What's new
By:
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal
RebornBuddy Forums

Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox!

Banwave - 19 May 2016 Discussion

shm0 said:
You really think there will be a rebuild from the ground?
You think bossland will invest time and money into this?
They dont have the resources anymore i think.
The costs for the courts only....
They even had to change there pricing.

You wanna know want i think?
Bossland just made deal with blizzard.
They give x players every x months.
And for that there are allowed to stay in business.
Click to expand...

You figured it all out, well done!
 
I got caught out on this latest banwave - oh well, bought time i quit the game anyway! :)
 
rayne13 said:
The sooner they rebuild this from the ground up and make it 64 bit, the sooner we can be safe. Also, maybe since warden is scanning the memhook, is there a way to kind of camouflage what is really happening, make it look like something else. I dont know, just spitballing.
Click to expand...

Look 64bit probably isn't enough in itself. It would be nice but that's not everything. There are a lot of potential factors that probably help blizzard come to a conclusion regarding an account, most of those only matter in the case of player reports and not a blanket detection. Some day they might decide it's worth it, but I wonder if they can get a ROI on it, so many botters have lifetime keys and the game is old.

It would be a nice thing to have, but it isn't a miracle bandaid that solves all our problems. If I was starting out now building a bot I'd probably go 64bit and avoid click-to-move and keep everything clientside (offline bot) just to keep people happy, and I'd like that, but it wouldn't make it safe at all.
 
shm0 said:
You really think there will be a rebuild from the ground?
You think bossland will invest time and money into this?
They dont have the resources anymore i think.
The costs for the courts only....
They even had to change there pricing.

You wanna know want i think?
Bossland just made deal with blizzard.
They give x players every x months.
And for that there are allowed to stay in business.
Click to expand...


definitely dont think there will be a rebuild, since its still in 32 bit which shows that they do not care. But I am done botting until a 64 bit version comes out.
 
Must have been detected a while ago and saving up a list of users as I haven't been on wow or botted in 2 weeks as my time had ran out and also got banned.
 
raphus said:
We do not know and do not have a way to find out how the latest detection took place. However, we do have evidence
that Blizzard found a way to identify IP ranges of Tripwire service thus able to bypass the anti spyware system.

In the game of cat and mouse between botters and Blizzard, right now, the advantage lies with the cat. For now, the
range of devices of Tripwire service that look out for spyware attempts have been expanded and we are re-opening auth.

Do not use Honorbuddy on an account you would be upset about losing. Do not use it for excessive time spans. Do make
the most of the profiles and bot bases that allow for discrete leveling and farming.

Good luck all - be careful out there.

PS. We will keep this thread open for discussions.
Click to expand...

Thanks, got my new account up to ilvl 704 already. God speed.
 
elewa20 said:
hmmm... When did i hear that before ??? Answer : Every ban wave !
Same answers everytime " Yeah we thought the bot was safe but its not ! Now we think AGAIN its safe so start using it till you get banned AGAIN and then we will tell you same shit again "
Click to expand...

No one EVER said the bot is safe, and by no means Bossland!
 
raphus said:
Just to clarify a few things that is common in posts.


  • This would have been the 4th banwave if Tripwire didn't catch the attempt on January which helped to find the cause of 1st and 2nd banwaves.
  • Tripwire service doesn't use the same IPs as the Honorbuddy connects to communicate.
  • Switching to 64bit doesn't change anything detection wise. It is on their hands to activate detection on only one on demand and we are their only target.
  • We can not give any more information due to nature of this. Things would have made more sense for you if you knew more details. Unfortunately, you will not know the details until WoW is over.

We know you are angry and upset, but this is how it works. We are doing our best to ensure the security of your accounts and we will continue to do so.
Click to expand...

you didnt answer how adding more ip range makes any difference if they know how to find the ips in the first place
 
We all now blizz scans outside its mem, (read ToS, read some articles on internet) so why don't start with the basic most obvious EASY fixes:
- Add ability to rename the .exe in process list
- Change the hash code
- Remove the friking description "Honorbuddy" in tasklist
- Remove the name in the windows titles, done.

Did i miss any easy fix? Add your own, pray bossland reads it and implements its, this shizzl is done in like say 30 mins progging?

Got some time left, do the more difficult ones ;-)

Don't say its IP based, its not. I'm running bot on computer A, clean account on computer B, they go past the same router, thus same ip for the internet world. Account on computer A is banned, account on computer B is still happly running.
 
ouhac said:
We all now blizz scans outside its mem, (read ToS, read some articles on internet) so why don't start with the basic most obvious EASY fixes:
- Add ability to rename the .exe in process list
- Change the hash code
- Remove the friking description "Honorbuddy" in tasklist
- Remove the name in the windows titles, done.

Did i miss any easy fix? Add your own, pray bossland reads it and implements its, this shizzl is done in like say 30 mins progging?

Got some time left, do the more difficult ones ;-)

Don't say its IP based, its not. I'm running bot on computer A, clean account on computer B, they go past the same router, thus same ip for the internet world. Account on computer A is banned, account on computer B is still happly running.
Click to expand...

If they use the rootkit approach just like glider back in the day it would be 300% safer.
 
raphus said:
Just to clarify a few things that is common in posts.


  • This would have been the 4th banwave if Tripwire didn't catch the attempt on January which helped to find the cause of 1st and 2nd banwaves.
  • Tripwire service doesn't use the same IPs as the Honorbuddy connects to communicate.
  • Switching to 64bit doesn't change anything detection wise. It is on their hands to activate detection on only one on demand and we are their only target.
  • We can not give any more information due to nature of this. Things would have made more sense for you if you knew more details. Unfortunately, you will not know the details until WoW is over.

We know you are angry and upset, but this is how it works. We are doing our best to ensure the security of your accounts and we will continue to do so.
Click to expand...

I think most people understand this. Please keep up the good work and don't get disheartened. There are a lot of things the community would like and might make them feel more at ease though, and that might be worth some consideration going forward (where feasible), but hopefully the majority understand.
 
shm0 said:
You really think there will be a rebuild from the ground?
You think bossland will invest time and money into this?
They dont have the resources anymore i think.
The costs for the courts only....
They even had to change there pricing.

You wanna know want i think?
Bossland just made deal with blizzard.
They give x players every x months.
And for that there are allowed to stay in business.
Click to expand...


image.gif
 
UnderratedPost said:
do you know that for a fact or are you just spouting buzz words that you dont understand the meaning of
Click to expand...
Guess he just repeat bullshit. Even if hb would goes "rootkit" level (means not working as ring3 in usermode -> it would work as "driver"), it can be detected(several antich[ea]ts already take over that section and secure it).

But, heads up bossland, we all know that this can happen, sadly it happens, reverse, investigate and bypass and everyone is happy again. :)
 
rename the process, rename the .exe and do add some mini line of code that u get another hash for your HB folder / .exe


RIP HonorBuddy
 
You must log in or register to reply here.
Back
Top