How would blizzard do that?
Bot from one company that creates bots for every blizzard game and many others, in WoW bot is flying using right click on the AIR. It’s literally clicking the air, when normal player can’t do that. They can’t detect even this.
Diablo bot from same company farming 60 lvl solo grifts 99% afk for user, playing better then 60-70% of diablo 3 players. And this bot is not like printscreen diablo window and sending clicks, it is reading memory and writing in it (actually it's not exactly diablo 3 process but part of DX memory).
There is 2 ways of detecting things like that.
First is malware-like actions, scanning hard disks, RAM, open processes. This is illegal in most countries and will cuz even more problems with anti-virus software then before, Valve tried that, they used DNS cache to detect cheats, they even banned few users, but this backfired hard on them(Google it).
Second is sophisticated algorithms that would detect anomalies in player behavior. Problem of this method it's not trivial to build such algorithms, there will be false alarms all over the place. And the biggest problem is that such actions require a lot more info than blizzards send from client now. This means lags, latency issues for all users or high cost for Blizzard or both. And actually recording mouse behavior, keyboard events and sending them over internet will cause problems with some anti-virus software and it's possibly illegal.
And example, GGG in Path of Exiles implemented ZERO anti-cheat systems. They using only second choice. So far there are few bans for the most stupid and greedy users (like botting 25/8) but with simple rules (listed on forum of that one company) one can avoid being banned completely.
This case actually is famous "shield vs sword" situation and shield always loses cuz this is users machine and he can do whatever he wants on it.
Blizzard is occasionally cleaning leaderboards and banning single users from top500(i noticed how person that is higher then me in leaderboard dissapeared). But they cant ban them all, mostly cuz one of the most efficient and developed bots are cracked (you can use them for free).
While the game is running, Warden uses operating system APIs to collect information about certain software running on the user's computer and sends it back to Blizzard servers as hash values to be compared to those of known cheating programs or simply as a yes/no response (whether a cheat was found). Some privacy advocates consider the program to be spyware.
The things Warden currently looks for in-process includes but is not limited to:
Model edits.
Known cheat modules (DLLs)
Known modifications to game functions
Known cheating addons
Speedhacks
Known API hooks from cheats
The things Warden currently looks for out-of-process includes but is not limited to:
Known cheating drivers
Warden also has a protection module in it, which provides users security from malware, keyloggers, and rootkits which hide keyloggers.
If Warden detects a known piece of malware active on the system, it will block the user from logging into the game, and will display a screen which directs them to Blizzard's support site for removal instructions.
On 23 June 2010 Blizzard updated the Warden Anti-Cheat Platform to version 2—named Warden 2.0—with World of Warcraft Patch 3.3.5.
Well, warden exists because Blizzard doing something, I’m just saying it’s not working and explained why it’s not and why you need to stop whining.
Warden sometimes updates, but bots have tripwire and they detect Warden updates, and ALL bots from that company blocked until their team make bots undetectable again
Like I said what they do either considered spyware or ineffective against top bot software. It works nice against cheats though thats for sure, but again only if we are talking about game file modifications, and like I said bot affecting memory associated with DX libs. About hashes from processes, bot just shuffles functions positions and memory mapping inside itself and hash is already different. It's called Polimorphic code.
Unfortunately my knowledge is limited to 2 bot systems for WoW and Diablo, so I can’t be sure about others, but the last successive ban wave against this bots in Diablo was shortly before ladders where introduced. For WoW that was in the middle of Draenor (but there people were banned even if they didn’t bot since Pandaria). I believe that “ban wave” equals blizzard found new vulnerability in particular bot software or bot mechanic, which happening more rare now (there was no effective ban wave before 2.3)
Rollback Post to RevisionRollBack
To post a comment, please login or register a new account.
How would blizzard do that?
Bot from one company that creates bots for every blizzard game and many others, in WoW bot is flying using right click on the AIR. It’s literally clicking the air, when normal player can’t do that. They can’t detect even this.
Diablo bot from same company farming 60 lvl solo grifts 99% afk for user, playing better then 60-70% of diablo 3 players. And this bot is not like printscreen diablo window and sending clicks, it is reading memory and writing in it (actually it's not exactly diablo 3 process but part of DX memory).
There is 2 ways of detecting things like that.
First is malware-like actions, scanning hard disks, RAM, open processes. This is illegal in most countries and will cuz even more problems with anti-virus software then before, Valve tried that, they used DNS cache to detect cheats, they even banned few users, but this backfired hard on them(Google it).
Second is sophisticated algorithms that would detect anomalies in player behavior. Problem of this method it's not trivial to build such algorithms, there will be false alarms all over the place. And the biggest problem is that such actions require a lot more info than blizzards send from client now. This means lags, latency issues for all users or high cost for Blizzard or both. And actually recording mouse behavior, keyboard events and sending them over internet will cause problems with some anti-virus software and it's possibly illegal.
And example, GGG in Path of Exiles implemented ZERO anti-cheat systems. They using only second choice. So far there are few bans for the most stupid and greedy users (like botting 25/8) but with simple rules (listed on forum of that one company) one can avoid being banned completely.
This case actually is famous "shield vs sword" situation and shield always loses cuz this is users machine and he can do whatever he wants on it.
Blizzard is occasionally cleaning leaderboards and banning single users from top500(i noticed how person that is higher then me in leaderboard dissapeared). But they cant ban them all, mostly cuz one of the most efficient and developed bots are cracked (you can use them for free).
https://en.wikipedia.org/wiki/Warden_(software)
Warden (also known as Warden Client) is an anti-cheating tool integrated in many Blizzard Entertainment games.
While the game is running, Warden uses operating system APIs to collect information about certain software running on the user's computer and sends it back to Blizzard servers as hash values to be compared to those of known cheating programs or simply as a yes/no response (whether a cheat was found). Some privacy advocates consider the program to be spyware.
The things Warden currently looks for in-process includes but is not limited to:
The things Warden currently looks for out-of-process includes but is not limited to:
Warden also has a protection module in it, which provides users security from malware, keyloggers, and rootkits which hide keyloggers.
If Warden detects a known piece of malware active on the system, it will block the user from logging into the game, and will display a screen which directs them to Blizzard's support site for removal instructions.
On 23 June 2010 Blizzard updated the Warden Anti-Cheat Platform to version 2—named Warden 2.0—with World of Warcraft Patch 3.3.5.
Games that use Warden include Diablo II (since patch 1.11), StarCraft (since patch 1.15), StarCraft II: Wings of Liberty, Warcraft III (since 2009-04-14, patch 1.23), Diablo III, and World of Warcraft.
Well, warden exists because Blizzard doing something, I’m just saying it’s not working and explained why it’s not and why you need to stop whining.
Warden sometimes updates, but bots have tripwire and they detect Warden updates, and ALL bots from that company blocked until their team make bots undetectable again
Like I said what they do either considered spyware or ineffective against top bot software. It works nice against cheats though thats for sure, but again only if we are talking about game file modifications, and like I said bot affecting memory associated with DX libs. About hashes from processes, bot just shuffles functions positions and memory mapping inside itself and hash is already different. It's called Polimorphic code.
Unfortunately my knowledge is limited to 2 bot systems for WoW and Diablo, so I can’t be sure about others, but the last successive ban wave against this bots in Diablo was shortly before ladders where introduced. For WoW that was in the middle of Draenor (but there people were banned even if they didn’t bot since Pandaria). I believe that “ban wave” equals blizzard found new vulnerability in particular bot software or bot mechanic, which happening more rare now (there was no effective ban wave before 2.3)