Ethan Barron•3w ago

Client-Side ignoring of disabled properties on RealtimeTransforms

Hackers are able to locally enable something like sync scale and have their scale replicate despite the fact it was explicitly disabled on other clients, and obviously they could do something like resizing a random object to be massive so they cover the whole map or whatever

2 Replies

Ethan BarronOP•3w ago

~~Had a look at RealtimeTransform's code and it seems like this explicitly shouldn't happen which is a bit bizarre, not sure why it is but maybe it's something on my end and I can look into it~~ was looking at the wrong thing, those only dictated whether the owner synced the properties

maxweisel•3w ago

This is a good call. @NormalMark will you write up a PRD task for this? I believe right now we synchronize the setting to all clients when the owning client changes it. Could be worth adding an advanced setting to disallow changing the Enable/Disable sync checkboxes at runtime.

Client-Side ignoring of disabled properties on RealtimeTransforms

Did you find this page helpful?