About That “Security Update” Last Week…

Last week, we released a very small patch that only had two lines in the notes:

Safety and security improvements. The camera had a bug where the menu buttons zigged when they should’ve zagged. We’ve rectified the situation. So… what was that first one about?

This was a change that we rolled out specifically to combat avatar ripping.

We now validate much more strongly that only a verified VRChat client can download avatar bundles, and only when it is in an instance with somebody wearing that avatar. This allows us to determine when a download is coming from an unauthorized source and block it. This has been highly successful, and many ripping methods now fail entirely.