About That “Security Update” Last Week…
Last week, we released a very small patch that only had two lines in the notes:
Safety and security improvements.
The camera had a bug where the menu buttons zigged when they should’ve zagged. We’ve rectified the situation.
So… what was that first one about?
This was a change that we rolled out specifically to combat avatar ripping.
We now validate much more strongly that only a verified VRChat client can download avatar bundles, and only when it is in an instance with somebody wearing that avatar. This allows us to determine when a download is coming from an unauthorized source and block it. This has been highly successful, and many ripping methods now fail entirely.