Jagex Account Guardian

[Platinum_Myr]

Yes. However, you can make a decent system using entropy and a key generator. As long as you can protect that key it is stronger than the password because a player is unlikely to copy it to someone else. (and it is much more difficult to bruteforce the key)

[Mercifull]

In the RuneScape livefeed last night (and again today on twitter) Mod Paul M said that they he will be filming a special Botany bay/bot nuke behind the scenes today which will be released on Friday (or earlier if someone manages to snag the hidden link from somewhere).

 

Omali is right about the term "usb" being misleading. In 2008 jagex refered to the device looking "a bit like a USB dongle" but it's not actually anything to do with USB. Think only of the form factor and size of a usb stick for a potential RuneScape secure key but not actually something you put into your computer.

 

A secure key, mobile app, sms, voicemessage prevents account thefts because even if someone has access to your password they will not be able to get hold of the number required for login. The only way to get around it is to also have physical access to the persons phone you want to "hack". You are reducing the potential number of victims to an incredibly small number.

[Mercifull]

[ilovecuttingyews]

That's the original dongle from the idea years ago correct, Mercifull?

[Mercifull]

Yeah I just mocked it up as an extra little thing to go along with the Authenticator app/SMS idea.

[Sy_Accursed]

The mock-ups are no doubt similar to what it will be though I expect it to be much plainer and no direct RS related stuff.

They are after all calling it the Jagex Account Guardian, not the Runescape Account Guardian; the implication being it's going to a device with generic Jagex wide application whenever they finally get other projects launched (eg transformers etc.)

[Omali]

The mock-ups are no doubt similar to what it will be though I expect it to be much plainer and no direct RS related stuff.

They are after all calling it the Jagex Account Guardian, not the Runescape Account Guardian; the implication being it's going to a device with generic Jagex wide application whenever they finally get other projects launched (eg transformers etc.)

 

"It'll work with RuneScape and um...uh...Stellar Dawn? No we cancelled that. FunOrb? Nah, no one plays that. 8Realms? Nope, that's gone too. Transformers! Yea, that's our one project we didn't waste money on."

 

I'm still convinced that the only reason Transformers wasn't cancelled was because Jagex actually has contractual obligations to Hasbro.

[Mercifull]

At the end of the day it's only a bit of printing to change the branding. They could sell different looking versions but they would all work across Jagex games

[Sy_Accursed]

The mock-ups are no doubt similar to what it will be though I expect it to be much plainer and no direct RS related stuff.

They are after all calling it the Jagex Account Guardian, not the Runescape Account Guardian; the implication being it's going to a device with generic Jagex wide application whenever they finally get other projects launched (eg transformers etc.)

 

"It'll work with RuneScape and um...uh...Stellar Dawn? No we cancelled that. FunOrb? Nah, no one plays that. 8Realms? Nope, that's gone too. Transformers! Yea, that's our one project we didn't waste money on."

 

I'm still convinced that the only reason Transformers wasn't cancelled was because Jagex actually has contractual obligations to Hasbro.

 

I did say 'whenever they finally get other projects launched' for a reason. That being they did can all bar Transformers of their known projects, but they have said they do intend to do future projects BUT as stand alone things in their own offices with proper teams opposed to a sort of hobby team in the corner of rs offices that gets distracted and stuff (which is basically what all the others have been so far)

[aerendil]

OAMOSMOASGAHSGAHG BATMAN ON RS PLZ

 

amusement aside, i dont hve a cellphone and am very happy hat way,so having it tied to a phone would piss me off

[Ruinous Edge]

I am genuinely more excited for JAG than anything else this month. Shame it wasn't announced as part of the actual BTS for September, seeing as MMG promised us Account Guardian within the next two weeks at the end of July.

[Mercifull]

OAMOSMOASGAHSGAHG BATMAN ON RS PLZ

 

amusement aside, i dont hve a cellphone and am very happy hat way,so having it tied to a phone would piss me off

All information points to an optional system so no need to be pissed off :)

[Sy_Accursed]

OAMOSMOASGAHSGAHG BATMAN ON RS PLZ

 

amusement aside, i dont hve a cellphone and am very happy hat way,so having it tied to a phone would piss me off

All information points to an optional system so no need to be pissed off :)

 

As relatively stupid as it would be to not use it (assuming of course it has enough methods to appease phoneless etc) it definitely would be optional.

Other than online banking I can't think of a single service that enforces extra security and RS certainly has no precedent for it seeing as you can entirely avoid having recovery questions if you never fill them out and bank pins are optional.

[Shady Character]

i have a question bout this security code thing....

 

if u get this code on ur smartphone or sms or whatever. are u gonna hve to enter this code everythime u log in? or just when u log in from a diferent computer? or on a completley diferent time frame.

 

i do i just misunderstand this whole thing...?

 

 

 

not a big internet security buff but ive never had my account hacked so i dunno if id even bother with it.

 

 

 

 

P.s. gotta put this in for a friend

[Sy_Accursed]

Most likely would be a tick box that allows you to verify that computer for a period of a few weeks/months (google do it this way) though any other computer would require a code to be entered still.

[Mercifull]

We don't yet know. In most cases you will be asked for a code each time you try to log in from a new computer or if a period of time such as 30 days passes.

[Mercifull]

ive never had my account hacked so i dunno if id even bother with it.

 

If you have the ability to opt into it then I would definitely recommend it. If the Botany bay bot nuke is as successful as Jagex believe it to be then the goldfarmers are going to turn to account thefts for their gold stocks.

[Platinum_Myr]

ive never had my account hacked so i dunno if id even bother with it.

 

If you have the ability to opt into it then I would definitely recommend it. If the Botany bay bot nuke is as successful as Jagex believe it to be then the goldfarmers are going to turn to account thefts for their gold stocks.

 

At least until bot developers overcome the new deterrents. I hope they last for a good time, and/or make it not worth the trouble. I personally believe nothing Jagex does can successfully break all bot programs permanently (unless they can keep innovating faster than the developers can work around it). But it might be possible to do something that makes bot developers and gold farmers move to a new game.

[Hedgehog]

It's amazing how the whole problem would be solved if people stopped buying gp. I just don't understand how someone can knowingly contribute to the game's downfall and not feel terrible.

[Sy_Accursed]

ive never had my account hacked so i dunno if id even bother with it.

 

If you have the ability to opt into it then I would definitely recommend it. If the Botany bay bot nuke is as successful as Jagex believe it to be then the goldfarmers are going to turn to account thefts for their gold stocks.

 

At least until bot developers overcome the new deterrents. I hope they last for a good time, and/or make it not worth the trouble. I personally believe nothing Jagex does can successfully break all bot programs permanently (unless they can keep innovating faster than the developers can work around it). But it might be possible to do something that makes bot developers and gold farmers move to a new game.

 

Well the main thrust of their newest botnuke move seems to be less about bot breaking and more about bot detection (as mentioned in an interview or two); they are working on a system that actually can accurately identify and ban bots autonomously. This is definitely a move in the direction of keeping them out more long term because, whilst it would need testing, if a new work around emerges they can just add extra tests into the system that can find those bots.

 

It'll become much less appealing to spend hours on end coding a work around if they know Jagex could fairly swiftly tweak their detection system to capture it, certainly we have to wait and see how it pans out but it does sound promising thus far.

[Robert_R]

ive never had my account hacked so i dunno if id even bother with it.

 

If you have the ability to opt into it then I would definitely recommend it. If the Botany bay bot nuke is as successful as Jagex believe it to be then the goldfarmers are going to turn to account thefts for their gold stocks.

 

At least until bot developers overcome the new deterrents. I hope they last for a good time, and/or make it not worth the trouble. I personally believe nothing Jagex does can successfully break all bot programs permanently (unless they can keep innovating faster than the developers can work around it). But it might be possible to do something that makes bot developers and gold farmers move to a new game.

 

Well the main thrust of their newest botnuke move seems to be less about bot breaking and more about bot detection (as mentioned in an interview or two); they are working on a system that actually can accurately identify and ban bots autonomously. This is definitely a move in the direction of keeping them out more long term because, whilst it would need testing, if a new work around emerges they can just add extra tests into the system that can find those bots.

 

It'll become much less appealing to spend hours on end coding a work around if they know Jagex could fairly swiftly tweak their detection system to capture it, certainly we have to wait and see how it pans out but it does sound promising thus far.

I'd like to add that botany bay doesn't even seem to be a "bot nuke" like the last one. What I mean is they aren't talking about even breaking them this time, just improving how they detect them (basically what he said).

[Platinum_Myr]

Breaking bots is actually more likely to be easier than testing, since bots have to rely on game architecture not changing, where as detecting bots relies on bot architecture not changing.

 

Both are important and banning instead of just breaking is important. But I think breaking is just as important as banning, since it is simpler. (Simpler in that you don't have to know how they work to break them, where as you have to know how they work to detect them)

[aerendil]

if jagex is releasing the batman guardian... does that make bots the joker? or the league of shadows?

 

if this works... i will be impressed... if not.... well.. same as the rest of our updates for most of the year. D.E.D content

[Stev]

Simpler in that you don't have to know how they work to break them

I disagree. In most cases you have to know precisely how a program works to effectively 'break' it.

 

They knew the methods behind injection and reflection bots, so they designed a way to (temporarily, although they claimed it'd be permanent) break them. However, as expected, a work-around was found and they returned.

[Platinum_Myr]

Simpler in that you don't have to know how they work to break them

I disagree. In most cases you have to know precisely how a program works to effectively 'break' it.

 

They knew the methods behind injection and reflection bots, so they designed a way to (temporarily, although they claimed it'd be permanent) break them. However, as expected, a work-around was found and they returned.

 

True, but on a scale, it takes more effort to detect bots than to break them, I would imagine. To reliably detect bots you have to be able to tell that the game input or the server input is a bot and not a human. To break a bot you just have to make it not function. For example, a bot is broken every time there is an update as it no longer functions due to new server code. Yes, this isn't a permanent break but it is a break in the bot for long enough for a human to update it against the new server.

 

It isn't a permanent break, but I don't believe anything is a permanent break. A human can play, therefor theoretically a bot could be programmed to emulate the actions of a human perfectly. We just don't know necessarily know how yet.