The Incompetence of Economy Simulator.net

EDIT [2]:

New (shit) response from the devs of Economy Simulator (they proceed to show mesh v3 and v4 on studio, congrats on adding this to the studio, i know it was hard for you la..), they also talk about our lack of hashing IPS

We’ve already responded to this claim in the Privacy section where it was discussed it is a waste of time, as any modern day GPU will take >10 seconds to crack it.

Here’s a reddit thread from 13 years ago to prove our point

(for anyone wondering, we use IPs to detect alt farming, and alts in general)

EDIT [1]:

Economy Simulator developers have responded by stating untruthful statements (proceeds to show no evidence of kinery liking dogs as he said) and shilling his ass com server

You can see his response here

Hello everyone!

Today, we will go over the cesspool of “Economy-Simulator.net”, a revival based off the much better, but still not great “Economy-Simulator.com”.

Disclaimer: Do not harass any staff of Economy-Simulator.net

Let’s start!

”New Graphics Engine”

Claim can be found here

While it sounds like they actually rewrote RCC 2016’s graphic engine (or at least modified it), I’ve talked to other knowledgeable people and confirmed, this is literally just 2019-2020 RCC and no “2016” code was modified, which brings up to our second point

”Mesh V1-V5 Support”

Claim can be found here

😮😮😮😮😮 MESH V1-V5 IN 2016!!!!

Nope, It’s just an effect of 2019-2020 RCC, which unironically took them 5+ hours to setup, which leads to the third point. He also states only on site, and if you used them in game, it would error as it is incompatible with 2016.

Now to the big claims.

”I used the Roblox Grid Assemblies”

Claim can be found here

This claim probably wouldn’t be here if before that, he didn’t state behavior that doesn’t happen on any of Roblox’s server software. I asked him to send the file size of a file in Roblox’s Grid to confirm he is using it, but he then told me to “fuck off”, proceeded to call me XlXi, then banned me.

After I got banned, I joined on an alt and checked the general, they had wiped the whole entirety of general, seen here^[1], probably to show that he was not actually using Roblox’s Grid or Arbiter when confronted.

.net’s Audio issue

Audios are a necessity for most games on Roblox, and some audios are still public (due to them being uploaded by Roblox, or they’re shorter than 3 seconds). You would think you would be able to play these in Economy Simulator, right?

Nope.

A user in the server was complaining about how Raining Tacos (a Roblox uploaded audio, that is public) was not working for them. Their response to the user was that, “holy shit youre slow, bro doesnt even knwo about the Roblox audio privacy update”. If he would have looked at the asset page for 2 seconds, he would have seen that it was actually public. When I do confront him and tell him that it is possible (it takes one header to do so ??? your client should be sending this already), and show him that it’s possible, his response was “ok idc tho” Screenshot can be seen here 15 minutes later, my alt was banned. He also banned a donator that agreed with me, nice job ECS (proof: here^[2])

TL:DR for this section: owner talks shit to member, gets proven wrong, goes “idc” and bans the person who proved him wrong

Privacy

On the home page of Economy-Simulator.net, you can find the following:

While the “IP’s stored temporarily” thing might be true (haven’t really read about economy sim source code), hashing IP’s does not give you any security at all. Take this post by 3dsboy08 (owner of Roblox exploit Synapse) explaining how hashing IP’s is basically “snake oil”:

Of course, the actual purpose of logging IPs is explicitly so you can look them up and see the ISP/other information from that IP address - but there is a million arguments made on this forum already about this, so I will skip to why this is stupid from a security prospective.

There is a hard limit of 2^32 IPv4 addresses - this means that at a maximum, there is 4,294,967,296 IPv4 addresses in existence. Sounds good, right? Yeah, that is until you look at the amount of hashes a modern GPU can calculate per second. Currently, a 1080 TI can do upwards of 17 billion SHA-256 hashes per second, which means your hash would be broken in less then a second by anyone using a completely naïve brute-force attack. This could be made much faster by simple elimination of private IP ranges or simple targeting, which makes this ‘protection’ little more then snake-oil and security theater.

You might be thinking that IPv6 addresses would protect you from this, but that isn’t really the case either. While there are 2^128 IPv6 addresses available, the amount actively used by residential ISPs currently is far lower then that insane number, which again makes this attack practical by someone who knows how to Google around. This brings up to our last point.

Browser (or not so) based

When releasing the source code to Economy-Simulator, Floatzel did one thing, which was not release the WebASM for the client. This makes the whole point of the new Economy-Simulator the same as every other revival, as the main point for Economy-Simulator was to be “exploit free”, and “browser based!“.

Honorable Mentions

arbiter bugging, person on alt was apparently stan some loser no one likes

“hitius source has vulns and rce’s in it”, even though his client does not have the raknet vuln patched

no one gives a fuck if you don’t want a client and a laggy browser client instead, while floatzel did nuke dx11, the web client ran fine (ex: here)

rosem gets harassed by rre people all the time, no he does not, he literally just joins rre, spams, gets banned and repeats the process (then gambles, and loses)

meme: THE 2022 PLACES CRASHING RCC!!! BAN THE PLACE ID…^[3]

That is all, we are Tadah.