[3.1.2] Some Changes...Few Static updates...

[Cypher]

So it is normal for blizz to take 3 months to temp ban me? It's coincidental that it happened right after I used the bot on patch 3.1.2 day?

I think it might be because there was a change in the new patch and warden is now scanning for new addresses.

WHERE you do it makes a difference.

[_duracell]

WHERE you do it makes a difference.

I've used it in every zone. (for Explorer title)

As far as instances go, I can't be sure of every one I've used it in, but I know I've used it in SFK, BFD, WC, and some WotLK ones. I can't say with any certainty if I've done it in an Outlands instance.

[Harko]

I've used it in every zone. (for Explorer title)

As far as instances go, I can't be sure of every one I've used it in, but I know I've used it in SFK, BFD, WC, and some WotLK ones. I can't say with any certainty if I've done it in an Outlands instance.

the question was where you did it with the trial account to check if they extented the scan range with the patch.

I tested it in a few start areas and didn't got banned yet.

[_duracell]

the question was where you did it with the trial account to check if they extented the scan range with the patch.

I tested it in a few start areas and didn't got banned yet.

Ah, I mainly used it in orgrimmar but I don't think any player saw me. My Z was at ~900.

[Harko]

Ah, I mainly used it in orgrimmar but I don't think any player saw me. My Z was at ~900.

orgrimmar would make sense. nearly every day some stupid gold selling company writes his url with corpses before the ah on my server ; )

[Jadd]

orgrimmar would make sense. nearly every day some stupid gold selling company writes his url with corpses before the ah on my server ; )

...

It doesn't work that way, writing to X, Y and Z addresses will only change it clientside. To make effect you must move or jump which will get you DCed and taken back to before you changed the values because of serverside checks...

Edit: My guess is it uses Demon's Hand or whatever it's called.

[_duracell]

...

It doesn't work that way, writing to X, Y and Z addresses will only change it clientside. To make effect you must move or jump which will get you DCed and taken back to before you changed the values because of serverside checks...

Edit: My guess is it uses Demon's Hand or whatever it's called.

Unless this was changed with 3.1.2, I don't think that's true. I've always been able to change my Z value to x number, jump, set movement state to walk, and walk through the air without getting disconnected.

[mordok]

Just wondering the new monitored mem locations that poped the ban issue, are they affecting just writing or do they affect mem reading to (like reading x, y, z) ?
ANd btw, does anyone knows if warden checks for too many(and fast) memory reads at an adress eg: reading inside a while without sleeps "Cursor State" ? Thats what I was doing with my fishbot ^^.

[Harko]

...

It doesn't work that way, writing to X, Y and Z addresses will only change it clientside. To make effect you must move or jump which will get you DCed and taken back to before you changed the values because of serverside checks...

Edit: My guess is it uses Demon's Hand or whatever it's called.

damn I wonder why my little testing script

local z = UnitZ("player");
while (true) do
TeleportZ(900);
Sleep(1000);
TeleportZ(z);
Sleep(1000);
end

works, it shouldn't since you say so :

[amadmonk]

Just wondering the new monitored mem locations that poped the ban issue, are they affecting just writing or do they affect mem reading to (like reading x, y, z) ?
ANd btw, does anyone knows if warden checks for too many(and fast) memory reads at an adress eg: reading inside a while without sleeps "Cursor State" ? Thats what I was doing with my fishbot ^^.

Warden can't check for reads. This is an x86 thing that even the geeeeeeniuses at Blizzard can't overcome

EDIT: yes, I know about guard pages and DR0-3, but that's not realistically ever going to happen.

[Cypher]

...

It doesn't work that way, writing to X, Y and Z addresses will only change it clientside. To make effect you must move or jump which will get you DCed and taken back to before you changed the values because of serverside checks...

Edit: My guess is it uses Demon's Hand or whatever it's called.

Sigh. You're an idiot, and totally misunderstanding what he's saying.

[Jadd]

Sigh. You're an idiot, and totally misunderstanding what he's saying.

Ah..

I should really read things twice :S

[0_00_0]

...

It doesn't work that way, writing to X, Y and Z addresses will only change it clientside. To make effect you must move or jump which will get you DCed and taken back to before you changed the values because of serverside checks...

Edit: My guess is it uses Demon's Hand or whatever it's called.

Mmm.. It does actually. not for X and Y. but for Z! I was playing around with the Z offset from the playerbase and my trial acct has not been banned yet. You can go as high as you want, just as long as you don't move foreward after, the key is to jump. Still definitely not a good idea on a real account, though.

[Robske]

orgrimmar would make sense. nearly every day some stupid gold selling company writes his url with corpses before the ah on my server ; )

Do you happen to know if the check is done for ceiling only? I know some "teleport" hacks teleport you into high air, and run to their position with a speedhack from there. Wonder if you could reverse the process and run underground.

[lanman92]

Aren't speedhacks detected now? Or can you bypass them easily by hooking inside ntdll or something? I haven't really looked.