Info on Security from an IS Security professional (re: Bots)

cos ATMs are MMOs? how is this comparable?

The best security in the world can stop bots. The best security in the world costs money.

I’ve laid out exactly how to stop bots, and they can’t circumvent it. But my solution costs money.

except that ALL the things you said can be spoofed or circumvented.
as i said, just cos the bots act like this now because its the easiest and quickest way, doesnt mean they have to act like that. which is why your whole premise is flawed. every single point you mention has the prereq that bots act like they do now without being able to change their behaviour. which is obviously wrong.

No, the method I proposed in the OP cannot be circumvented whatsoever, because modifying the script does nothing, they still get detected and banned. My solution attacks the method of scripting, and doesn’t care about the specifics of what is in the script. As soon as they spin up dozens (or 100s) of virtual machines all running the script, they all get banned. Alter the script, and start over, and within minutes, banned again. It detects the pattern. It does NOT care how many times the scripter alters the script.

I never saw Security professional posting in gaming forums, must be new to the field. Maybe we will be expecting Psychology Doctors posting soon to tell us how to deal with the news we get from Amazon

be more specific. cos i dont see any point out there on the top that would be fool proof. or at least mention which one you are talking about.

its not like the game detects the script itself. its not like it reads “script.exe” somewhere and detects that. it only detects what the script does. and if its randomized and eloquent enough then you CANT detect it. not without also banning A HUGE bunch of legitimate players.

I thought the other snarky replies were pretty stupid, but your post is far dumber. Congrats!

(Seriously, what kind of moron thinks that certain professions don’t play video games?)

1 Like

Read all 95 posts and catch up on the conversation.

The only variables a script developer can program is a timer (pause) between actions, but they cannot actually randomize the actions, because Lost Ark makes you go from Quest NPC 1, to objective, to Quest NPC 2, etc. Real players won’t do those things exactly the same way a bot does them (time is not considered). The overall actions of the real player will deviate, the script, running on multiple machines, will be the same series of actions. It’s pretty simple, the Lost Ark developers just have to choose what series of actions they want to analyze. The bot script programmers will never know what actions are the suspect ones, because of the delay I baked into the idea in the OP.

i got the feeling that you dont actually have any idea on how programming works. i can randomize the actions easily. i could add RNG dependent playing emotes between quest points for fun, let them dance a few times out of a hundred, can let them collect mokokos around on a few, but only some and not all, i can let them wait and do those temporary quests on some but not on all.
all this takes literally no work at all. i can make a whole catalogue of actions and let them pick some randomly or not. im quite convinced that you dont actually have any idea what you are talking about.

and just to make this clear, i do program AI for videogames, so its not like i dont know what AIs (bots) can or cant do and what is easy to implement and what not.

Cool story bro. And the SECOND any two of those virtual machines roll the same RNG as each other, they get banned. Also, good luck farming enough gold to RMT when your bots are /dancing and doing side quests for 10 Providence Stones. ROFLMAO.

thats the answer i expected from an imposter :slight_smile:

thanks for showing everyone that i was right and you clearly dont know what you are talking about, neither about IT security, nor programming / botting or the game as a whole.

1 Like

HAHAHA… okay :smiley:

its not like you have been wrong every single time on everything you said cos you dont know programming.
“And the SECOND any two of those virtual machines roll the same RNG as each other, they get banned.”
OP doesnt know statistics, nor that the chance of them hitting the same “RNG” as a normal player is there as well, which in OPs case would get the normal player banned. but yeah, no problem, right?
" Also, good luck farming enough gold to RMT when your bots are /dancing and doing side quests for 10 Providence Stones."
clearly OP doesnt know the game, or botting in general. an undetected bot that needs twice as long to level but is undetected for months instead clearly is worse than a bot that gets detected after a week. OP has it all figured out :smiley:

im done with this pathetic imposter lol

maybe you should educate yourself on the matter before talking, or at least turn on your brain for once. but good that you said im right. thats at least something. i bet you didnt even notice it.

2 Likes

or you just add 2fa and add a capcha. if the server isnt given the code and capcha, it blocks login and flags the account and ip.

Also if you really wanna get nuts, add capcha puzzles to the quests along the way to filterout/confuse bots

^I wanted to write a serious comment why this is so off it’s beyond my comprehension how someone can even think this is a good idea.

But then again it’s probably not worth the argument xD

It’s ok dude. Not everyone is a software developer and can understand the idea in the OP. Don’t feel bad, I’m sure your job is cool and all, but it doesn’t qualify you to even talk on this subject (as is obvious from your lack of understanding.)

You clearly don’t understand how RMT companies work. They aren’t going to be able to bypass the system I designed, because they have no ability to figure out what it is. Just because I posted it in this forum thread, doesn’t mean that in the game you can find out how it is actually working. That’s the entire point of the delay. It makes the system impossible to figure out for the script developer. You can’t circumvent it because you have no idea what it is doing. You only know about it because I posted it here in this thread. There would be no such detail given by SG when they decide what to actually implement.

1 Like

Dude, assuming it is not a copy pasta, you made a gigantic op trying to explain simple pattern recognition and asynchronous tasks to a publisher/ game developer… Not sure if you are trolling or actually sitting on that high horse of yours.

1 Like

just give everyone unlimited gold and remove endless chaos dungeons
all bots will disappear

problem solved.

genius idea from an internet professional :slight_smile:

he is clearly a troll that has never written a line of code in his life. dont pay any attention to him lol

OP You sound like a student/entry-level code developer. You could have applied to work for AGS if u had the required skill… if u want to bring ur “qualifications” to the table then you should post a porfolio, but kinda pointless to do d size measuring on the forums.

Now let me explain why u sound like u have close to 0 experience, beside the fact that ur explanations sound like they are copy-pasted from a course.

Let’s start with the obvious.
Client-side security is used to deter the “amateur” level “hackers”, if they can even be called that. A quick 10 minute google search will provide you with the knowleadge and tools to bypass any/most client-side security, however its enough of a deterent for over 90% of the population, hence why its used and constantly updated.
Server-side security, it’s not that hard to have the server run all the values, however this needs to be done in the development stages and MORE importantly most of the population playing games do not have the connection required for a smooth gameplay experience for the amount of information that needs to be transfered in this case, and when it comes to that is arguably better to have worse security and better and smoother gameplay experience. The technology will catch up and we will eventually have everything server-side, but it will take a few more years.

Now ur solutions are amateur level at best, and from my point of view seems like u are someone that doesnt understand game development.
The 2 most reliable ways to deal with this is:

  1. Having GMs that actively track and ban bots, which i believe its the best way to go about it at this time.
  2. Having analog AI learn and apply the appropriate measure, but they start with 80-90% accuracy rate and it takes them quite a bit of time to learn and even then they only near 98-99% accuracy rate which will results in tens of thousands of false positives, which might work for a small bussines but does not work YET in the gaming industry. And i shouldnt even mention the extremly high cost of setting up analog ai’s.

All other solutions are just bandaids that will most likely waste more resources then they actually save. OFC excluding easy solutions that dont take many resources to implement and work as a deterent for most of them, like easy-anticheat or spam blocking and stuff like that.

Now even with the best security in the world as long as there is a connection, there will be someone with the skill to bypass that and gain access to the server, the only problem is that most people with such a skillset will not do it. It’s not worth the hassle especially for setting up bots that make less money even when set up then they usually do by having a job in this field, and thats what it boils down to money, why would u make money illegally when with less work u can make more money in a legal manner.

The issue is that they dont seem to care …

1 Like