SRL Archive - General Botting Help

illegal bots (Injections)


toxjq

2014-08-10 12:52:50

Hi so i was wandaring if having bots in java that uses injection script in your github account? Since its illegal can jagex penalize you for it? or if I say the purpose of this bot was only for educational purpose :D

Harrier

2014-08-10 13:22:22

Afaik injection is not illegal

Unfold

2014-08-10 13:24:48

They won't do anything. It would be waste of their time even if it was illegal.

toxjq

2014-08-10 14:26:03

when injecting into rsclient and getting values isn't that against rs terms and condition. I recall reading someplace in simba stating injection was illegal due to this.

theorange

2014-08-10 15:30:27

You never know.

One example is Impulse software(Ibot):
http://services.runescape.com/m=news/jagex-vs-ibot--anti-bot-update
http://www.rfcexpress.com/lawsuits/copyright-lawsuits/massachusetts-district-court/54191/jagex-limited-v-impulse-software/summary/
http://www.scribd.com/doc/78898058/Jagex-vs-Impulse-Software-Agreement-for-Judgment

Villavu discussion thread on it:
https://villavu.com/forum/showthread.php?t=93341

I think (am not positive), that they were an injection/reflection based bot. Of course in that lawsuit they came after them with a whole bunch of claims. The forum thread also mentions them trying to shut down PB multiple times.

There is always a risk, however I am not sure if they can realistically press legal actions against color botting as it is so much more difficult to prove, and you don't have the "malicious" angle of actually injecting code. RS does seem to be taking botting much more seriously now though. (It also seems as if they only go after the big developers, and not the individual users, but you never know about that either!)

Also keep in mind, they can try to sue anyone for anything, it is a question of whether they actually have a high chance of winning that lawsuit.

tls

2014-08-10 15:57:07

They are going to find you and all your family and friends, kill them all in front of you, then let you die of old age.

Harrier

2014-08-10 16:31:17

From: theorange
You never know.

One example is Impulse software(Ibot):
http://services.runescape.com/m=news/jagex-vs-ibot--anti-bot-update
http://www.rfcexpress.com/lawsuits/copyright-lawsuits/massachusetts-district-court/54191/jagex-limited-v-impulse-software/summary/
http://www.scribd.com/doc/78898058/Jagex-vs-Impulse-Software-Agreement-for-Judgment

Villavu discussion thread on it:
https://villavu.com/forum/showthread.php?t=93341

I think (am not positive), that they were an injection/reflection based bot. Of course in that lawsuit they came after them with a whole bunch of claims. The forum thread also mentions them trying to shut down PB multiple times.

There is always a risk, however I am not sure if they can realistically press legal actions against color botting as it is so much more difficult to prove, and you don't have the "malicious" angle of actually injecting code. RS does seem to be taking botting much more seriously now though. (It also seems as if they only go after the big developers, and not the individual users, but you never know about that either!)

Also keep in mind, they can try to sue anyone for anything, it is a question of whether they actually have a high chance of winning that lawsuit.

For a start iBot was reflection, they were sued firstly for using skill images that jagex owned and they expanded on the law suit and afaik the only reason iBot settled with jagex was because of the bot nuke and they had no more money to fight with.

From: tls
They are going to find you and all your family and friends, kill them all in front of you, then let you die of old age.

I forgot Jagex was owned by the Russian mob

theorange

2014-08-10 16:48:55

From: Harrier
For a start iBot was reflection, they were sued firstly for using skill images that jagex owned and they expanded on the law suit and afaik the only reason iBot settled with jagex was because of the bot nuke and they had no more money to fight with.


I forgot Jagex was owned by the Russian mob


Thanks for that clarification on what type of bot they were! It still shows that they will try to go after any of the big developers if they think that they can.

KeepBotting

2014-08-10 17:15:57

From: theorange
Thanks for that clarification on what type of bot they were! It still shows that they will try to go after any of the big developers if they think that they can.


iBot, Aryan, RSBot's original domain, 2006Scape, Near Reality, the list goes on. Jagex sues anyone that infringes their copyright.

Jake

2014-08-11 01:16:54

So hide your kids, hide your wives.
From: tls
They are going to find you and all your family and friends, kill them all in front of you, then let you die of old age.



The more you know.
From: Harrier

I forgot Jagex was owned by the Russian mob

Wu-Tang Clan

2014-08-11 01:57:23

From: KeepBotting
iBot, Aryan, RSBot's original domain, 2006Scape, Near Reality, the list goes on. Jagex sues anyone that infringes their copyright.


I think I remember that big RSbuddy suit that started because of a photo of a veracs armbrace on the logo of RSbuddy or something stupid like that and the suit was for $100000 or something like that

jimbojambo

2014-10-21 21:03:09

From: toxjq
Hi so i was wandaring if having bots in java that uses injection script in your github account? Since its illegal can jagex penalize you for it? or if I say the purpose of this bot was only for educational purpose :D


Injection isn't "illegal," because it's not against the law to read and edit code. However, Jagex can sue people in civil court, and if they show that injection damages them somehow or constitutes misappropriation of their intellectual property (either because of the ToS or copyright), they can win. So you won't go to jail, but you could be exposing yourself to paying money damages.

Thank you for allowing me to use my law school knowledge for something useful. :) Sorry if this is a necro, I didn't think it was but I'm new here.

Brandon

2014-10-21 23:05:30

From: jimbojambo
Injection isn't "illegal," because it's not against the law to read and edit code. However, Jagex can sue people in civil court, and if they show that injection damages them somehow or constitutes misappropriation of their intellectual property (either because of the ToS or copyright), they can win. So you won't go to jail, but you could be exposing yourself to paying money damages.

Thank you for allowing me to use my law school knowledge for something useful. :) Sorry if this is a necro, I didn't think it was but I'm new here.


IANAL and I have no idea how powerbot does it.. but.. reverse engineering is one of the extremely grey areas.

It is actually against the law in some countries. Injection falls under reverse-engineering.. and that's not always legal. For example, DMCA circumvention is allowed in Russia but not in the US: http://en.wikipedia.org/wiki/United_States_v._ElcomSoft_and_Sklyarov

He didn't even have to use the crack. Just making it alone was illegal. He was allowed to crack the DMCA on Adobe's ebook and it was perfectly fine in his country. Wasn't fine in the US though.. and they ended up deporting him after a plea deal..

Geohot jail-broke the play-station-3. A device he bought with his own money. He published the hack and got sued by Sony (and no it did not contain any of Sony's code.. which you can find online through other means.. including his findings through anonymous mirrors). Had to agree to conditions that he never reverse another sony product again and to never post any findings on another sony product. http://en.wikipedia.org/wiki/Sony_Computer_Entertainment_America_v._George_Hotz


On January 27, 2011, Sony's request for a temporary restraining order (TRO) was granted by the US District Court for the Northern District of California. This forbade him from distributing the jailbreak, helping or encouraging others to jailbreak, and distributing information they've learned during the creation of the jailbreak.

They were even allowed to retrieve the server logs and ip logs of everyone who visited his BLOG..

This is the same guy that brought us iPhone jailbreaks.. there was no copy-right. At one point jailbreaks for iPhones were also illegal and "use at your own risk".. even though the device is your own. Did you know that games are only "leased to you" and not "owned by you"? Even though you bought it? It specifically says it on the back and in the EULA. A company has the right to take away a product you BOUGHT under the right circumstances.


There's another article that references the DMCA cases: http://www.computerworld.com/article/2585652/app-development/reverse-engineering.html

and it specifically says: "You're allow to reference engineer it for compatibility but not actually see if the software does what it is supposed to do".. In other words, you can't use what you saw. Hence why the phoenix company hired two teams of engineers. One that read the code, logged and passed on information to the second team that never read the code. This way, they can't say that the first team copied anything..

Secondly, injection requires that you break the cryptography put in place (if any).. and that in itself is illegal (see DMCA for example or OpenSSL's disclaimer about usage in other countries). Injection is legal only for compatibility/interoperability. SQL injection is always illegal without explicit permission. You can't prove that you had no malicious intent when injecting into a website "for security and learning purposes only".. The same "sometimes" applies to programs as well..

http://cyber.law.harvard.edu/people/tfisher/2005%20Blizzard%20Abridged.pdf Blizzard vs. BDNet.. "Programmers waive their rights when they agree to the EULA". The EULA specifically stated no reverse engineering allowed other than for interoperability. So private servers are/were illegal. They weren't just charged for copy-right. They were charged for reverse-engineering as well..

DMCA only has the following exceptions:

You lawfully obtained the right to use a computer program;
You disclosed the information you obtained in a good faith manner that did not enable or promote copyright infringement or computer fraud;
Your sole purpose in circumventing is identifying and analyzing parts of the program needed to achieve interoperability;
The reverse engineering will reveal information necessary to achieve interoperability;
Any interoperable program you created as a result of the reverse engineering is non-infringing;
[B]You have authorization from the owner[/B] or operator of the reverse engineered software or the protected computer system to do your research;
You are engaged in a legitimate course of study, are employed, or are appropriately trained or experienced, in the field of encryption technology.
You provide timely notice of your findings to the copyright owner.

I'd add another to that.. "If you can prove your program does not specifically target, alleged application, then it is legal (in some countries)".

P1nky

2014-10-22 04:07:28

They don't aim for small time users, who they usually aim for are the creators of the bot.
Bot away!

-P1nky