SRL Archive - Bot Information and Spottings

Jagex checks.. what?! Test ideas.


lollage22

2009-07-22 14:10:20

Ok, so lately we are scared for getting banned. Actually, we always are! We could be securing our botting by knowing whát jagex records and detects. I opened this thread to create a fair discussion in a rational, but more important, constructive way. To start off, I'll give a first example.

When i didn't know about SRL at all, but I did want to build an autofighter, i had constructed a way of finding NPC's. I did this in the following way:


repeat
while not(findcolortolerance(x, y, uptextcolor, 0, 0, 80, 80, 20)) do
begin
r1:=random(511);
r2:=random(333);
movemouse(r1,r2);
wait(50);
end;
clickmouse(r1, r2, true);


wait(9000+ random(2000));
until false

That is, move the mouse randomly over the mainscreen until the uptext shows a text in a specific color: the very well known NPC-yellow..

The point in this code is: how will Jagex ever detect movemouse? i could use movemousespline or stuff like that, but personally i think jagex really doesn't care about how you get your mouse from a to b. Imagine over 100 k people online, registering how they move the mouse. That would be a massive load of data to store and analyse.

In how I see it, jagex stores information about what is happening with your account: to what spot on the map you walk to etc: events in the world of runescape itself, engine information. the client is only a way to make the calculations of the engine visible to us.

To start up the discussion: do you have any idea to test and inventarise the several ways that jagex uses to detect scripters? personally, I think they just search for botty behaviour, and when they watch you, thén the information about how you are using the client is being used.

ShowerThoughts

2009-07-22 14:12:52

They are able too, and it wouldn't cost much to implant it in their system.

Runescapian321

2009-07-22 14:19:19

I think they hardly collect much data at all. When I used to have a pure ess mining army, for example, some would get banned (10-days back then) after a week of 24/7. Then there were a couple accounts which never got banned for the ~month I used the army. It appears random, but I'm guessing they depend a lot on failed randoms, and also player reports. How player reports help them is another story. Possibly they start monitoring you (continuously or for a short period of time) after you've been reported. This would be a win-win for them, seeing as their goal is to please the players, and if they're keeping the amount of data they're collecting low, while still banning all the bots that people notice (and report), they would be both pleasing the players and not using a ton of resources to figure out who's botting and who's not.

ian.

2009-07-22 15:05:28

They monitor your account if it's reported. Calm down, and auto smartly (pay attention when you auto). :) (Not saying you were acting concerned, just telling other people).

marpis

2009-07-22 18:05:34

When i was writing a woodcutter script, it went insane and moved the mouse around rapidly (going through every green pixel on a tree) and then at the same time i got a random event. coincidence?

Daniel

2009-07-23 10:05:26

Hmm

What if you had a touch screen monitor? Mouse moving would be instant, no? Clicking would be instant, no?

OR…

you were using your keyboard to navigate your mouse.

ZaSz

2009-07-23 22:17:44

[QUOTE=Dan's The Man;605801]Hmm

What if you had a touch screen monitor? Mouse moving would be instant, no? Clicking would be instant, no?

OR…

you were using your keyboard to navigate your mouse.[/QUOTE]

java can read that stuff, so touchscreen pc = autoers delight

lollage22

2009-07-24 00:59:48

So we have now:

- Jagex is checking mouse movement properties (Hermen)
- Without attention, (merely) no info is gathered at all (Tad)
- Attention is drawn by Player reports (Tad)
- Attention is drawn by random events (Tad)
- Weird mouse movements triggers random event (marpis)

@ Hermen: do you have any "evidence" or reasoning to make this assumable?

@ Tad: Yeah. Most persumable. How do we circumvent getting into attention? Antiban/Antirandom is just a solution to the existing problem, but we are on strategical level here…

@ Marpis: Some finding routine involving weird mouse behaviour would be a way to check whether jagex does anything with that information. Did you run the script more often, did it always trigger a random event? I've run my script (first post) several times, no ban.

@Ian: I do not pay attention when I auto :P I like to run it during my sleep. "Auto smartly" sounds like a contradiction to me.

@ ZaSz: Hey, we might have something here. Can't we just simulate a machine into our physical computer, with touchscreen properties, wherefrom we can run our bot? Doing this will blur the information a java client takes from the PC, since it takes it from an emulated one…

Thanks for the input, keep it going!

ian.

2009-07-24 01:05:40

Attention isn't drawn by random events, random events are drawn by attention. (That goes along with what marpis said) and "auto smartly" means that you care about not getting reported/banned. All you have to do is check it once in awhile. PM someone, buy something, something random that you do, then go back to autoing. That's how I never get banned. :p And I use scripts that are usually around 10 lines.

Runescapian321

2009-07-24 01:12:25

From: 99_ aka ian.
Attention isn't drawn by random events, random events are drawn by attention. (That goes along with what marpis said) and "auto smartly" means that you care about not getting reported/banned. All you have to do is check it once in awhile. PM someone, buy something, something random that you do, then go back to autoing. That's how I never get banned. :p And I use scripts that are usually around 10 lines.


EDIT: Oh, I assumed you meant you get random events only if you're suspected :p
I disagree. I think random events are what their name tells us… random. For example, when I was running my fletcher in the randomless Soul Wars, leaving Soul Wars after about 2-3 hours triggered a random event 90% of the time. Leaving after less than 2 hours never triggered a random. If random events were triggered only on suspicion

1) Legit players would get very little, if any, randoms
2) I would have received random events every time I left, not only after longer periods of time

Of course, additional random events might be triggered if you're suspected of being an autoer.

ian.

2009-07-24 01:19:16

Randoms are more attracted to accounts with attention, but they're also RANDOM. ;) They don't come 100% of the time if you're reported/something.

in b4 You don't know that.

Runescapian321

2009-07-24 01:23:22

From: 99_ aka ian.
Randoms are more attracted to accounts with attention, but they're also RANDOM. ;) They don't come 100% of the time if you're reported/something.

in b4 You don't know that.


Oooh. Now I see what you were saying :p

- Attention is drawn by random events (Tad)


I think that should be

- Attention is drawn by failing random events (Tad)


:)

lollage22

2009-07-29 16:09:56

oh, that's right. *agree*

Seroko

2009-08-07 10:39:20

Contributing, I decided to dump a bunch of colors into an array and did it super quick and simple moving the mouse a lot, was the first time i logged on that account in a year, week later it was banned. Moving 1 pixel at a time over a box very quick will get you banned obviously, so they track mouse movement a lot.

cycrosism

2009-08-13 17:26:57

I made a really crappy power cutter which I never released and I can tell you in the 15 hours I botted I got 11 random events. Weird huh?

I used my well constructed Drain Willows script and I got no random events during the 8 hours I ran it.

So…… yea

XPunk_CarlX

2009-11-28 09:26:27

From: cycrosism
I made a really crappy power cutter which I never released and I can tell you in the 15 hours I botted I got 11 random events. Weird huh?

I used my well constructed Drain Willows script and I got no random events during the 8 hours I ran it.

So…… yea


As long as we create good bots that act like players and not bots, we should have little chance of getting banned, and there is always ban appeals saying that you have to use voice recognition software to control your mouse and keyboard. If only we could contruct a bot that had AI.
But I have something to add to your discussion, I can attest for myself that jagex does track mouse events the most, and it is a huge record, for a moment, until it gets parsed. They have a parser that analyzes mouse movement, this parser decides whether it thinks that you are a bot or not. If it thinks your a bot, you get banned, once you appeal, the information gets revieved by a J-Mod and you either get perma banned or unbanned. When people are reported, there mouse movement gets sent through, you guessed it, this parser. This is why people who use BAD bots get banned. People who use good bots get banned too, but rarely, because they act HUMAN. So, if you don't want to get banned:
  • Use good bots
  • Don't get reported
  • Think of REALISTIC ban appeals

The detection system will never change, and we'll never be able to beat it.

noidea

2009-11-28 09:44:10

From: XPunk_CarlX
The detection system will never change, and we'll never be able to beat it.


Thats not what Jagex thought a while ago ;)

XPunk_CarlX

2009-11-28 09:47:30

From: noidea
Thats not what Jagex thought a while ago ;)


This is true, we will always have break-throughs, of course. I'm not trying to discourage this thread or anything like that. Its just my opinion. Anyway, Jagex is a multi-billion? Dollars corporation. We are a forum community. Sure if we all put our heads together we can achieve some great things, but we'll never be able to match the power of the corporate machine. This is just my $0.02 cents.

weequ

2009-11-28 13:51:45

I think that you have smaller change of getting banned if you use IE or firefox than using smart :S

Edit: Btw I was never banned for using scar with mostly my own scripts xD.

gelloxor

2009-11-29 13:49:56

From: antti mies
I think that you have smaller change of getting banned if you use IE or firefox than using smart :S


Yea i have been thinking about that too… so how undetectable smart is ?

And what I have learned is that the bad guys are always step ahead of the good guys :D

Heavenguard

2009-12-04 18:15:10

Hey what a fun thread :D
Anyways, I understand how "strategical" were getting here, were basically narrowing down the things that jagex does to make our percentage of getting banned go down significantly, but I (personal comment here remember I <3 all of you and dont mean this in any type of let down or attack) do not think this forum is ready for this step exactly. I mean, What we could do is put together a list of functions set to counter the weaknesses of jagex's system. We have this power. Thats Our strength. Sure, we have anti randoms which lower the percentage of banning by a lot. Same thing with random movements, but we could start collaborating(putting together) our functions and testing them to see how well they work. A lot of this has been done already, but most of the time that I see a person get banned in RS is due to carelessness.

A script is a script, its our duty to improve it, NOT overuse it.

FEAR

2009-12-05 12:47:15

From: gelloxor
Yea i have been thinking about that too… so how undetectable smart is ?

And what I have learned is that the bad guys are always step ahead of the good guys :D


They can't detect weather you run it in Firefox or SMART. If you ran RSBOT then yea they can detect that because RSBOT injects stuff. But SMART is just like RS normal client. It doesn't change anything and so Jagex cannot detect it.

wesleyxD

2009-12-05 13:07:47

From: FEAR
They can't detect weather you run it in Firefox or SMART. If you ran RSBOT then yea they can detect that because RSBOT injects stuff. But SMART is just like RS normal client. It doesn't change anything and so Jagex cannot detect it.


rsbot is safe i botted 3 99 with it just depense on the script and how you bot.