Results 1 to 12 of 12
  1. #1
    Member sspamfilter's Avatar
    Reputation
    3
    Join Date
    Jul 2012
    Posts
    23
    Thanks G/R
    0/0
    CoreCoins
    0
    Trade Feedback
    0 (0%)

    If I Worked At Blizzard, Could I Detect Your Bot?

    This is sort of a redesign of my original thread, and it's intended to inform bot-makers of the possible ways to detect bots.
    This is not a list of ways Blizzard is currently detecting bots. This is a list of the ways Blizzard could detect bots, if it decides to do so. The purpose of this thread is to inform any new bot-makers of the types of things to consider when making a bot. The list is in no order and all things should be considered equally. This list is especially important if you want to use terminology that suggests your bot is impossible to detect, hard to detect or undetectable, or if you are charging for your bot. It makes several assumptions of the capabilities of Blizzard, which is based on real-world database and service hosting and management.

    All player modifications like bans, all item modifications like nerfs, work in a couple of steps. One of them is the database query, which allows you to crawl through the database and find a list of items, players, monsters, etc, which meet certain criteria.

    If I Worked at Blizzard, Could I Detect Your Bot?

    Q: Do you require that players have only certain skills?
    Yes: This makes detecting your bot easier. While this alone won't do the trick, it can act as an important part of the database query. See the next question.
    No: Good, because bots should not tie users to skills. At the very least offer a few configurations.

    Q: If you Answered yes above, do you require that the skills be assigned in a particular order?
    Yes: You are making this much easier for me. Now all I have to do is come up with a few more items and my query is complete.
    No: Well requiring certain skills in any order is not enough to ban alone, though it is still useful information for me.

    Q: Do you require any specific bindings in the game's options, such as move -> mouse3 ?
    Yes: Well that's great to know. So now I know anyone who has that key bound is suspect.
    No: Well I guess you've managed to dodge this bullet.

    Q: Does your bot do only one thing, such as the same boss over and over?
    Yes: Great, because practically no human can reliably keep this up game in and game out over the span of many hours. You are acting suspect.
    No: So you are not only doing a boss, but you are doing another boss, and repairing, and stashing, and going into the auction house and sometimes doing nothing? Well that looks very much like a human to me.

    Q: How many games per hour are you making?
    20+: Well guess what, that's very rare for a human.
    0-10: Sounds like a human to me.

    Q: How long is each game that you are playing, on average?
    0-10 minutes: No one who plays this game in a normal fashion will mix this amount of time with a few other positive answers.
    10+ minutes: Seems like a reasonably human entity.

    Q: Are you doing the exact same things every game, in the same order?
    Yes: Really? Sounds like a computer to me.
    No: Human I might guess.

    Q: Are you posting things into chat, which come from a list of certain phrases?
    Yes: Great, that makes my search much easier.
    No: Good, because that's what bots do.

    Q: Are you changing to the same quest and running it over and over and over?
    Yes: Looks like it might be a bot!
    No: OK, that's more normal.

    Q: Are you clicking things an exact amount of milliseconds in between each other, every game?
    Yes: Seems strange.
    No: No human could do that.

    Q: Are you playing 24 hours a day?
    Yes: Weird, seems only a computer could do that.
    No: Normal people don't do that without eventually dying.

    Q: Did you design your bot for maximum efficiency, or for maximum realness?
    Efficiency: Your behavior will tend to be more obviously a bot.
    Realness: You are hard to detect.

    Q: Whatever you do, is it constantly making patterns of behavior which go uninterrupted for some time?
    Yes: Just like a bot.
    No: Then how can I tell you're a bot?

    Q: Are you altering memory or program files of Diablo?
    Yes: As your bot gets more popular we will ban it.
    No: Smart.

    Keep in mind almost none of these things are enough for me to pinpoint you as a bot. But 2+ of them make you more likely to be able to be detected, if I worked at Blizzard.

  2. #2
    🐸 CoreCoins User Jadd's Avatar
    Reputation
    1295
    Join Date
    May 2008
    Posts
    2,282
    Thanks G/R
    71/179
    CoreCoins
    902817
    Trade Feedback
    0 (0%)
    Heuristics? If you want to detect a bot there are much more simple and effective ways. Blizzard definitely won't hire you for this, lol.
    I'm not a trade moderator. Please don't message me regarding trade threads, you will be ignored!

  3. #3
    Member sspamfilter's Avatar
    Reputation
    3
    Join Date
    Jul 2012
    Posts
    23
    Thanks G/R
    0/0
    CoreCoins
    0
    Trade Feedback
    0 (0%)
    Hi Jadd, It's no more difficult than anything else: it's a simple database query. If the information is being tracked, it's just a simple one-liner. I don't want a job at Blizzard, they have low pay.

  4. #4
    🐸 CoreCoins User Jadd's Avatar
    Reputation
    1295
    Join Date
    May 2008
    Posts
    2,282
    Thanks G/R
    71/179
    CoreCoins
    902817
    Trade Feedback
    0 (0%)
    Quote Originally Posted by sspamfilter View Post
    Hi Jadd, It's no more difficult than anything else: it's a simple database query. If the information is being tracked, it's just a simple one-liner. I don't want a job at Blizzard, they have low pay.
    Really? Heuristics is a dangerous thing to mess with if you're only trying to detect 5% of millions of players. If you make one simple mistake, you'll probably ban twice as many legitimate players. Imagine Blizzard trying to sort through all of that...

    How about updating Warden instead? It would be MUCH more effective, and it will only ban with a good reason to.
    I'm not a trade moderator. Please don't message me regarding trade threads, you will be ignored!

  5. #5
    Member sspamfilter's Avatar
    Reputation
    3
    Join Date
    Jul 2012
    Posts
    23
    Thanks G/R
    0/0
    CoreCoins
    0
    Trade Feedback
    0 (0%)
    Hi Jadd, Queries generate lists of matching (rows, etc) from your SQL/nosql joins/other logic. Warden can't detect randomly named exe files that are doing pixel-detection unless there is something else to scan. Also having one type of detection be better than another doesn't make the lesser one negligible, in my eyes. Bots can be made that avoid ALL these methods.

  6. #6
    🐸 CoreCoins User Jadd's Avatar
    Reputation
    1295
    Join Date
    May 2008
    Posts
    2,282
    Thanks G/R
    71/179
    CoreCoins
    902817
    Trade Feedback
    0 (0%)
    Pixel searching bots aren't worth detecting, lol.

    Assembly injection? API calls/hooks? Stack traces? This is much more worth Blizzard's time and will catch bigger and better bots, or at least slow them down.
    I'm not a trade moderator. Please don't message me regarding trade threads, you will be ignored!

  7. #7
    Member sspamfilter's Avatar
    Reputation
    3
    Join Date
    Jul 2012
    Posts
    23
    Thanks G/R
    0/0
    CoreCoins
    0
    Trade Feedback
    0 (0%)
    Hi Jadd, most bots in existence now are pixel-based, and have been since Warden's introduction to the Diablo world, that I know of. Since injection and program manipulation is both easy for them to identify and not generally done by novice bot-makers, I've only included one section for it.

  8. #8
    Elite User CoreCoins User Authenticator enabled Master674's Avatar
    Reputation
    479
    Join Date
    May 2008
    Posts
    572
    Thanks G/R
    2/22
    CoreCoins
    420
    Trade Feedback
    1 (100%)
    <something used to be here... its gone now>
    Last edited by Master674; 10-15-2012 at 01:51 PM.

  9. #9
    Contributor who knows's Avatar
    Reputation
    103
    Join Date
    Nov 2007
    Posts
    284
    Thanks G/R
    0/0
    CoreCoins
    16
    Trade Feedback
    0 (0%)
    Quote Originally Posted by sspamfilter View Post
    Hi Jadd, most bots in existence now are pixel-based, and have been since Warden's introduction to the Diablo world, that I know of. Since injection and program manipulation is both easy for them to identify and not generally done by novice bot-makers, I've only included one section for it.
    This is absolutely incorrect. All of the major players (pruchaseable bots) use memory editing, or at the least, memory reading. They don't use pixel detection as their primary source of data gathering.
    My Diablo 3 Gear Swap Program:
    http://www.ownedcore.com/forums/diablo-3/diablo-3-bots-programs/352782-free-wks-gear-swap-bot.html

  10. #10
    Member sspamfilter's Avatar
    Reputation
    3
    Join Date
    Jul 2012
    Posts
    23
    Thanks G/R
    0/0
    CoreCoins
    0
    Trade Feedback
    0 (0%)
    Hi who knows, in fact it's quite correct that pixel detection is being used. I would link you to several bots but it's a trivial point, as there are dozens or more all around us. And since I actually do mention memory reading, your point is moot, I feel.

  11. #11
    Master Sergeant Nablamax's Avatar
    Reputation
    5
    Join Date
    Jun 2012
    Posts
    76
    Thanks G/R
    0/0
    CoreCoins
    4
    Trade Feedback
    0 (0%)
    Best heuristic would be number of games per hour and total gold farmed. You don't really need something fancy to know someone is botting.

  12. #12
    Knight anrew's Avatar
    Reputation
    33
    Join Date
    Nov 2007
    Posts
    199
    Thanks G/R
    0/0
    CoreCoins
    7
    Trade Feedback
    0 (0%)
    Yeah... I'm botting 24/7, with 2 accounts. Both accounts also bot in EU and USA... (Total of 4 bots)

    Q: How many games per hour are you making?
    20+: Well guess what, that's very rare for a human.
    0-10: Sounds like a human to me.

    As I said, 24/7... it's like 60 games per hour. (My runs lasts 60 seconds, just remove loading times, and they should be 50 games per hour xD)

 

 

Similar Threads

  1. Botting - what is Blizzard able to detect?
    By Dreamworx in forum WoW Bots Questions & Requests
    Replies: 0
    Last Post: 11-14-2013, 10:58 AM
  2. Replies: 2
    Last Post: 07-21-2012, 09:27 PM
  3. [Release] MMOwned working with Blizzard
    By KuRIoS in forum World of Warcraft Bots and Programs
    Replies: 16
    Last Post: 04-03-2011, 03:15 PM
  4. [NEW + WORKING] Free honor how much is your choice!
    By snugglepants in forum WoW Scam Prevention
    Replies: 13
    Last Post: 06-30-2008, 08:03 AM
  5. Hack which work with Blizzard?
    By Reflexa in forum Community Chat
    Replies: 7
    Last Post: 12-21-2006, 06:52 PM
All times are GMT -5. The time now is 03:55 PM. Powered by vBulletin® Version 4.2.3
Copyright © 2017 vBulletin Solutions, Inc. All rights reserved. Digital Point modules: Sphinx-based search