Open3DLab, SFMLab and SmutBase published a writeup about the incident this week. On 15-16 October a crawler walked almost the entire catalogue of all three sites. Same user agent on every request: trellis2-data-sourcing/1.0 (3D foundation model research; [redacted]@roblox.com). Single AWS address. 26,429 requests over 34 hours, reading the main page of 18,926 projects. Then it downloaded complete copies of 1,027 files from 712 projects. 145.5 GB. 364 files (54.8 GB) from SmutBase, which is adult content only 345 of the 712 projects are adult content, either SmutBase or flagged on SFMLab 423 of the 712 are licensed non-commercial only It downloaded adult projects at the same rate as everything else They blocked it on 18 October. It came back on the 19th and 20th, kept hitting the blocks, and stopped. Why they think it's Roblox Roblox has been building a "3D foundation model" since at least 2025. Its Cube paper describes exactly that, and lists character generation and rigging as future work. The email in the user agent belongs to one of the 40-plus Cube paper authors, whose public profile says they build 3D foundation models at Roblox. The site is careful here: they don't blame the individual, they say a data-collection run like this is a company decision. "trellis2" may refer to Microsoft's TRELLIS.2, an open 3D generation model. TRELLIS.2's published toolkit contains no web crawler and no user agent, so this script was written for the job. Caveat they state themselves: a user agent is a self-description, anyone can type any address, and it ran from AWS rather than Roblox's own network. They take it at face value but say confirming it is the first thing they want from Roblox. The part that's going to get attention Roblox bans sexual content and tightened those rules in 2025. More than a third of its daily users are under 13, by its own figures. It's being sued by the attorneys general of Louisiana, Kentucky, Texas and Florida over child safety. Its crawler pulled 345 adult projects without filtering them from anything else. The site's framing: as far as the logs show, nobody checked. A crawler working for a company whose platform tens of millions of children use was pointed at an adult site and took explicit models at the same rate as everything else. No evidence any of it reached a model or product. That's the point they're making. The only thing between adult training data and children is whatever filter gets built afterwards, because the collection didn't filter anything. Also in their logs Meta-ExternalAgent made about 380,000 requests to their sites in the month before this, from Meta's own network, loading 211,000 project pages. Source: https://open3dlab.com/news/roblox-downloaded-145-gb-of-models-from-our-sites-including-adult-content/   submitted by   /u/Western-Obligation47   to   r/pwnhub [link]   [comments]