{"id":9933,"date":"2017-10-17T06:45:34","date_gmt":"2017-10-17T14:45:34","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/10\/17\/news-3706\/"},"modified":"2017-10-17T06:45:34","modified_gmt":"2017-10-17T14:45:34","slug":"news-3706","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2017\/10\/17\/news-3706\/","title":{"rendered":"Porn and Swastikas Have Infiltrated ‘Roblox’"},"content":{"rendered":"

Credit to Author: Emanuel Maiberg| Date: Tue, 17 Oct 2017 14:00:00 +0000<\/strong><\/p>\n

Phil was having a normal evening when his son called him over to the computer. He was playing Roblox<\/i>, a popular computer game similar to Minecraft<\/i><\/a>. Phil’s son said something didn’t look right, that something was wrong with his game.<\/p>\n

At first, Phil (he asked that we change his name to protect his family’s anonymity due to fear of harassment) assumed the game had bugged out and his son needed him to fix it. “I thought I had to do some troubleshooting,” he told me over the phone. What he saw shocked him. “It looked very different, it was very dark. One of the characters in the game had [the word] Hitler written all over him. I looked around and saw nude pictures all over the place.”<\/p>\n

Roblox<\/i> is a big deal\u2014roughly 30 million people play it monthly. At its heart, the game is a playground\u2014a loose collection of servers in which players use Playmobil style avatars<\/a> to navigate through user-generated content. There are simple Counter-Strike <\/i>knock offs<\/a>, pizza place job simulators<\/a>, and natural disaster survival servers<\/a>. Roblox <\/i>even allows creators to make cash off their content\u2014some make as much as $50,000 a month<\/a> selling Roblox <\/i>assets for a virtual currency they can trade for cash from Roblox Corporation<\/a>. <\/p>\n

Roblox <\/i>is billed as a family-friendly game that kids can enjoy. It’s got a number of parental controls, including chat and voice communication restrictions for users under 13.<\/p>\n

Even so, the game is full of Nazi imagery.<\/p>\n

\"\"<\/picture>\n
Image: Roblox<\/div>\n<\/div>\n

What happened to Phil’s son’s Roblox<\/i> game is uncommon but not unheard of<\/a>. YouTube is filled with videos of griefers\u2014people who play the game only to ruin other’s experience\u2014and script kiddies trolling Roblox<\/i> roleplay servers<\/a>, using cheats to disrupt streamers<\/a>, and breaking the rules of popular gametypes<\/a>.<\/p>\n

The “hackers” use premade exploits that use the Lua programming language<\/a> to inject C code into Roblox<\/i>. It allows them to run simple scripts that do things such as spraying hundreds of Hillary Clinton faces off of their avatar, playing obnoxious and repetitive music, or changing the server’s assets into anime porn and swastikas.<\/p>\n

Videos and screenshots Phil took of the hack showed a Roblox<\/i> world gone wrong. I logged onto the server his son was in and saw the Nazi carnage for myself, as well as a link directing me to a Discord channel where users could buy the hack for themselves.<\/p>\n

Phil pushed his son’s Roblox <\/i>avatar around in horror and looked at the giant Reich-style eagles<\/a>, Hitlers, and pornography. Phil had turned the parental controls on\u2014stuff like this wasn’t supposed to happen. He called several other parents and asked them to double check and make sure he wasn’t crazy. He wasn’t, they we.<\/p>\n

“It was Nazi stuff all over the place,” Phil said. “I saw that and reported it. Then [my son] went back on and it was fine. I forgot about it. The next morning he was playing again and then, all of a sudden, it’s dark and scary and Nazified.” Roblox<\/i> customer support sent him an automated response, acknowledging the complaint and promising to take a look.<\/p>\n

\"\"<\/picture>\n
Image: Roblox<\/div>\n<\/div>\n

“We are aware of this hack and are deleting the accounts of those who are using it on the platform,” Brian Jaquet, the senior director of public relations for Roblox Corporation told me via email. “There is no tolerance for these violations of our terms of service. Unfortunately, the software is being distributed via a third-party service and we have requested that the offending Discord server be shut down immediately.”<\/p>\n

Discord took down the channel that advertised the exploited server in late September, but I was able to take a look before it went away. The channel was just a simple storefront selling an exploit for Roblox<\/i> called “Asshurt” for a “donation” of $10 delivered via PayPal or Bitcoin. The exploit gave users the tools to disrupt Roblox <\/i>servers<\/a>. In this way, it played upon one of the game’s great strengths\u2014its open-source nature.<\/p>\n

Users can crack open the game, mess around with its code, and create different game types, avatars, and assets. But that open source philosophy makes Roblox<\/i> prone to hacks and exploits such as Asshurt. Griefers can hop onto a server and, with a few mouse clicks, fill the sky over a Roblox<\/i> world with Swastikas or even play the sounds of screams pulled from the opening scene of Saving Pvt. Ryan<\/i><\/a>.<\/i><\/p>\n

“Open-ended programs like Roblox<\/i> are more susceptible, but the creativity usually shines through much more than the vulgarity,” David Jagneaux, journalist and author of The Ultimate Roblox Book<\/i><\/a>, which includes a chapter aimed at helping parents keep their kids safe in the game, told me via email. “I’d just recommend that parents take a very hands-on approach and interest into what their kids do online. There are hundreds of great games for kids to play online, with or without friends, and it’s the responsibility of both the kids and the parents to seek out the appropriate content.”<\/p>\n

Phil has been doing just that. Over the past few weeks he’s been keeping an eye on his kid’s Roblox <\/i>games. Every time he sees something, he reports it to Roblox<\/i>. Eventually, the company finally gave him a personal reply.<\/p>\n

\"\"<\/picture>\n
Image: Roblox<\/div>\n<\/div>\n

“While we cannot disclose actions taken against players, please be assured that those found to be violating our rules and guidelines will be dealt with appropriately,” a Roblox Corporation representative told Phil in an email. “However, we take seriously all reports of users who are exploiting, hacking or otherwise violating our Terms of Service…all accounts caught violating ROBLOX rules will be moderated. Additionally, reporting does indeed work! We do have moderators online around the clock reviewing reports and helping to keep ROBLOX fun and safe for all players.”<\/p>\n

Discord told me it took down the channel selling the exploit. “Discord does not read or moderate people’s private servers,” Tali Fischer, public relations director for Discord told me in an email. “When we are made aware of any violation of our ToS by a server or individual through a report to our [customer experience reps] or social media or through reporting, we will immediately investigate and take appropriate actions which can include taking down the server and banning the individual user.”<\/p>\n

The Discord server that used to sell Asshurt is gone, but the hack is still in the wild and weeks later Phil is still seeing the Nazi imagery pop up in his son’s games. It’s unlikely to go away entirely anytime soon. <\/p>\n

“As the platform continues to grow…there are going to be more issues that keep popping up and it’ll continue becoming harder and harder to keep things locked down,” Jagneaux told me. “I’d say they’re doing about as good as could be expected thus far.”<\/p>\n

\n