VRChat adds Easy Anti-Cheat, community not happy but Linux and Steam Deck work fine

Good to hear it still works on linux.

To be fair, modified clients always were violating the TOS, afaik. There can be good reasons to have a modified client, but a lot of nasty things were done using these as well. Plus VRChat had a massive issue with people exploiting things in many ways that ruined the experience for a lot of people. I've been away from VRChat for a while, but I guess that didn't get any better.

So I absolutely can see why they did it, if it is the best way to do it and if it will be of any help, I can't say.

I've seen a few testimonies, it appeared most public lobbies were just unplayable because of grieffers who just crashed other clients (likely with modified clients) but this allowed people to make security mods which prevented this kind of stuff. Overall it seems VRChat just killed the mods (and the modding community), let's see if at least this is worth it I guess.
At least it still works on Linux, yay.

So, it sounds like initially the developers were accepting and trusting of mods to the client and such giving people some freedom of choice. However, people abused that trust and used it to harass - in multiple ways: abuse, account stealing, crashing games etc - innocent players so in order to protect their game and players they had to put an anti-cheat/mod in place?

In my view the players who were running with modified clients and harassing people got what they deserved. Should have just kept it civil and not abused the developers trust/acceptance.

Honestly, from what has been said / what was happening this sounds reasonable to me. Shouldn't have abused it..

I say this as someone who used to make video game mods, and who regularly mods my games. However, I do it offline as to not interfere with others peoples experience.

My view pretty much is, and always has been: Sure go ahead and mod your games, cheat and have fun. But keep it offline and don't use it to cheat or abuse other players.

In this case: Blame the people running modified clients and abusing people. Not the developers.


Last edited by BlackBloodRum on 27 July 2022 at 12:00 pm UTC

QuotePlus, they explained that every month "thousands" of people have their accounts stolen due to these modified clients. So it is a big issue

So let me get this right, they have an issue with either their servers or client that permits someone with a mod to be able to seemingly steal login credentials and rather than fix the underlying problem, they decide the much more rational solution is to add an anticheat..... WHAT?

So VRChat Inc. buyout incoming by Meta or something else or it become, little by little, Epic Online Services/Epic Game Store (kinda) exclusive.
Account/credential stealing, client crashing server and clients, malicious scripts/mods... what's going with net code/online part of this VR app?

So there's a bunch of people wandering around being total assholes just because, and that's why we can't have nice things. Not a new story.

Wait, so their servers don't validate client data?

Reminds me of the xkcd Exploits of a Mom...

Oh my... The backslash is HUGE! So huge that VRChat is hardly an important game anymore.
https://steamcommunity.com/id/Nursie_Sama/recommended/438100/


Last edited by mr-victory on 27 July 2022 at 3:05 pm UTC

Hmm, I had heard the news second-hand and was wondering why the heck a chat app needed anti-cheat. Seems like a really dire situation.

Of course, there must be a better solution so that people can use mods - ideally a better infrastructure so that people can use whatever compatible client without causing the problems, but if they just implement a modding system that is comprehensive enough it should be alright. But I can see why they needed an immediate solution, even one with severe downsides.

Quoting: BlackBloodRumIn this case: Blame the people running modified clients and abusing people. Not the developers.

I gotta disagree. The real problem is server side. They don't check for abusive behaviors in the clients? Or have any decent moderation to remove bad actors? IMO the client level is the worse place to be dealing with the problems. In short short client side hacks are always the result of lazy poor game design (maybe in some cases bandwidth saving).


Say someone's using a client to see through walls... Umm ok so why did the game transmit what was behind the wall to the player before he was supposed to be able to see it. Or walking through walls (again the server should be able to note when a player is able to get somewhere he's not supposed to).


Bottom line is, Anti cheat software is intrusive, and it's always going to be bypassed. General rule of thumb in security is "Always assume the client is evil" and... in short. Client side security is guaranteed to fail. At the end of the day actual cheaters can usually get past easy anti-cheat.


Secondly no ones mourning the actual abusers who lose their mods and clients, but the non abusers who wanted or needed them. IMO the inevitable result is going to be within a week or 2. the abuse rate will be similar to what it was before... but legitimate users will be down due to lack of clients. I've seen no shortage of games that try to slap on the easy anti-cheat bandaid, but not do anything else, and the end result is pretty universally malicious actors find a way around easy anti-cheat.