Suggestion to Prevent BOT

[Jedzkie]

Hi! As we've all known, Ragnarok servers are problematic about BOTS since years ago, but how can we prevent this? Well i have a suggestion regarding on that matter. I don't know if this is possible or not, but i think this is the only way we prevent BOT programs to ruin our server.

How about implementing a system that checks if the PLAYER/CHARACTER uses the client to login in the game.

For example,

Run client -> Type Credentials -> Server checks if the user uses the client -> If (NOT) Disconnected from the Server else Login to the Game

I just noticed on some servers even there are harmony installed in their system, some players can still run BOTS.

Hopefully my suggestion will implement in the future. Thank you.

 

[evilpuncker]

bots can mask everything, that is why they are unstoppable

 

[Jedzkie]

bots can mask everything, that is why they are unstoppable

Mask everything? even there are checks like that, bots can still login? O_O

 

[evilpuncker]

bots can mask everything, that is why they are unstoppable

Mask everything? even there are checks like that, bots can still login? O_O

yes, that is why we can't really block them 100% since they came out

 

[Dastgir]

bots can mask everything, that is why they are unstoppable

Mask everything? even there are checks like that, bots can still login? O_O

yes, that is why we can't really block them 100% since they came out

Make some hooks which send a completely unique packet id(over a range like from 0x1000 to 0x1111) with some data, which in return, client should return a data which contains encrypted player's data like IP/Mac and validate it server side.

Can Assure you 99.9% Botters cannot bot because of this system(unless the system is leaked to the experts and they want to REALLY modify the openKore and bot in your server, which is as low as 0.001% Chance)

 

[karazu]

bots can mask everything, that is why they are unstoppable

Mask everything? even there are checks like that, bots can still login? O_O

yes, that is why we can't really block them 100% since they came out

Make some hooks which send a completely unique packet id(over a range like from 0x1000 to 0x1111) with some data, which in return, client should return a data which contains encrypted player's data like IP/Mac and validate it server side.

Can Assure you 99.9% Botters cannot bot because of this system(unless the system is leaked to the experts and they want to REALLY modify the openKore and bot in your server, which is as low as 0.001% Chance)

Give me!

 

[Jedzkie]

bots can mask everything, that is why they are unstoppable

Mask everything? even there are checks like that, bots can still login? O_O

yes, that is why we can't really block them 100% since they came out

Make some hooks which send a completely unique packet id(over a range like from 0x1000 to 0x1111) with some data, which in return, client should return a data which contains encrypted player's data like IP/Mac and validate it server side.

Can Assure you 99.9% Botters cannot bot because of this system(unless the system is leaked to the experts and they want to REALLY modify the openKore and bot in your server, which is as low as 0.001% Chance)

Give me!

LOL!

 

[anacondaq]

Hi! As we've all known, Ragnarok servers are problematic about BOTS since years ago, but how can we prevent this? Well i have a suggestion regarding on that matter. I don't know if this is possible or not, but i think this is the only way we prevent BOT programs to ruin our server.

How about implementing a system that checks if the PLAYER/CHARACTER uses the client to login in the game.

For example,

Run client -> Type Credentials -> Server checks if the user uses the client -> If (NOT) Disconnected from the Server else Login to the Game

I just noticed on some servers even there are harmony installed in their system, some players can still run BOTS.

Hopefully my suggestion will implement in the future. Thank you.

The biggest mistake of any "anti-bot" feature is saying about that in public, or adding that to the sources without encryption.

Why? Because one of the opencore developers here, at our community, and all "old fags" know them.

The only one solution to block bots, it's find a way to make traffic ecnryption. 

(Sure, i'm talking about packet based bots (opencore, other differnt rops plugins).

But mostly, players, and i'm sure 90% of the different adminds, don't hear about dll based (loaded via cps.dll) bots with the very easy logic what playing via ragnarok window. 

 

[mleo1]

How about add captcha to antibots script

rathena.org/board/topic/98175-recaptcha

it would be demotivational

 

 

[Dastgir]

How about add captcha to antibots script

rathena.org/board/topic/98175-recaptcha

it would be demotivational

still can bot, remember, those links are sended by mes command which are read by openkore, and they can see link, go to that link, and enter captcha. But I agree,it would be demotivational.

 

[Zirius]

How about add captcha to antibots script

rathena.org/board/topic/98175-recaptcha

it would be demotivational

still can bot, remember, those links are sended by mes command which are read by openkore, and they can see link, go to that link, and enter captcha. But I agree,it would be demotivational.

Bro, I wanna know how could still be bypassable by bot. reCaptcha is an external captcha. Unless, openkore could create script that answers reCaptcha successfully.

 

[GmOcean]

There already programs / bots that can answer reCaptcha successfully 100% of the time. All openkore needs to do is borrow that code or hook into those programs. Very easily done for a group of people dedicated to making these bots work.

 

[Dastgir]

There already programs / bots that can answer reCaptcha successfully 100% of the time. All openkore needs to do is borrow that code or hook into those programs. Very easily done for a group of people dedicated to making these bots work.

If still they dont code, they can do like, if mes appear, they will be alerted by sound on pc, which can help them to see npc chat on openkore, and the npc message will be somethijg like, <LINK> recaptcha link </LINK> and so, making the link visible to openkore, so they can open up that link, enter recaptcha, and continue botting.

 

[Zirius]

There already programs / bots that can answer reCaptcha successfully 100% of the time. All openkore needs to do is borrow that code or hook into those programs. Very easily done for a group of people dedicated to making these bots work.

Thanks! I'm not aware that reCaptcha is already bypassable. But actually, I cannot find any program you are referring to.

There already programs / bots that can answer reCaptcha successfully 100% of the time. All openkore needs to do is borrow that code or hook into those programs. Very easily done for a group of people dedicated to making these bots work.

If still they dont code, they can do like, if mes appear, they will be alerted by sound on pc, which can help them to see npc chat on openkore, and the npc message will be somethijg like, <LINK> recaptcha link </LINK> and so, making the link visible to openkore, so they can open up that link, enter recaptcha, and continue botting.

But that stops botting if the player is not online. After all, the big use of bot is if the user is not in front of his PC. Hence, majority of the job is done. There could be lots of improvement to that antibot. I believe external captcha is key to prevent these bots.

 

[Beret]

At aegis have a system that leaves the exp and drop 0% if the player does not stop playing, this was done on aegis more for a measure to prevent bots that spend all night picking up items and gaining exp for the character.
I posted a little while to be added in hercules this system.
 
 
 
http://herc.ws/board/topic/2063-stop-message-play/

 

[GmOcean]

I believe there was a client patch released a while ago that disables those messages, since it's in the official client. Coding the 0exp and 0drop wouldn't be that hard to do. Just add it as a permission and change the player's permission until they logout.

 

[Dastgir]

At aegis have a system that leaves the exp and drop 0% if the player does not stop playing, this was done on aegis more for a measure to prevent bots that spend all night picking up items and gaining exp for the character.

I posted a little while to be added in hercules this system.

http://herc.ws/board/topic/2063-stop-message-play/

Maybe its something related to, decreases x% exp and drop rate every x hour, and finally after some hour, it becomes 0% ratebut what's the preventive method for this? player relogs and again goes to 100%? or it resets every 12 midnight or what?

 

[kisuka]

Late reply to this, but captcha is a failed solution. There are some many services based in China that you pay less than 1 cent to solve a captcha. You send the image to the service over HTTP POST and it sends back a reply with the solution. Captcha don't work, plain and simple.

The best solution against bots do not come in the form of scripts or gimmicky solutions. The best thing you can do is roll out your own packet encryption with a challenge system (sends a question to the client and expects a correct reply) or use a solution already made such as Harmony.

 

[milk]

nvm