PeterHard

Hello 3DX Community!
We are pleased to introduce you to 3DXChat 2.8. Thank you to everyone who supported us and took part in testing 🤩
The main innovation is the accessory system. Here is a brief description of it:

Accessories category (Head and Body have separate buttons) Select the location point on the character's body to place the accessory Choose an accessory item Choose a color or remove an item Download
You can update the game by simply running the game, but we recommend a clean install:
Download link
How to install
Make sure that you install the game in an empty directory Start 3DXChat.exe What's new:
✅ Accessories: Earrings, Rings, Tails, Wings, Headphones (M and F);
✅ Poses;
✅ Clothes, shoes, hats;
✅ Tights and stockings;
✅ Hairstyles;
✅ New skyboxes: Above the clouds, Space;
✅ Prints on clothes and underpants;
✅ New shapes and materials in world editor;
✅ Fix compatibility of shoes and pants;
✅ Security fixes;
✅ New FPS limit options added: 75, 100, 120;
✅ Fast SSAO, HBAO 1, HBAO 2. We removed the old SSAO effect from the game because it is buggy for many players. Instead, we added 3 effects to choose from:
Fast SSAO - works fast on any hardware, low quality; HBAO 1 - optimal performance and good quality; HBAO 2 - a large load on the graphics card and better quality + the effect of colored shadows. Example of the HBAO 2 effect:

Known issues:
We are aware of a few known issues in this release, we will address them in the next hotfix.
one pair of pants don't compatible with shoes compatibility of some underpants with some top clothing  
Please report any bugs found in this topic
Content:

They scan public data... Well, how? Of course when I'm logged in my user ID or so needs to be sent out to make me visible to the others, of course my profile then can be seen manually and as the data are there also be read automatically.
 
As I am friend with others there are links to me and to my friends. Following these links would make my profile readable even when I'm not online. The friend list anyway should be private to the owner but the gift list is not. So from the gift list of a logged in user you can read the profiles of all who gifted him and this is cascaded; from the results you can again scan all who gifted them and so on. This could be easily broken if there would be only the information X gifted Y without X's profile linked. The question is if we want it.
 
I do not really see a serious technical issue here except somebody does an automatic big data which maybe rated a poor moral.
 
What makes me more worried is the open and not encrypted connection in general. This should be addressed at once. If I understand things right this will prevent our logins from being hacked by man in the middle attacks for instance but not from the scanning thing because in the end in my client the data need to be decrypted to be able to play. So don't think encryption can solve every problem. The issue addressed here by gizmo in my view is not an encryption issue and the reading of public data can indeed be done without database access.
 
Please see I just did some thinking and found things to be very plausible. I cannot guarantee that all this is right. Adding gizmo's hint not to post any real personal data in profiles I suggest strictly to have another game password than the one that provides access to the email account you play with here. Your email should not be scanned but it is good security practice anyway if for what reason ever there are leaks even though. For the same reason it is a nice idea to have different passwords for the 3DX and the forum here. And surely you do good if you follow the common rules for good safe passwords.
 
3DX for me is not that unsafe as some panic threads would imply. Maybe gizmo could have explained things a bit more in detail but at least I agree to his hints.
 
Update: I found a Pandora review which says the profile's data can be read without having a own game account. That indeed first seems as if data are public which should be available to players only. Well, knowing Pandora is a service, not a stand alone 3rd party tool, it is easy to imagine the service has one or more game accounts which are abused to collect the data. So in the background still nothing is public but some guys abuse there logins. These guys cleary know they are illegal as they provide their service in the Tor network only and if you pay them they want Bitcoin only.

This still falls under the community rules, especially since a few people who have access to this 'hack' are using it to bully other players.