Info on Security from an IS Security professional (re: Bots)

either you detect a specific bot or you dont detect a specific bot. its not like they are all acting do differently that you could detect like 30% of them or whatever. either you get em or you dont.
the different bots might be able to be detected but then they just switch to the undetected one.
and when they invest months of dev time to find algorithms to detect them they just tweak a few things and get undetected again. blocking them longterm is impossible, which is likely the reason why there isnt a single game that has no bots.
the only thing that might work are other things like gov ID verification, but even then, there are millions of stolen identities out there that can be used without issues. and you need to see if battling bots, no matter the price, is worth it. if it inconveniences the normal users too much then they leave. and if those that leave because of inconveniences are more than the ones that leave because of bots (which likely arent too many, seeing that every MMO has huge amounts of bots and still get played).

it always takes more time to fight bots then for bots to circumvent it. its a losing battle. and throwing money at it doesnt make it go away.
and the tighter the algos check for bot behaviour the quicker you can legitimate players. and thats costly.

This is false. Your local ATM machine is proof you’re wrong. It’s a cost vs benefit thing, not a “its not possible” thing.

cos ATMs are MMOs? how is this comparable?

The best security in the world can stop bots. The best security in the world costs money.

I’ve laid out exactly how to stop bots, and they can’t circumvent it. But my solution costs money.

except that ALL the things you said can be spoofed or circumvented.
as i said, just cos the bots act like this now because its the easiest and quickest way, doesnt mean they have to act like that. which is why your whole premise is flawed. every single point you mention has the prereq that bots act like they do now without being able to change their behaviour. which is obviously wrong.

No, the method I proposed in the OP cannot be circumvented whatsoever, because modifying the script does nothing, they still get detected and banned. My solution attacks the method of scripting, and doesn’t care about the specifics of what is in the script. As soon as they spin up dozens (or 100s) of virtual machines all running the script, they all get banned. Alter the script, and start over, and within minutes, banned again. It detects the pattern. It does NOT care how many times the scripter alters the script.

I never saw Security professional posting in gaming forums, must be new to the field. Maybe we will be expecting Psychology Doctors posting soon to tell us how to deal with the news we get from Amazon

be more specific. cos i dont see any point out there on the top that would be fool proof. or at least mention which one you are talking about.

its not like the game detects the script itself. its not like it reads “script.exe” somewhere and detects that. it only detects what the script does. and if its randomized and eloquent enough then you CANT detect it. not without also banning A HUGE bunch of legitimate players.

I thought the other snarky replies were pretty stupid, but your post is far dumber. Congrats!

(Seriously, what kind of moron thinks that certain professions don’t play video games?)

1 Like

Read all 95 posts and catch up on the conversation.

The only variables a script developer can program is a timer (pause) between actions, but they cannot actually randomize the actions, because Lost Ark makes you go from Quest NPC 1, to objective, to Quest NPC 2, etc. Real players won’t do those things exactly the same way a bot does them (time is not considered). The overall actions of the real player will deviate, the script, running on multiple machines, will be the same series of actions. It’s pretty simple, the Lost Ark developers just have to choose what series of actions they want to analyze. The bot script programmers will never know what actions are the suspect ones, because of the delay I baked into the idea in the OP.

i got the feeling that you dont actually have any idea on how programming works. i can randomize the actions easily. i could add RNG dependent playing emotes between quest points for fun, let them dance a few times out of a hundred, can let them collect mokokos around on a few, but only some and not all, i can let them wait and do those temporary quests on some but not on all.
all this takes literally no work at all. i can make a whole catalogue of actions and let them pick some randomly or not. im quite convinced that you dont actually have any idea what you are talking about.

and just to make this clear, i do program AI for videogames, so its not like i dont know what AIs (bots) can or cant do and what is easy to implement and what not.

Cool story bro. And the SECOND any two of those virtual machines roll the same RNG as each other, they get banned. Also, good luck farming enough gold to RMT when your bots are /dancing and doing side quests for 10 Providence Stones. ROFLMAO.

thats the answer i expected from an imposter :slight_smile:

thanks for showing everyone that i was right and you clearly dont know what you are talking about, neither about IT security, nor programming / botting or the game as a whole.

1 Like

HAHAHA… okay :smiley:

its not like you have been wrong every single time on everything you said cos you dont know programming.
“And the SECOND any two of those virtual machines roll the same RNG as each other, they get banned.”
OP doesnt know statistics, nor that the chance of them hitting the same “RNG” as a normal player is there as well, which in OPs case would get the normal player banned. but yeah, no problem, right?
" Also, good luck farming enough gold to RMT when your bots are /dancing and doing side quests for 10 Providence Stones."
clearly OP doesnt know the game, or botting in general. an undetected bot that needs twice as long to level but is undetected for months instead clearly is worse than a bot that gets detected after a week. OP has it all figured out :smiley:

im done with this pathetic imposter lol

maybe you should educate yourself on the matter before talking, or at least turn on your brain for once. but good that you said im right. thats at least something. i bet you didnt even notice it.

2 Likes

or you just add 2fa and add a capcha. if the server isnt given the code and capcha, it blocks login and flags the account and ip.

Also if you really wanna get nuts, add capcha puzzles to the quests along the way to filterout/confuse bots

^I wanted to write a serious comment why this is so off it’s beyond my comprehension how someone can even think this is a good idea.

But then again it’s probably not worth the argument xD

It’s ok dude. Not everyone is a software developer and can understand the idea in the OP. Don’t feel bad, I’m sure your job is cool and all, but it doesn’t qualify you to even talk on this subject (as is obvious from your lack of understanding.)

You clearly don’t understand how RMT companies work. They aren’t going to be able to bypass the system I designed, because they have no ability to figure out what it is. Just because I posted it in this forum thread, doesn’t mean that in the game you can find out how it is actually working. That’s the entire point of the delay. It makes the system impossible to figure out for the script developer. You can’t circumvent it because you have no idea what it is doing. You only know about it because I posted it here in this thread. There would be no such detail given by SG when they decide what to actually implement.

1 Like

Dude, assuming it is not a copy pasta, you made a gigantic op trying to explain simple pattern recognition and asynchronous tasks to a publisher/ game developer… Not sure if you are trolling or actually sitting on that high horse of yours.

1 Like

just give everyone unlimited gold and remove endless chaos dungeons
all bots will disappear

problem solved.

genius idea from an internet professional :slight_smile:

he is clearly a troll that has never written a line of code in his life. dont pay any attention to him lol