I was curious, so this is mining a single inventory of ess.
Human or robot? Either way, I say it's art.
e: killed some roaches too
Jagex will never be able to handle my fabMouse();
I was curious, so this is mining a single inventory of ess.
Human or robot? Either way, I say it's art.
e: killed some roaches too
Jagex will never be able to handle my fabMouse();
Last edited by Citrus; 12-13-2015 at 04:09 AM.
Clicking is simply one aspect of biometric analysis. I was simply giving one example. Biometric analysis involves things such as movements, speed, variance, frequency, and other factors that can be measured at run-time. Every human has their own unique style, which is not limited only to clicking.
I think you're mixing up randomness with variability. In statistics, the definition of random is, "of or characterizing a process of selection in which each item of a set has an equal probability of being chosen." Based on this definition, the biometric behavior of humans is not random. In statistics, the definition of variability is, "The extent to which data points in a statistical distribution or data set diverge from the average or mean value. Variability also refers to the extent to which these data points differ from each other. There are four commonly used measures of variability: range, mean, variance and standard deviation." Whether variability is already in use here is irrelevant, as my main point is the difference, definition, and correct usage of these words.
Whether anyone here takes my mouse movement statement seriously or not, I really don't care. Believe it or not, again, I don't care. What I know is considered to be sensitive information and revealing details would place my source at risk legally. All I can say is that mouse movement analysis capabilities do exist within Jagex, and that they have a set protocol on when it is appropriate and acceptable to use it. Most bots in-game will never experience this technology, but given that there is no way to eliminate the risk of it being used, the importance of pushing innovation and becoming more advanced than is absolutely necessary in the botting industry cannot be understated.
I've always loved that iPhone 4 video, I watch it every time a new iPhone comes out!
I used to be a big proponent of biometrics in my early time here. It sounds great in theory.
The point here is not whether they track mouse movements, but that the biometric selling point of RiD is dishonest because Jagex can easily detect whether the mouse movements are real, or generated by RiD. You could have the best biometrics in the world (and to be sure, RiD's are very cool), but it wouldn't matter if Jagex really wanted to detect you.
RiD has still not addressed this detail. If he implements a way to emulate real mouse and keyboard events that are undetectable, combined with biometrics, I will be interested. @Brandon; had a nice post somewhere about detecting fake events.
Don't worry about your secret source, their tiered detection system has been apparent since day 1 of BotWatch.
Last edited by Clarity; 12-13-2015 at 09:12 PM.
Scripts: ClarityNex | ClaritySlayer | ClarityElfThief | ClarityBurialArmour | ClarityMudRunes | ClarityWells | ClarityProTables | ClarityArmadyl | ClarityHarps
ClarityDominonTower | ClarityAltar | ClarityCitadel | ClarityBarrows | ClarityEsswraith | ChampionScrollCamperTools & Extensions: OpenGL ID Highlight Tool | SRL-6 Messaging System | SRL Companion | Item DTM Generator | BBCode Converter
Last edited by Brandon; 12-13-2015 at 03:58 PM.
I am Ggzz..
Hackintosher
I might be able to help with this.
I've decompiled an 803 version of their client (not completely, but mostly), in class464_sub1 there's a method 10687.
The client transmits data to a server (jagex servers obviously).
If you're able check out that method 10687. You'll see packet writing about mouse information.
As well as Class580_sub1 "mouseevent.getClickCount(), -909947024" it's all over, if you want to add my skype I'll be happy to show more info.
there's about 100 or so instances where the mouse and keyboard is transmitted through packets.
You can see a packet is writing the time + mouse (correct me if i'm wrong)
Last edited by Lucidity; 12-13-2015 at 04:35 PM.
Tsunami
Isn't #803 two years old now?
#slack4admin2016
<slacky> I will build a wall
<slacky> I will ban reflection and OGL hooking until we know what the hell is going on
Because your programs are allowed to hook functions. Jagex already has hooks installed every time the client starts. SetWindowsHookEx is being used but the callback is empty.
It isn't illegal for them to use it. Just like Blizzard, they can add it to their TOS and say if you don't like it, don't play. It's just as legal as you having a bot that bots their game. They have the right to defend said game. I doubt they even have to add it to their TOS. They can already collect mouse data via Java. Hooking their own game is no big feat. It's only a big deal because it's one of the only ways to detect Simba and RID since neither loads the client (without something like SMART). Again, why other hooking your mouse or keyboard when you can just monitor processes like Blizzard does.
As for the "They send mouse calls to the server".. Of course they do. How else are they supposed to know where you clicked on an item? How are they supposed to know who clicked on what item first? That's the reason for sending the time along with it. However, what they do with this information is only known to them and there's no point speculating. They only send clicks.
The same way they send what you type to their server, they send your mouse clicks. However, what they do not send, is whether or not the mouse input is virtual or hardware.
Secondly, no one other than RID uses Robot to click. Everyone else loads the client. If they wanted to detect you, mouse detection, ip detection, all that other crap would be a last resort.
Powerbot still got us all banned even after they added all the mouse crap. IIRC, there were 250+ pages of bans (10 - 20 bans per page).
Last edited by Brandon; 12-13-2015 at 10:42 PM.
I am Ggzz..
Hackintosher
Covered in above posts ^
But seriously, when I asked about mouse detection in the RiD chatbox three times recently (and staff did see the questions, they were talking around them), I was either ignored or the question was skirted. That suggests that either they don't know the answer or don't care about the reality because it delegitimizes one of the product's main selling points. If they don't know the answer, I hope they look into it at least.
I'm not attacking RiD's innovation, I love innovation. I just feel that his efforts are critically misplaced - he should be developing indistinguishable hardware input simulation rather than focusing on fancy mouse movements. The fancy mouse movements can come AFTER he creates a solidly undetectable mouse and keyboard setup.
But being a business and all, I'm not surprised he goes the route that looks the best to his potential customers.
This conversation also assumes that Jagex is even trying to ban us, which is a whole separate debate...I personally feel they have no business incentive to bother dealing with us* at a serious level. This has a funny effect of making us think we are somehow undetectable, when we really are, with any actual effort.
*By "us", I mean SRL and RiD, the 1% of botters out there.
Last edited by Clarity; 12-13-2015 at 11:18 PM.
Scripts: ClarityNex | ClaritySlayer | ClarityElfThief | ClarityBurialArmour | ClarityMudRunes | ClarityWells | ClarityProTables | ClarityArmadyl | ClarityHarps
ClarityDominonTower | ClarityAltar | ClarityCitadel | ClarityBarrows | ClarityEsswraith | ChampionScrollCamperTools & Extensions: OpenGL ID Highlight Tool | SRL-6 Messaging System | SRL Companion | Item DTM Generator | BBCode Converter
Oh My! ^
Tsunami
So I guess my question is how would virtual vs. hardware mouse/keyboard detection be done?
In regard to monitoring processes, and keep in mind I haven't looked too far into this topic, and it's been a long while since I've discussed it, but to my knowledge javaw.exe processes are fairly common, even outside of botting. Also, due to the way that Genesis works, the memory signature of each user would be different, since every user makes and runs their own bot and develops their own calibration session. I vaguely remember this topic from when someone was discussing using Genesis on WoW, and their worry in regard to WoW's process monitoring system. I believe that the ultimate verdict was that Blizzard's Warden wouldn't be an issue for something like Genesis. Now again, it's been ages since I've delved into this topic so forgive me if my verbage is off or if there are inaccuracies in my statements.
Well to be honest most RiD users don't really understand much about the technical side of things, and the staff are not chosen based on their technical knowledge, but on their helpfulness and their community management skills. This is because RiD is the only developer so there's not much of a need or requirement for staff who are heavily knowledgeable in Computer Science (altho a few of them recently entered uni for this kind of thing).
Ultimately, I'd say that RiD has his own priorities, as well as a view of the big picture which most people never see, and regardless of which is truly the best order of priorities, there's not much anyone can do to sway him. I could be wrong, but I think a big reason for him avoiding the detection of virtual vs hardware input is simply because he views other areas to be more important for his time and effort, especially given that Jagex has never done anything in the area of detecting virtual vs hardware input to ban users. Now, if Jagex decided to do so, I'm confident that RiD would turn the bots off, drop everything on his plate and focus on a solution for such a problem. I think his priorities are just elsewhere right now, and honestly, having known him closer than most over the years, it's really difficult to know what's going on in his head and what direction he's trying to take his bots.
Sorry @Clarity; - if I could answer that question regarding mouse and keyboard input, I would. However I think only RiD himself has the knowledge on our forums to answer that.
I think that's a strange thing to say in an RiD thread, specifically about Genesis. Besides, I don't really see a lot of fanboys praising it. A lot of relevant discussion however. *shrugs*
LOL! Relevant:
By the time he learns what boolean logic is and all the programming knowledge required, he'd be writing his own scripts.
@Trent!; You don't need to read JVM signatures to detect a Java bot that does NOT load the client (external client like Simba). Just use Java's JNI api and attach to the JVM.. http://stackoverflow.com/questions/2...dy-running-jvm with that, you can do whatever you want. Find class files known to that bot (which certainly does NOT change between users), etc..
This is Windows. Anything is possible because the security is absolute garbage compared to Linux and WinAPI allows full access to pretty much everything (SetWindowsHookEx and the likes wrecks everything). The only problem for Jagex is the law. But I'm sure they can work around it just like Powerbot and many bot makers work around it.
Anyway, let's keep the thread on topic. Leave the detection stuff and theories to another thread.
Last edited by Brandon; 12-14-2015 at 02:35 PM.
I am Ggzz..
Hackintosher
Last edited by slacky; 12-14-2015 at 03:49 PM.
!No priv. messages please
Why close this thread? I found this really interesting and informative to read. previously i didnt even know that theres a difference between hardware and digital clicks. Please keep the gems coming ;d
I have a very unique playing style for certain skills, and once Genesis supports movement I will record a video of my bot running. I feel like the results will be very distinct compared to how typical bots behave and will be a good example of the biometric aspect of things.
Last edited by KeepBotting; 12-14-2015 at 05:15 PM.
GitLab projects | Simba 1.4 | Find me on IRC or Discord | ScapeRune scripts | Come play bot ScapeRune!
<BenLand100> we're just in the transitional phase where society reclassifies guns as Badâ„¢ before everyone gets laser pistols
There are currently 2 users browsing this thread. (0 members and 2 guests)