From: noidea
Can you copy paste what the post said, please?
From: RLN
I'll tell you.
First of all its important to note that when you login from the normal rs client hosted at runescape.com, there is a file called random.dat that holds 24 random bytes in it which are used to generate your unique ID. This unique ID is the identifier jagex uses in order to restrict users from logging in to multiple accounts from the same computer. Now.. to break down the fundamentals of how the unique ID is generated. There is a loader that jagex uses to load their client code which also does a number of other things.. including generating your unique ID. It is this loader that sets the unique ID, which is the problem here. When meatstick or whoever coded that piece of shit most of you use doesn't use the loader (or have any real detailed knowledge about how the client works), the values for the unique ID will all be 0 (a huge flag telling them the client the user is on, is not running the loader).
You may test this and see it for yourself. The login packet should be the 10th packet in the session.
Here is an example of what the packet looks like on the real client ( and A-POS :) ):
http://img130.imageshack.us/img130/4227/realrs.png Why will reflectionist get you banned?
The bytes I've highlighted are the unique ID.
Now here is an example of the login packet reflectionist generates:
http://img130.imageshack.us/img130/4329/reflectionistsucks.png Why will reflectionist get you banned?
There are even more traps that I won't detail here, happy botting!
Now.. click here to buy A-POS
« Last Edit: December 14, 2009, 02:44:28 PM by tedjohntj »
I believe this specific problem has been fixed by Meat in the last update. Also, I don't know if RLN is just grandstanding about additional problems or not, but either way, my RSC membership expired so I probably won't be trying Reflectionist or A-POS out anytime before any possible mass bans would occcur.
And if anyone else is interested A-POS has already been cracked, although RLN said that anyone who uses a cracked auth has their user + pass sent to him, but again, I don't know how true it is.
Hope that helps.