1. Neos VR
  2. News
  3. 2020.6.18.1194 - Kick/Ban security exploit fix, CPU/memory optimizations

2020.6.18.1194 - Kick/Ban security exploit fix, CPU/memory optimizations

Pushing a high priority update to fix a security exploit that lets users kick/ban without proper permission. I've pulled in a bunch of other things from the WIP Radiant Dash build as well as a bonus (the new dash is not ready for release yet), including some memory/CPU optimizations and possibly fix for the ocassional random particle effect freeze!

[h2]Security:[/h2]
- Fixed incorrect kick/ban request validation logic, which can let users kick/ban others without having the sufficient permission to do so (reported by @I wont shut up about reflections, logs provided by @drecalen and @bbblacketer)
- Added extra diagnostic information for kicking/banning for future issues
- Some more small cloud security additions

[h2]Optimizations:[/h2]
- Heavily reduced memory and CPU usage for managing sync elements by deduplicating their lookup tables
- Added memory pooling to sync message validation, heavily reducing memory allocations (and associated CPU usage) for the host
- Added reference cleanup on Dispose to the reference controller, to aid the GC and help prevent potential memory leaks
- Upgraded to Unity 2019.4.1f1 (from 2019.4.0f1)

[h2]Bugfixes:[/h2]
- Fixed particles in userspace not emitting at the correct position
- Fixed occasional excessive allocations and calculations during particle system emissions