (hence why they are called public (facing) IP address).

[OPERATOR]

Originally posted by Bunkerotter:

Originally posted by OPERATOR:

Also possible if you have videoplayers that allow risky urls.

if you have a webserver setup for it yeah, but at the same time, IP addresses aren't privat information (hence why they are called public (facing) IP address).

You do not need a webserver, this can be done in base game on any world that has a videoplayer (turning off risky urls saves you however) , and even if its not "private info" some people like to keep that on a notch when possible, and it's okay to want to do so.

[Bunkerotter]

Originally posted by OPERATOR:

You do not need a webserver, this can be done in base game on any world that has a videoplayer (turning off risky urls saves you however) [...]

You still need something that responds to the http/https request that gets made by the video player and log it. The easiest way to do that is with a Webserver, you could also use a python script or something. But you have to have something setup and publically accessable for it to work.

and even if its not "private info" some people like to keep that on a notch when possible, and it's okay to want to do so.

Sure, that's what proxies are for.

[OPERATOR]

Originally posted by Bunkerotter:

Originally posted by OPERATOR:

You do not need a webserver, this can be done in base game on any world that has a videoplayer (turning off risky urls saves you however) [...]

You still need something that responds to the http/https request that gets made by the video player and log it. The easiest way to do that is with a Webserver, you could also use a python script or something. But you have to have something setup and publically accessable for it to work.

and even if its not "private info" some people like to keep that on a notch when possible, and it's okay to want to do so.

Sure, that's what proxies are for.

You just need a simple grabber link, *would link but not trying to get in trouble cough cough* it's really not that hard, it returns all the IPS connected to that server at the time as it acts as them clicking on a link.

As for proxies, VRCHAT actually blocks most proxies now and the point that OP was making that he doesn't like that they threatened to dox him or whatever, your point that

"The only way to dox someone on VRChat would be after you yourself have given out information. VRChat doesn't use P2P connections anymore (IIRC since the release for quest, which is over 2 years ago)." is half wrong, it is very much possible to steal that information, but the P2P played a major role, but mostly that was due to a issue with steams P2P having a ip leak which eventually did get patched after vrchat eventually updated their systems.

Also 80% sure vrchat does still use P2P and client sided authorization (especially the latter), it's why "masters" of servers still exist, and why there are a select few people can abuse more things when they are a master of a instance. (Most dangerous case being up heaved admin controls because most of the checks are done client sided) there is not much security besides most methods of ip leakage being plugged.

You are half correct and half wrong.

[Bunkerotter]

Originally posted by OPERATOR:

Also 80% sure vrchat does still use P2P and client sided authorization (especially the latter), it's why "masters" of servers still exist, and why there are a select few people can abuse more things when they are a master of a instance. (Most dangerous case being up heaved admin controls because most of the checks are done client sided) there is not much security besides most methods of ip leakage being plugged.

All traffic goes over the photon servers and amazons CDN servers (for the assets). The "master" in an instance is not the host in a client server network, but rather the master in a bus network. Basically the master has the states saved of all the udon stuff, and people in an instance synchronize their local playing world with his state. That's the reason why a master can and does change without interruption after he leaves the instance.
I don't know if you create worlds, but if you do, you would see that yourself when you create synchronized objects or variables, etc.

You are half correct and half wrong.

you too.

[OPERATOR]

Originally posted by Bunkerotter:

All traffic goes over the photon servers and amazons CDN servers (for the assets). The "master" in an instance is not the host in a client server network, but rather the master in a bus network. Basically the master has the states saved of all the udon stuff, and people in an instance synchronize their local playing world with his state. That's the reason why a master can and does change without interruption after he leaves the instance.
I don't know if you create worlds, but if you do, you would see that yourself when you create synchronized objects or variables, etc.

That's funny.

[LucyCookie]

Could we not argue on this topic please.

[OPERATOR]

Originally posted by LucyCookie:

Could we not argue on this topic please.

Yep sorry!

Originally posted by OPERATOR:

Originally posted by LucyCookie:

I have screenshots of the two people that said they were going to doxx me. When I went up to them they tried to play it off like they weren't going to actually do that. Like any other social media, game or platform, they should have their accounts banned for trying to doxx me. Who knows if they have already done this to others already. Not sure how to add screenshots here to give you their vrchat information on who they are.

Most likely just a very angry person, most people can't go that far or can do minimal things like crashing, unless there is another way to leak but as of current there isn't any really known public ones besides video players, so it's nothing to really worry over, I'd recommend if you record your sessions sometimes just in case you run into similar situations you can properly report them.

Is prob the best scenario for your specific issue!

[LucyCookie]

Originally posted by OPERATOR:

Originally posted by LucyCookie:

Could we not argue on this topic please.

Yep sorry!

Originally posted by OPERATOR:

Most likely just a very angry person, most people can't go that far or can do minimal things like crashing, unless there is another way to leak but as of current there isn't any really known public ones besides video players, so it's nothing to really worry over, I'd recommend if you record your sessions sometimes just in case you run into similar situations you can properly report them.

Is prob the best scenario for your specific issue!

Thank you