# (Security Issue) How to Copy a Wearable, Explained

**URL:** <https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032>\
**Category:** Site Feedback\
**Created:** [March 26, 2022, 8:22am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032 "2022-03-26T08:22:48Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![ENIAC](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.decentraland.org/eniac/32/9997_2.png) [@ENIAC](https://forum.decentraland.org/u/ENIAC)\
**Post date:** [March 26, 2022, 8:22am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/1 "2022-03-26T08:22:48Z")

</div>

This needs to be fix to prevent wearables / objects from being copied

I can explain how to copy the .glb/.gltf file from \*.decentraland.org, however i will

> wait for @dao [@admins](https://forum.decentraland.org/groups/admins) to comment before I show how to copy files

from in-game, off the market place, and from the forum.  
Which can be achieved by people whom have very little computer skills. There is no software to install, nor using any external website.

---

<div class="post-metadata">

**Author:** ![BlazinMazon](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.decentraland.org/blazinmazon/32/6263_2.png) [@BlazinMazon](https://forum.decentraland.org/u/BlazinMazon)\
**Post date:** [March 26, 2022, 8:36am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/2 "2022-03-26T08:36:43Z")

</div>

Thanks I’m very interested in learning.

---

<div class="post-metadata">

**Author:** ![Opa\_aq0](https://avatars.discourse-cdn.com/v4/letter/o/ecccb3/32.png) [@Opa\_aq0](https://forum.decentraland.org/u/Opa_aq0)\
**Post date:** [March 26, 2022, 9:06am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/3 "2022-03-26T09:06:10Z")

</div>

Why learn people this…

---

<div class="post-metadata">

**Author:** ![keching](https://avatars.discourse-cdn.com/v4/letter/k/67e7ee/32.png) [@keching](https://forum.decentraland.org/u/keching)\
**Post date:** [March 26, 2022, 11:38pm UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/4 "2022-03-26T23:38:26Z")

</div>

Looking forward to your explanation. This is not a small matter.

---

<div class="post-metadata">

**Author:** ![Matsumoto](https://avatars.discourse-cdn.com/v4/letter/m/9fc348/32.png) [@Matsumoto](https://forum.decentraland.org/u/Matsumoto)\
**Post date:** [March 27, 2022, 5:39am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/5 "2022-03-27T05:39:49Z")

</div>

Dang… You’re right. But unfortunately the previewer has to download the files to showcase them.

---

<div class="post-metadata">

**Author:** ![ENIAC](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.decentraland.org/eniac/32/9997_2.png) [@ENIAC](https://forum.decentraland.org/u/ENIAC)\
**Post date:** [March 27, 2022, 5:56am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/6 "2022-03-27T05:56:11Z")

</div>

Correct, as the previewer send’s a API GET to `https://peer-ap1.decentraland.org/`

---

<div class="post-metadata">

**Author:** ![AtomicHydra](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.decentraland.org/atomichydra/32/9208_2.png) [@AtomicHydra](https://forum.decentraland.org/u/AtomicHydra)\
**Post date:** [March 27, 2022, 7:13am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/7 "2022-03-27T07:13:10Z")

</div>

@michi @Yannakis Yes this is fact if you have the knowledge it can be done.

---

<div class="post-metadata">

**Author:** ![Matsumoto](https://avatars.discourse-cdn.com/v4/letter/m/9fc348/32.png) [@Matsumoto](https://forum.decentraland.org/u/Matsumoto)\
**Post date:** [March 27, 2022, 7:30am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/8 "2022-03-27T07:30:03Z")

</div>

Not sure how much of an issue that is though. After all “Decentraland\*\* is an **open** -source initiative to build a decentralized virtual reality.”  
Also it also looks like the review committee already has access to the glb files ( and these are the same persons who also make and sale wearables ). So they my get to learn some knew technic. I figure they have access based on this post:  
[https://forum.decentraland.org/t/collection-roustan-sparkle-shark-head-created-by-roustan-is-ready-for-review/8292](https://forum.decentraland.org/t/collection-roustan-sparkle-shark-head-created-by-roustan-is-ready-for-review/8292)

---

<div class="post-metadata">

**Author:** ![michi](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.decentraland.org/michi/32/19023_2.png) [@michi](https://forum.decentraland.org/u/michi)\
**Post date:** [March 27, 2022, 7:50am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/9 "2022-03-27T07:50:21Z")

</div>

This is right, the developers were saying that due to the platform being open source people can download glb files from the game so they make it a feature in the builder for most people. (Not just committee members)  
The committee can download files also but we only usually do it to check wearables are meeting size requirements, standard guidelines or if there’s something wrong we might need to check like IP issues or setup troubleshooting. Usually we can check most things in Ropsten~

Availability micht change coming up due to the influx of people trying to publish existing models and it’s getting harder to catch! Also with the new client DCL might also be able to prevent downloading a bit more also, not too sure.  
The wearable committee has no authority around this topic, only the community and devs.

Decentraland recently also had to remove all the basic wearable files that were on GitHub which were originally intended to help people entering the space have a reference due to people publishing them and being dishonest, which is a shame for the community of creators that actually want to learn.

Let me know if there’s anything else I can help with!

---

<div class="post-metadata">

**Author:** ![GermanyODW](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.decentraland.org/germanyodw/32/15528_2.png) [@GermanyODW](https://forum.decentraland.org/u/GermanyODW)\
**Post date:** [May 18, 2022, 10:13am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/10 "2022-05-18T10:13:23Z")

</div>

Hi guys, Looking forward to your explanation

---

<div class="post-metadata">

**Author:** ![Matsumoto](https://avatars.discourse-cdn.com/v4/letter/m/9fc348/32.png) [@Matsumoto](https://forum.decentraland.org/u/Matsumoto)\
**Post date:** [May 22, 2022, 6:33am UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/11 "2022-05-22T06:33:06Z")

</div>

Hint: in order for your browser to display something on screen it first needs to download those elements.

Cheers.

---

<div class="post-metadata">

**Author:** ![METATIGER](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.decentraland.org/metatiger/32/31265_2.png) [@METATIGER](https://forum.decentraland.org/u/METATIGER)\
**Post date:** [May 22, 2022, 3:39pm UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/12 "2022-05-22T15:39:37Z")

</div>

I think we - who know how this works - shouldn’t provide such an information here in order not to increase the abuse.

It is quite easy if you know how things work and protection is not possible at the moment. I’ve also been a victim of plagiarism here but also love to see how other ppl made their models - to learn from or to compare it with my own work. It’s more a legal issue than a technical.

---

<div class="post-metadata">

**Author:** ![Yummy](https://avatars.discourse-cdn.com/v4/letter/y/7ba0ec/32.png) [@Yummy](https://forum.decentraland.org/u/Yummy)\
**Post date:** [May 24, 2022, 11:55pm UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/13 "2022-05-24T23:55:04Z")

</div>

There is no need to all computing stuffs all wearables are now downloadable from the builder prob an issues in last builder update XD

---

<div class="post-metadata">

**Author:** ![InJesterr](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.decentraland.org/injesterr/32/26746_2.png) [@InJesterr](https://forum.decentraland.org/u/InJesterr)\
**Post date:** [June 28, 2022, 7:37pm UTC](https://forum.decentraland.org/t/security-issue-how-to-copy-a-wearable-explained/10032/14 "2022-06-28T19:37:05Z")

</div>

Yes, downloading is easy, but i think its required since we have to be able to see on how to test.

**Example of why you could need it like me:**  
Before i didnt understand how to make RGB wearables, i downloaded a example rgb glb file from the forum checked on it in shading.

and tried to understand it from the Shading then i applied what learned on my own wearable, this allowed me to learn without asking anyone.

It’s the comite’s work to check if its copied or not thats why they exist, to help, assist, guide & protect.
