SRL Archive - RS has been updated.

Hey everyone. I'm not entirely active with regards to posting or scripting in this community, but I am at others (one color, one injection), and the sad thing is that I feel most comfortable posting this proposal here first before the other places (one is pretty much dead, other too full of kids).

Anyways, Jagex has now changed their approaches to take on botting. Reporting basically does nothing 'major,' it's not necessarily going to get you banned, and Jagex basically has a heatmap of heavily botted areas (got this info from the second Q&A live-stream).

They've changed their approach also by not trying to 'break' the inflection bots code-wise, but rather utilize something they call the Bot Watch. This basically us an automated system that (somehow) can discern bot behaviour from human behaviour.

I've had plenty of experience coding for all types of clients, and I will say that in my opinion I think this is going to hit hardest on i) the horrible inflection scripts and ii) most colour scripts.

How are we going to approach botting after the Bot Watch goes live? What are we going to do to improve and (attempt to) perfect our ability to be fully undetectable?

We no longer will have the freedom to just evade being reported. This system will be IN the game code, and seeing as colour scripts have to rely on very fundamentally low-level logic to get things done, I'm deathly afraid that colour bots will be a lot harder to maintain.

I like colour more than inflection due to the challenge of using computer vision to create artificial intelligence. Yes, getting that extra GP is great, but this is a great hobby of ours that is at risk.

Will we need to change much? Will anti-ban be THAT much more important now? Should we have standardized (yet randomized) anti-ban's in SRL?

The upcoming development projects will probably have to heavily focus on mimicking human behaviour. With this comes accidental errors, less-than-perfect speeds, standing around for a brief few seconds (maybe you were taking a sip of water?), not clicking within the same rudimentary 50 by 50 pixel square, recognising models rather than shapes and colours, mouse movements that may be predictable at times, mouse movements that may be sporadic at times.. there's just so much. I feel like the framework is there, and if this stuff isn't already fine tunes enough, we have plenty of people willing to do the research and put in the time to make something greater than ever.

What do you guys think? Where is SRL headed with the Bot Watch system cracking down on bot-behaviour rather than being based on reports or breaking the game's code?

I foresee a hell of a lot more private scripts. If their livestream is to be believed, releasing things public won't be the best idea for scripters.

Hard to say until it all goes live and we can test it out

As of this moment people from SRL are experimenting with many different types of anti-ban and randomizing methods.
Believe me, Color is not always "Low-level Logic" as you seem to think, Some members here do some amazing things with a simple color..

From: John
As of this moment people from SRL are experimenting with many different types of anti-ban and randomizing methods.
Believe me, Color is not always "Low-level Logic" as you seem to think, Some members here do some amazing things with a simple color..

You seem to misunderstand what I meant by low-level logic..

Color is by far the most difficult to write anything for. The framework of colour bots have to start with pixel by pixel recognition, which is a very low-level task in terms of writing a script to do something much more advanced. Inflection bots, once they get past the hooks, can basically be written with every little thing in the interface and worldview as an object. Just say click that object and it does. Colour is not that simple.

Thanks for the input & opinions, Waffle.

I'm fully confident to say SRL has adapted, to mimic human-like behavior, at a rapid rate in the past year (or two perhaps). I believe that it was partly due to the incoming crowd from the previous bot nuke; bringing in new talent & and ideas. We've worked very well putting our minds together to progress.

Our scripts have steadily become more random over time, actions performed are usually randomized to an amount. A large amount of Anti-Ban routines have been brought to the table recently, anything that normal player might randomly do while playing Runescape. Even down to the bare bones; mouse movements are now available in many styles, and reflect realistic movements.

Our downside is, IMO, a solid auto-responder. It's something we can and should work on, but indeed it's difficult to create and function correctly.


Anyways, we're constantly developing here, that's the wonderful aspect of an open-source community like SRL: everyone is welcome to come and take part. Indeed we'll need to up our scripts to stay off the radar, and believe me when I say some of us are working on this very thing at this very moment. ;)

Indeed. This new model is what they should have made a long time ago. It seems now that the-minute-they-monitor-after-you-are-reported is replaced by a continuous stream of analysis. Yes, this is bad. But I am more worried about other communities at the moment. We have always tried to persuade our userbase to write their own stuff, utilising the SRL library that has enough variation to in itself be not recognised as a bot. We have always encouraged scripters to take breaks and make mistakes. But noone has done this just yet since there was no real need to do so. Jagex simply didnt analyze anything, Uptil now it just recieved the pixel clicked on and its color. Only once reported, it recorded one minute of "activity", whatever that might have ment. Remember, all banning is done automatic! No human behind a checkerboard switching players on or off. just an algorhitm. And i know, because I have been woriking around it for 8 years :)

So, while I will not go any further into their new system here as everybody can read this, I will advice you two things: 1. Never run a bought script anymore. 2. Use the regular client, unsigned.

Are you saying ditch SMART? How about using a program to open RS and SIMBA and use a virtual mouse?

yeah. Flight has made AMAZING contributions to SRL, with the BrakeMMouse, WindMMouse, I believe, and several others. It is amazing what he's done. For this, I say thank you, Flight. You've helped us in the long run.

From: WT-Fakawi

So, while I will not go any further into their new system here as everybody can read this, I will advice you two things: 1. Never run a bought script anymore. 2. Use the regular client, unsigned.

Unsigned mode does not exist anymore.

From: litoris
Unsigned mode does not exist anymore.

True, me bad.

So WT-Fakawi your saying, if we make a script keep it private? Until we get better methods?
Mat

What is unsigned mode?

From: WT-Fakawi
…We have always tried to persuade our userbase to write their own stuff, utilising the SRL library that has enough variation to in itself be not recognised as a bot. We have always encouraged scripters to take breaks and make mistakes. But noone has done this just yet since there was no real need to do so…

WT, there are actually quite a few functions floating around here that "make mistakes". I myself created a pretty human dropping procedure for my private scripts. I took a video of myself playing runescape and used SCAR to record my mouse positions and clicks while dropping at a pretty fast speed for humans. I tried to emulate my misclicks and such. Idk if it's human or not but it's pretty fun trying :)

From: BMWxi
What is unsigned mode?

un-signed mode is no longer available AFAIK.
It was a java option

From: footballjds
WT, there are actually quite a few functions floating around here that "make mistakes". I myself created a pretty human dropping procedure for my private scripts. I took a video of myself playing runescape and used SCAR to record my mouse positions and clicks while dropping at a pretty fast speed for humans. I tried to emulate my misclicks and such. Idk if it's human or not but it's pretty fun trying :)





un-signed mode is no longer available AFAIK.
It was a java option

Thanks. And does WT think we should stop using smart?

From: BMWxi
Thanks. And does WT think we should stop using smart?

I'm running in smart atmo, on my 6th Acc.
Mat

From: Mat
I'm running in smart atmo, on my 6th Acc.
Mat

Do keep us posted as for now we have to be pretty much on the lookout

they WILL do something to break injection btw, atleast that's what I've read on the rsof stream transscript.

From: LemonHaze
they WILL do something to break injection btw, atleast that's what I've read on the rsof stream transscript.

That's a given with every update, but their main focus isn't to try and break them anymore.

private scripts will rise. honestly, im not worried about this due to all my private scripts being very human-like (at-least compared to how i legit it). and i even developed a bot-to-bot communication via pming with random conversations ranging from getting a new phone, to the rigors of college. as far as human-like botting goes, SRL can easily remain undetected: its all about the scripter. and flight has AMAZINGLY human mouse functions (i wish these would be officially added to srl if they have not already). so i dont see SRL dieing anytime soon, but i do wonder how good this new bot detection system actually is

I'm normally on the xbox or something while botting anyway so I guess I could let simba use my mouse for now. >.<

The only problem I have with giving up my mouse is that other people need to use the computer and that doesn't work without smart.

From: BMWxi
The only problem I have with giving up my mouse is that other people need to use the computer and that doesn't work without smart.

Get a virtual machine

I'm curious to see how this will all work out in the future, pity that I had to start playing again around the same time they are making all these challenges for botting…

From: litoris
Get a virtual machine

Still has to have input from the mouse..?

No, its a window on your computer with its own mouse. Just like SMART, except you can run anything in it.

Does anyone know what the problem with using smart is though?

Its not 100% confirmed, but people say Jagex can spy on your computer at any given time. This means seeing that you are using SMART and simba. If they spy on you and see SMART on and simba, Its banhammer time. Thats why you should bot in the client for now, and if you really want to be careful, change simba's name to something else, and change the icon if you know how. :D

I heard blizzard does that, no reason for jagex not to I guess.. but if they did that why would they need any bot detection software? Just look at your desktop if you get reported. And if this is the case running rs in a vm wouldn't help anyway because the could tell it was minimized or that you were on facebook while supposedly mining ect. unless i'm missing something.

If they can tell where your mouse is even when its off the RS client, then my MouseoffScreen function that moves the mouse 50 pixels off the game client is pointless… Gaaawsh Jagex! Stop making everything so complicated!

From: Footy
If they can tell where your mouse is even when its off the RS client, then my MouseoffScreen function that moves the mouse 50 pixels off the game client is pointless… Gaaawsh Jagex! Stop making everything so complicated!

Just noticed your new avatar :D, but is it supposed to move? It looks like it should but it's been a few minutes…

OT: That's some smart anti-ban! and I don't know if it can see your mouse off the java client. If it can't maybe we could get ben to dress up smart like the official client :)?

Good idea! It's not my idea, I believe someone did it in the past, I just couldn't find the function, so I rebuilt it. We should ask ben to do that, not sure if Jagex would buy into it though… My avatar is supposed to move, but I dont know how to make it. :p Waiting for vin or someone else to show me how.

I think first it would be a good idea to find out as much as we can about jagex's capabilities.
Step 1: Suicide a nub account and collect data.
Step 2: If nub account banned quickly, step 3. If not, continue suiciding.
Step 3: Do the same quick ban activity legit, but still have smart and simba open. If banned, they have shown their hand and we know they watch our desktop.
Step 4: If they don't watch our screen: Find areas off the heatmap and create script
If they do? Be afraid.

I don't think they watch your screen..
Don't you think it would be wrong if they watched you swapping between RS and and a Skype call, It'd be more like stalking.

We need to focus on making our scripts more human, making them create mistakes themselves and fixing the mistake accordingly.

Screen watching is just speculation. Nothing more.

From: John
I don't think they watch your screen..
Don't you think it would be wrong if they watched you swapping between RS and and a Skype call, It'd be more like stalking.

Screen watching is just speculation. Nothing more.

Well they don't have to watch your screen, if they were to monitor your computer I imagine they'll just monitor your running processes.

From: John

We need to focus on making our scripts more human, making them create mistakes themselves and fixing the mistake accordingly.

Yep, that's also what we should be focusing on.