Originally Posted by
lm47
necrobot shows that when a poke capture occurs, it records the distance between you and the pokemon at the time
and my guess is that each pokemon spawn instance has coords as one of its attributes
so when the capture transaction is sent to the server, it must have either the coords of both you and the pokemon, or the distance value (likely this one since less computation needs to be done on the server side)
so to make it safe, bot needs to spoof the coords of the pokemon, or spoof the distance value