Investigation Uncovers Hidden Installer Scripts in Roblox Toolbox R6 Models

·6 views

A developer investigating suspicious R6 character models in the Roblox Toolbox found a hidden script and a nested object hierarchy inside a character's arm. The author reports that similar structures appeared across multiple assets, sometimes from different creators. Code analysis showed the script installs a hidden interface into the player's GUI, renames several components, and only runs while in Roblox Studio. A companion client script reportedly displays a technical-sounding notification and a copyable code snippet, which may be an attempt at social engineering to get developers to run an external command. The investigation was ongoing, and the author had not yet confirmed that a malicious remote module was actually executed.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Daily peanut snacking linked to better memory-related brain function in older adults

A study reported by ScienceDaily found that about two servings of unsalted, skin-on roasted peanuts per day for 16 weeks may support brain health and memory in older adults. Researchers observed improved insulin response in brain regions important for memory, a function that often weakens with age and has been associated with Alzheimer's disease. The article stresses that the study concerns memory and brain metabolism, not vision or amblyopia, and is not a reason to change diet. It uses the finding to illustrate how the adult brain remains adaptable when exposed to a modest stimulus regularly, and separately discusses how visual training works on the same principle of brain plasticity.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Email Deliverability Checklist for Developers: SPF, DKIM, DMARC and Warm-Up

The article offers a practical guide for developers who send email, whether transactional, marketing, or cold outreach, on getting messages into recipients' inboxes. It explains how SPF lists authorized sending servers in DNS, how DKIM adds a cryptographic signature to verify messages were not altered, and how DMARC combines both and sets a policy for failed checks, recommending starting with monitoring. It also advises gradually warming up new domains or IPs to avoid spam flags, and processing bounces and complaints, removing hard-bounced addresses promptly. Finally, it recommends content practices such as avoiding spam-like phrasing and including plain-text versions and unsubscribe links, plus free tools for monitoring reputation.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Health Form Bug Mislabeled a 190 lb User as Obese Due to Unit Input Errors

A developer's corporate wellness health-check form wrongly classified a tester weighing 190 lb and standing 5'11" as obese, when the correct BMI is about 26.5, which is overweight. The discrepancy traced back to input handling rather than the formula itself: a height field expecting centimeters accepted values like 1.75 and produced absurd results, while an imperial field accepted feet entered as a decimal (5.11 instead of 5 feet 11 inches). The fix involved rejecting implausible heights and replacing the decimal input with separate integer fields for feet and inches. The developer said the corrected form now matches reference calculations for test cases.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Harbor Large-Image Push Failures Traced to Traefik's 60-Second Default Timeout

A developer stopped pushing large images to Harbor after pushes kept timing out, and initially blamed the external edge network. Their cluster used Traefik as its ingress, adopted after ingress-nginx was retired, and Cloudflare Tunnel handled public traffic. Object storage for large microVM artifacts ran into the same problem, with uploads failing intermittently even when split into smaller parts. Distributed tracing showed requests ending at almost exactly 60.0 seconds, pointing to a Traefik setting rather than a network fault. The default readTimeout of 60 seconds was identified as the likely cause of the cut-off connections.

0 comments Read more at DEV Community