SRL Archive - OSR News and General

Today when I woke up I saw in the chat history that a script/botclient repeatdly typed in my password and username (password and username in 1 line behind eachother so it wasn't censored).

Lucky enough I bot at a very private area, I have about 50M worth of gear on me though.

I'm afraid to put my real details in a script again from now on :\
Which unfortunately also means I have to manually relogin every 6 hours.

Post the script? - remember to remove your username and password..this has never happened to me and i have never heard it happen to anyone.

Using Ryutoh's Bloodworm Fighter V1

Here's some of the logs I pulled from simba.

Logging player in.
Starting.
Logging player in.
Starting.
Logging player in.
Starting.
Logging player in.
Starting.
Monster found at: 262, 237
Miss clicked, attempting to click again.
Monster found at: 360, 150
Monsters lost, looking around.
No monsters found, spinning.
Logging player in.
(USERNAME DELETED)
Starting.
Monster found at: 261, 144
Miss clicked, attempting to click again.
Monster found at: 263, 144
Logging player in.
(USERNAME DELETED)
Starting.
Logging player in.
(USERNAME DELETED)
Starting.
Logging player in.
Starting.
(USERNAME DELETED)

This happens when you start the script while smart is disabled but you enable it a few seconds later.

Really? I don't remember whether or not I did that.
This happened like hours later of starting the script btw.

Is it better to enable smart and then start the script instead?

Aw sox to be you, but that's why I never type my name in a script thou ^^

From: Nebula
This happens when you start the script while smart is disabled but you enable it a few seconds later.

^^ this. I have made this mistake a few times… It thinks it's not logged in when it can't access smart; and due to that, it tries logging you in as soon as you re-enable it.

From: Kevin
^^ this. I have made this mistake a few times… It thinks it's not logged in when it can't access smart; and due to that, it tries logging you in as soon as you re-enable it.

But it happened hours later after botting for a while?

I hadn't disabled/enabled smart, I was away.

From: Nashua
But it happened hours later after botting for a while?

I hadn't disabled/enabled smart, I was away.

What @Kevin said When you start the bot without enabling Smart it Mistakes The chat for The Login Screen Thus Your Problem,Either That Or Someone messed With Ur Computer And Disabled Smart

From: rebeltjeh
Aw sox to be you, but that's why I never type my name in a script thou ^^

you specifically dont put your username and password in a script because your afraid of all things; smart might type it? kwlio.

From: Kasi
you specifically dont put your username and password in a script because your afraid of all things; smart might type it? kwlio.

Well that's not exactly why I don't do it, I just basicly don't trust it. (not like the botting community is trustworthy, nothing personal but that's my allround experience.)
Less risk if you don't do it :) (and i dont mind relogging after 6 hours)

From: happy hippo
What @Kevin said When you start the bot without enabling Smart it Mistakes The chat for The Login Screen Thus Your Problem,Either That Or Someone messed With Ur Computer And Disabled Smart

My computer was locked and no one else was here.

If smart is already open, then pair it up before running the script.

Say like i clicked launch script then smart loaded up and it tried to log in and i wasn't at the scripts spot, so i stopped the script or disabled smart then i went to the spot and re-enabled smart or re-ran the script with smart disabled then re-enabled, this will make it eventually type your username/pw in game.

What you need to do when you launch a script without smart loaded, let it load fully if you want to stop the script then stop, but when you want to run a script make sure smart is ENABLED before you run the script again.

So its paired up before the script is launched if smart is already open.

I word; Ha.

From: rebeltjeh
Well that's not exactly why I don't do it, I just basicly don't trust it. (not like the botting community is trustworthy, nothing personal but that's my allround experience.)
Less risk if you don't do it :) (and i dont mind relogging after 6 hours)

http://villavu.com/forum/showthread.php?t=103996 never worry again

From: Nashua
My computer was locked and no one else was here.

The script you linked looks good, but you may have a different version. Not sure, but it looks like either loggedin messed up or login was called while you were already logged in

From: Officer Barbrady
http://villavu.com/forum/showthread.php?t=103996 never worry again

Nice idea, but that will never be able to catch everything.

From: tealc
The script you linked looks good, but you may have a different version. Not sure, but it looks like either loggedin messed up or login was called while you were already logged in


Nice idea, but that will never be able to catch everything.

What will it not catch? Theres no other way somebody can steal your password other than using httppost etc etc or using players[0].pass more then once

From: Officer Barbrady
What will it not catch? Theres no other way somebody can steal your password other than using httppost etc etc or using players[0].pass more then once

Wrong.

From: Ollybest
Wrong.

The screeny thing you suggested wouldn't work because you would have to send it over the web.. PMing another account the password wouldn't work either because it would be repeating players and pass

From: Officer Barbrady
The screeny thing you suggested wouldn't work because you would have to send it over the web.. PMing another account the password wouldn't work either because it would be repeating players and pass

Lol, its none of that and no, im not telling you (I dont feel like giving people ideas.)

From: Ollybest
Lol, its none of that and no, im not telling you (I dont feel like giving people ideas.)

I think I know what you're talking about

tbh people should just enable security.sex

From: Nebula
I think I know what you're talking about

tbh people should just enable security.sex

iirc there are methods that security.sex won't help against, but still it's a good idea to have it enabled if you don't know what to look for.

From: Officer Barbrady
The screeny thing you suggested wouldn't work because you would have to send it over the web.. PMing another account the password wouldn't work either because it would be repeating players and pass

You can "encrypt" the login details before pming them. Plus there are a few things that only work in lape.

Const 
nam:='asdf'  //enter user name here
pas:='something'  //enter your password here 

Procedure DeclarePlayers;
Begin
  HowManyPlayers := 1;
  NumberOfPlayers(HowManyPlayers);
  CurrentPlayer := 0;
  With Players[0] Do
  Begin
    Name        := nam;
    Pass        := pas;
    Active      := True;
  End;
End;  

function pmpw(qwerty:string);
//code



begin
//script stuff
pmpw(pas);
end.
                            

It happened again today, and I started the script after enabling smart and not the other way around.

I have changed my password to a bunch of censored words to be safe..

Ah, there was a guy a while ago who made a DLL which did its purpose but also had password stealing abilities, people who didn't compile the code and used the Pre-compiled DLL got there stuff stolen. This is why you should always compile from source.

I don't think it's that or I would've been hacked by now, and I don't download such files unless they're uploaded by SRL team or whatever.