Warden update

[namreeb]

The first time I heard about "SMSG_EnableHonorbuddyDetection" (without knowing what is it exactly though, because it could be a game feature after all) was from a guy working on a MoP emulator on the beta, he posted the list of opcodes name he dump'd to a pastebin on mangos forum (that was 2 to 3 weeks before HB seemed to know about this stuff(publicly?) as they turned on tripwire when they realized), it wasn't TOM_RUS, at least, not publicly, to talk about it. But I never seen TOM_RUS talking about it though. Calling it part of the warden or not depend on your conception of the warden, in a technical way, it's not at all related but focused HB in the past 3 years, in another way, you can simply define warden as the whole 'anti-cheat' system including sneaky change in the code like that, even if it's not run directly from the system formelly named "warden".

TOM_RUS mentioned it to me on IRC, and I told Apoc via Skype. That is how they found out about it. I didn't mention it publicly because it didn't occur to me that anyone else would care. It's obviously not a secret. I don't think it counts as part of Warden, regardless of your definition of it. Warden loads a module which has its own .text segment, its own PE header, etc.. I haven't checked, but I assume the HB opcode does not have any code in the Warden data segment. To me, that means it is not a part of Warden.

Looks like this whole thread is done now, since the Warden module(s) have been more widely released.

[aeo]

Looks like this whole thread is done now, since the Warden module(s) have been more widely released.

I'm just curious as to what new functionality this module provides. I'm not savvy enough to reverse the binary myself but I assume its more then just a few new address scans that are implemented.

[-Ryuk-]

I'm just curious as to what new functionality this module provides. I'm not savvy enough to reverse the binary myself but I assume its more then just a few new address scans that are implemented.

They don't need to update the module to add new memory scans, dll scans or module scans.

[namreeb]

I'm just curious as to what new functionality this module provides. I'm not savvy enough to reverse the binary myself but I assume its more then just a few new address scans that are implemented.

I haven't looked at it, but I also believe that they haven't added new functionality for quite some time. My guess is that it is a modified and obfuscated form of the same module.

[teufel123]

Anbody got any more info on the module changes?

[Android32]

Just letting everyone now, I have been using lazybot ( free and a MUCH less secure version of botting) on my main account for about five hours a day this whole week. nothing has happened except a lot of gold.

[DarkLinux]

Just letting everyone now, I have been using lazybot ( free and a MUCH less secure version of botting) on my main account for about five hours a day this whole week. nothing has happened except a lot of gold.

irrelevan on so many levels... Not even going to explain...

[Starkey2009]

Just letting everyone now, I have been using lazybot ( free and a MUCH less secure version of botting) on my main account for about five hours a day this whole week. nothing has happened except a lot of gold.

And im letting you know you're account has probably been flagged for the future ban wave, just cause you're not banned right away doesn't mean you've slipped through blizzard's net.

[evil2]

And im letting you know you're account has probably been flagged for the future ban wave, just cause you're not banned right away doesn't mean you've slipped through blizzard's net.

i'm letting you know there won't be any real "ban wave" in WOW ever again.

[homer91]

I think it's time to close this thread.

[VesperCore]

i'm letting you know there won't be any real "ban wave" in WOW ever again.

Totally outside of the scope of the reality, just watch out what happend with PQR not so long ago.

[-Ryuk-]

I haven't looked at it, but I also believe that they haven't added new functionality for quite some time. My guess is that it is a modified and obfuscated form of the same module.

I haven't looked at it all, and there are a few changes here and there(at least from an old module I have), however I also believe that this is what has happened.

It wouldn't surprise me if they started to release more new modules soon and then on a semi regular basis. Lets face it, they can push out a new slightly modified module and honorbuddy's tripwire shuts down the whole project (at least thats what it looks like from an outsider).

It would keep developers on their toes as they 'could' then change warden and it would look like a routine module change until they looked deeper.

It's probably time to close this thread now, as the majority of people here have NO idea how warden works whatsoever.