Timeline for How to detect and prevent abuse (botting) of online game API?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 28, 2015 at 16:24 | comment | added | Superbest | @Polan Not a problem if writing the bot is more fun than playing in the first place. | |
| Apr 28, 2015 at 11:38 | comment | added | Polan | @Katu you are right, my methods won't stop bot that is a plugin to a browser and is just clicking on client. But anything outside, might have problems. Just finding a link and replay-attacking won't work, because hash might require timestamp and knowing a semi-secret key. Hashing function will change every now and then so if you don't have javascript interpreter, you will have to rewrite your bot all the time to include those changes. Those methods won't stop people from writing a bot. It will just require constant maintaining, so you won't save that much time from using a bot :). | |
| Apr 28, 2015 at 11:31 | comment | added | Polan | @Superbest yes it's easy to beat this security once. But if it changes a little a little, you will have to keep track of those changes and update your bot. That means spending more time, on writing a bot to spend less time on playing :). Pointless. | |
| Apr 28, 2015 at 11:04 | comment | added | Katu | Most of the points are useless. You are thinking backwards. No matter what you do with all the hashes, headers etc, the "link to buy upgrade for my tavern" has to work, right? Now, i create a bot, that finds that link, every 2 hours it clicks that. I don't care what magic you do behind that, but my bot clicks it just like the user would. Resource usage thing is good, but can raise lots of false positives, that requires human work. IP.. For example travian bots (non-free) is a custom web browser, that sends everything from your ip. | |
| Apr 28, 2015 at 0:50 | comment | added | Superbest | While these ideas are clever, they are not only easy to defeat, but I would be tempted to write a bot simply because it seems so fun to defeat them, even if I didn't care much about doing well in the game. | |
| Apr 27, 2015 at 11:55 | history | answered | Polan | CC BY-SA 3.0 |