JBerlyn wrote:The only way clientless bots can be stopped, is if Joymax changes all the packet subjects they use for Silkroad Online's client, then encrypt them much more than they already have. They could use a salt string and MD5 hashing to read and send the message subjects. Then weekly, they can change the salt string to something else, which would only require 2 lines of work each week. This would ruins clientless bots, as by the time they decrypted the packet subject to use for their bot application (which with MD5 is impossible), Joymax will have changed it the next week.
This system isn't even difficult. Since all message handling in the server is done in a single function as far as I know. I could code it if I was given the opportunity.
If the client can decrypt the packets (which it must be able to) the owner of the computer can also do so.
Obfuscation would probably help a bit. But none of these things would of course beat a GM in each town 1-2 hours/week. Or maybe if they actually read the reports about gold bots...
NuclearSilo wrote:- remove the selection system: you can only attack the mob if you are near enough
- remove the coordinate system: bots can't return to the spot using waypoints anymore
Wouldn't really help. If you can see a monster on your screen, the bot can read its location from memory. That works for coordinates as well. The client (and server) must still keep track of where a character is located. And unless someone says otherwise, im of the opinion that the game does not use the coordinates shown on the screen internally.[/quote]
_sr972_ wrote:JBerlyn wrote:The only way clientless bots can be stopped, is if Joymax changes all the packet subjects they use for Silkroad Online's client, then encrypt them much more than they already have. They could use a salt string and MD5 hashing to read and send the message subjects. Then weekly, they can change the salt string to something else, which would only require 2 lines of work each week. This would ruins clientless bots, as by the time they decrypted the packet subject to use for their bot application (which with MD5 is impossible), Joymax will have changed it the next week.
This system isn't even difficult. Since all message handling in the server is done in a single function as far as I know. I could code it if I was given the opportunity.
2. "then encrypt them much more than they already have." LoL'd my ass off. there is nothing encrypted. its a nice system (and effective btw!) how the build up the OPCodes.
3. Salting would be ok, but could be cracked easily in 1-2 days too. MD5 isnt possible, cause MD5 is basing on the machine's system time. even the iSRO servers arent syncronized in time.
Are you saying that if i generate an MD5 string from something on this computer, that result would be different on another computer if the clocks are not in sync?
BloodyBlade wrote:Thomas42 wrote:Progress wrote:It could be done. The program would have access to all the information the client has access to. A trade bot could definitely make reactive decisions. Bots do this all the time when they grind.
Considering the extreme number of bots, I think the goldbot companies are very motivated to write this kind of bot should your system ever be implemented.
I think I saw a trade bot once, and it couldn't make 'reactive decisions'. Like getting off its ox when I attacked it. The best part was that it always tried again. I think I made ~20m that day.
/offtopic.
If you are the only one who knows it's path, then you can make lots of money right?
Bots can read the packets (and send their own). So they can certainly send the "get off ox" packet if a certain situation arises.
keep your stuff in one post, this is your only warning, and i just realized i cant delete posts in gd.You will spend 99% of your time grinding, you just don't know it yet.
