From: Yuskie
Not sure if I should start another thread,but I have a question related to "biometrics". I was wondering what exactly is this "biometric" antiban. Like are there readings for that or can someone explain a way to implement it?
I sort of have a rough idea about how it is, but I want to get a clearer understanding of how I could implement this if possible.
Biometrics as it applies here is the concept that every user has a unique footprint when it comes to mouse movement, keyboard usage, and a number of other mathematical traits.
The purpose of biometrics is to future-proof us from any sort of behavioral recognition system that might be implemented by Jagex in the coming years. These systems currently exist in high-level security outfits beyond the gaming industry.
Such a system would be able to immediately flag a bot program simply by the fact that its mouse movement and keyboard behavior were different from the original user's. It doesn't matter how human-like the bot program is. It doesn't matter how well the software is spoofing the official client. It's just behaving differently, so it's either a bot, or account sharing (which is also against the rules).
My main argument for my biometrics system is that it is useless to constantly suppose and debate about BotWatch's capabilities (every ban thread we launch into a detectability debate, when honestly, we have no idea what they do), and instead most effective to assume it is at maximum capability and can detect almost anything deviant from a legitimate human playing the game.
By following this assumption and creating biometrics (which perfectly recreates a user's unique computer usage behavior), we safeguard against any detection method.
This does not cover detection related to software/hardware and input methods, which is another arena that I hope is addressed by Simba's developers.
The system I am working on basically is a reverse engineering of current biometric lock software (which uses people's behavior as a password footprint). Instead, it records behavior and mimics it.
Recorded behavior will then be applied to a bunch of known psychological and physiological flaws in human-computer interaction, including impatience, forgetfulness, proximal task accomplishment tendency, and predictive error and response (need multi-threading for this, unfortunately, which I'm trying to look into).
People say this is overkill. Since most scripters are using basic pseudo-randomness and never getting banned, it is obvious that this sort of behavioral biometric detection doesn't exist in RuneScape. It is, however, the "end-game" botwatch system: if implemented, everyone is screwed. So I say it can't hurt to implement a system that fools their only possible end-game detection, and forever win the detection war (in this part of the arena, as mentioned, we still need to work on our software and input methods detectability).