REAL Way to stop macroers, won't affect gameplay

Everybody has seen many suggestions to stop macroing. Out of all of them, I have only seen 1 which will work. (With a few modifications made)

The problem is that people don't understand how macroers work. Jagex is trying to convince everyone that their randoms actually work, which probably contributes to this.

Since I hang around on cheating communities, (Some are actually nice places for coding tips) and I know a little programming, I know what will and wont help stop macroers.

I have found that if people actually understand more about how macroing works, they will know what to suggest to combat it. For this reason, I will explain very briefly how one particular type of macro works.

When you play runescape, you run an applet which runs your runescape.jar file on your computer. (a .jar file is like a .zip or .rar file, except its attached to an applet which is made to open and run it)

This .jar file is what gets downloaded/updated when you load runescape.

The contents of this .jar file contain the runescape client. ie: the applet runs the .jar file, therefore running the client.

When you click something in the client, it sends a message (or packet) to the server. Say you're mining iron. You click the iron rock, your client sends something along the lines of username clicked iron rock at this location (except in java) The server checks that there is in fact an iron rock at that location, that your in the area, and it is not already mined. If it all works out then it changes the rock to a 'being mined' status. Sends the message back to your client and tells it to make your character start hitting the rock...... Im sure now that you get the picture on how runescape works.

This particular type of macro is started by extracting the contents of the .jar file, and modifying it to connect directly with jagex's servers without the applet.

I will not go into much detail on this, as it would take a while and I doubt many people would read it, but since the user has a working client which does not require an applet, they can edit it however they want. They can do absolutely anything, except change anything server side, so it only serves for looks and funny screen shots.

The user can edit this client, so instead of the user clicking the rock, and the client sending the packet, the client read a script (so it knows what messages to send and when) and sends this "username clicked iron rock at this location" without you actually clicking the rock.

That is the reason why randoms do not stop these kinds of macros, the server sends the packet telling the client you have a random, so runescape is pretty much telling the macroer "hey you have a MOM, you'd better solve it like this" If it didn't tell the client how to solve it, then what would a legit player's client have to check against if they got it wrong?

If you are still with me on this than I am sure you appreciate the vastness of this problem.

Jagex landed a huge blow to this type of macroer, with the new game engine. It was actually the main reason of the new game engine.

The new game engine makes a check to the client, and basically checks if it is a modified client or not. As soon as somebody logs into a modified client, macro or not, they are automatically flagged, and jagex bans the account in a few weeks when they get around to it. Since the macroer is logged into a modified client, they are automatically breaking rule 7.

Jagex is obligated to ban the accounts on login, because they know it is a hacked client, on login. Instead they wait for a manual ban, meanwhile the account has racked up 10 mill from autoing.

My solution: If somebody logs into a modified client, they are automatically logged out and banned, jagex currently flags the account, why not just ban them?

I believe that jagex first chose to flag the account instead of ban it on login because they wanted to know how their shiny new game engine got hacked. Since there is currently only one working macro of this type which is public, they must already know and there is no point in continuing to flag instead of ban.

I like the idea, it's pretty much the same as I posted to one thread earlier. Finally we got a thread which actually would have an impact to to autoing, not just make them create one more counter software which takes a day or 2.

Here's what I wrote earlier:

Another way is to add small autoban packets to rs: during every update they should change the code just a bit: edit some packets which the server sends and can be accepted by an older client version. If the client accepts them, automaticly a ban. In other words current rs client would allow a packet called XYZ and it would work normally. After next update this would be accepted only by an outdated client. Normal players wouldn't notice anything and it wouldn't affect to their gameplay at all, but autoers should find out the false packet every week and update their bots to that. I believe Jagex already has a system like this, but it should be made into more randomised and put more efford into it. It would help a lot more than adding ditches to wilderness or giving us a new random event.

Jagex has a system similar to that. Small things in the code change all the time, it could even be every 60 seconds. That way, the macroer needs an absolutely perfect auto updater.

Yea they got a similar system at the moment, but it should be updated into even more randomised and unlogical so autoupdaters wouldn't work too well and manually finding the differences becomes so slow that the newer update comes to the client than to the bot.

There are two types of auto updaters.

One of which simply works like the runescape client, connecting to the applet. If there is a file different or new, it updates the client, same with the macro.

The other is simply manually downloading the client, extracting it, and running it through an updater which changes the appropriate files.

Manually looking for changes and updating is really annoying, I have done it myself before.

Only problem is that there is no way for the server to update, updating the legit client, without being easy for that first type of updater to update as well. The updater doesn't update for "logical things" it just finds any kind of changes.

Jagex made a clever update about 4 years ago, which stopped a deob bot for a while before the devs figured out what happened. Every 24 clicks the client sent a secret packet. The macro however did not. Your idea reminded me of this so I thought I might bring it up, it's just that macroing has come just as far as Runescape has so things like this don't usually work.

didnt understand alot of this but i got the message

i think its a pretty good idea, macroers wont stand a chance

u must be smart, knowing about all that stuff, good job :thumbsup:

Indeed, for most macroers, this should work. however, as im also a computer programmer/cracker, (do security tests on a regular basis) I know this wont eradicate the problem either. The custom client can produce a spoofed reply to the server, saying basically "yes I'm a legit client...honest."

the only true way to catch out autoers, is to make real-time adjustments to game code, and banning clients that dont adjust fast enough. This could be done with an algorithm

indeed, your suggestion will take most low-time, no-knowledge botters out of business, but teh real hardcore ones.. (the ones taht do most damage) will evidently stay in teh loop.

wcgeneral.

The custom client can produce a spoofed reply to the server, saying basically "yes I'm a legit client...honest."

It works via a reflection system, true you can always inject custom CRC values etc for the data file checks, but it is more trouble than it is worth, and there are still many other traps to avoid.

the only true way to catch out autoers, is to make real-time adjustments to game code, and banning clients that dont adjust fast enough. This could be done with an algorithm

They already do something like this, I mentioned it earlier. The problem is that it can still be gotten around with an auto updater. The other problem is that they don't bother, they aren't worried about being caught, that it why they are level 3 with default clothing. Which shows that they are not taking the time to avoid detection, which points to my point before, that jagex already knows they are macroing on login anyway.

indeed, your suggestion will take most low-time, no-knowledge botters out of business, but teh real hardcore ones.. (the ones taht do most damage) will evidently stay in teh loop.

Actually it is the other way around. The macroers which do the most damage are not worried about being caught, so they macro with 10 accounts at once 24/7. The macroers which really only macro to beat the system, are the ones which spend the time to make it undetectable, they aren't the real problem, as there is much less of them, and since they do care about being detected, they don't macro with 10 accounts at once 24/7.

I decided on digging up a deobfuscator and decompiling the runescape client so I can give more precise information. I have a new computer so I have to download Java Development Kit again. (140mb file)

I like it! Go blow em macroers! \

Most 'autoers' arn't program(s) there a real person. There called gold farmers, they are pretty much the people who supply gold to all them websites that sell online. If you don't belive me then look here

[hide=Trust me]Wikipedia knows all :pray: [/hide]

Runescape gold isn't really a big business, especially with all the macroers. There is a business for gold in world of warcraft, not much in runescape. However at least most of those level 3s in default clothing are macroers. I know the macro that they are using. Anyway, gold farming is still against the rules so jagex should figure it out and ban them anyway.

very nice suggestion =D>

However, i'd have to assume that they'd have thought of this sometime, and thus there is something stopping them from doing this..

Runescape gold isn't really a big business, especially with all the macroers. There is a business for gold in world of warcraft, not much in runescape. However at least most of those level 3s in default clothing are macroers. I know the macro that they are using. Anyway, gold farming is still against the rules so jagex should figure it out and ban them anyway.

Runescape gold isn't really a big business, especially with all the macroers. There is a business for gold in world of warcraft, not much in runescape. However at least most of those level 3s in default clothing are macroers. I know the macro that they are using. Anyway, gold farming is still against the rules so jagex should figure it out and ban them anyway.

And your saying marcoing isn't against the rules then? Lol?

Show me in that paragraph, exactly where I said macroing isn't against the rules.

I thougt there where diffrend types of macrosoftware, one was this way you write and the other was that they really clicked on moving objects. Btw I think JAGEX must check IP-adresses, 5 or more macro-bans = all accounts on the IP-adres banned. I also hate them, but I'm affraid there is much to do about it. Just make new randoms every week.

Just report them, with some luck they actually do sometimes get banned, btw this part of the tip.it forum is used for new idea's and bugs :wink: :)

 

 

 

 

These macroers in this pic don't get cought becouse of their high combat

 

 

 

( :( allright... really, really, really some times)

 

 

 

Btw check this: http://www.youtube.com/watch?v=RQbjoYHt_nQ :D

 

 

 

Maybe it's a nice trick to make a wapon where you can attack with everywhere, also out of wildy and this wapon will never hit higher as 0, nice idea? If a normal player get's hitted he will simply ignore it and if a macroers get hitted he will run around becouse it is scared. If those macroers stop getting scared than soon or later a random might kill them :P

 

 

 

 

 

deyan2

Have you seen that before? :P check the youtube video, there I killed a macroer :D :P

otherwise see: http://www.rsnl.eu/forum/viewtopic.php?t=37932 If you can read Dutch than you can read the whole story

*edit: believe it or not, but they are all banned at this moment, I don't know when that happened, but I'm happy with it :D

bump