惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

U
Unit 42
Google DeepMind News
Google DeepMind News
Stack Overflow Blog
Stack Overflow Blog
H
Help Net Security
MongoDB | Blog
MongoDB | Blog
I
InfoQ
N
Netflix TechBlog - Medium
T
Tailwind CSS Blog
量子位
博客园 - 叶小钗
月光博客
月光博客
IT之家
IT之家
G
Google Developers Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
小众软件
小众软件
S
SegmentFault 最新的问题
Engineering at Meta
Engineering at Meta
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
aimingoo的专栏
aimingoo的专栏
云风的 BLOG
云风的 BLOG
Vercel News
Vercel News
爱范儿
爱范儿
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
宝玉的分享
宝玉的分享

Help Net Security

Police arrest 10 suspected members of Black Axe cybercrime gang ShinyHunters claims it stole 1.4 million records from Udemy Sevii unveils Cyber Swarm Defense Mode to stop AI-driven attacks at scale Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research Cequence Agent Personas bring granular control and governance to enterprise AI agents NowSecure MARI gives enterprises evidence-based visibility into third-party mobile app risk The metrics killing your SOC, and what to use instead US state privacy fines reached $3.425 billion in 2025 Canada’s first SMS blaster case leads to three arrests Linux storage management tool Stratis 3.9.0 adds online encryption and cache-less pool startup TLS Connect gives SMBs a right-sized automated tool to manage TLS certificates Aptori expands its platform with autonomous offensive testing to reduce security bottlenecks Your IAM was built for humans, AI agents don’t care The AI criminal mastermind is already hiring on gig platforms 25 open-source cybersecurity tools that don’t care about your budget Product showcase: LuLu reveals unauthorized outbound connections from Mac apps Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach Users advised to drop passwords and make room for passkeys - Help Net Security Indirect prompt injection is taking hold in the wild - Help Net Security Compromised everyday devices power Chinese cyber espionage operations - Help Net Security New Cisco firewall malware can only be killed by pulling the plug - Help Net Security Meta is overhauling how you sign in, manage settings, and protect your accounts - Help Net Security Ubuntu 26.04 LTS delivers memory-safe system tools and live patching for Arm servers - Help Net Security OpenAI’s GPT-5.5 is out with expanded cybersecurity safeguards - Help Net Security AI is speeding up nation-state cyber programs - Help Net Security A study of 1,000 Android apps finds a privacy policy logging gap - Help Net Security IT spending to hit $6.31 trillion record, thanks to AI - Help Net Security Where AI in CI/CD is working for engineering teams - Help Net Security With AI's help, North Korean hackers stumbled into a near-undetectable attack - Help Net Security Hacker with a special interest in breaching sports institutions ends behind bars - Help Net Security
Roblox chat moderation gets bypassed by leet speak and co...
Sinisa Markovic · 2026-05-08 · via Help Net Security

Roblox runs an automated chat filter at the scale of billions of messages per day. An independent audit of about two million chat messages from four of the platform’s most popular games shows that filter missing a wide range of harmful interactions, including grooming attempts, sexual content directed at minors, threats of violence, and references to self-harm.

Roblox chat moderation

Researchers from the University of Arizona and Arizona State University collected the messages from public servers covering the 9+ and 13+ age tiers. The dataset spans 105,214 users and 336 hours of recorded gameplay. Roblox does not offer an API for chat data, so the team captured the in-game chat window on video and transcribed it with optical character recognition.

What got through

The audit groups escaped content into categories that mirror Roblox’s community standards. Grooming was the most common pattern in the reviewed sample. Examples include users coaxing other players to share their location, age, or images, and steering conversations toward in-person meetings. One exchange documented in the paper involves a user disclosing a home address and another responding with plans to meet that day. A separate thread shows panic after a player realized a stranger had obtained their location.

Sexual content also appeared in volume, including solicitation, sexting, and roleplay that escalated into explicit territory. Bullying, racial harassment, and slurs surfaced regularly, sometimes with only individual words masked and the surrounding meaning intact. The reviewers also found self-harm statements, violent threats described in graphic terms, and attempts to move conversations to TikTok, Discord, Snapchat, and YouTube where Roblox’s filter no longer applies.

Roblox runs context-aware AI moderation that goes beyond a simple keyword blocklist The audit found the system is good at masking isolated profane words and does sometimes redact at the phrase level. Harm that builds across multiple turns tends to pass through.

How users work around the filter

The researchers reviewed 12,612 messages from 94 users who had been moderated at least once before, looking at what those users did next. Six recurring evasion techniques came up.

Users split blocked phrases across several short messages so each line on its own looks harmless. They retry filtered words with new spellings, phonetic substitutions, or added punctuation. They use code words and abbreviations, including shorthand like “f4” for the f-word and “btc” for a common slur. They swap letters for numbers or symbols in the style of older internet leetspeak. They probe the filter with variations to learn what passes, then reassemble the original meaning once they find a form that goes through. One sequence in the paper shows a user testing several spellings of “Discord” before landing on a description the filter let through.

The distribution of flagged messages is heavily skewed. A small group of users accounts for the bulk of moderated content and keeps trying new bypass methods after each block. Moderation decisions appear to operate on individual messages without much memory of a user’s earlier behavior.

Pressure on the platform

Roblox is already defending itself in court on related claims. Seitz v. Roblox was filed in federal court in Kentucky in October 2025, and Los Angeles County’s People v. Roblox followed in February 2026. Both cite the platform’s handling of child safety. Recent reporting in Bloomberg, The Times, and others has described grooming cases that began on Roblox and moved to other apps before causing real-world harm.

The audit’s authors recommend that platforms serving minors combine pattern-based detection with language models, evaluate full conversations rather than single messages, track repeat offenders across games and sessions, and give users clearer feedback when reports lead to action. The findings cover only public servers, so private-server activity sits outside the scope of the study. The numbers reported in the paper are described as a lower bound on what is actually getting through.