News for hackers. Stuff that matters.
Re:VRchat bans mods, embraces EAC by hinkley on Tuesday July 26, 2022 @12:32AM (#32234264)
I’d also invite anyone interested in this space to look at both the rule for World of Warcraft addons and their evolution over time. Many actions are doubly rate limited. Not only can you not spam a single action, you can typically only call one rate limited API action per event handler. So you can make a button that can do one of three actions depending on state, but if a second fires it generates an error.
Re:VRchat bans mods, embraces EAC by hgazx on Tuesday July 26, 2022 @04:01AM (#32235575)
Until you get a Lua unlocker. Because those limits are enforced by the client, not the server.

I’m not arguing that there’s no rate limiting going on in the server, but some things such as not being able to call several api commands with only one hardware event are enforced client side because by definition the server has no idea about whether a hardware event happened.

Re:VRchat bans mods, embraces EAC by hinkley on Tuesday July 26, 2022 @01:29PM (#32241203)
Yes and no. The rate limiting can still be done server side. Reacting to events is simplest on the client, but if you were being a hard ass about it you could do something with correlationIDs. I think it depends on how much state history you want to retain on the server to map actions to outcomes.