Blizzard's thoughts on "tripwire"

[Angrybudd]

Here's all we're willing to say about Tripwire...

Game-based Spyware is not straight-forward.
It usually starts simple when the game is introduced, and increases in complexity or adds 'friends' as the technology matures.

Game-based Spyware mechanisms can be activated and/or updated on the fly.
It does not require a new drop of the game client to add new detection mechanisms.
New mechanisms can easily be put in place and activated while you are playing the game.

Tripwire is both 'static' protection and reactive protection to the Game-based Spyware.
Tripwire also has some other things going on.

If Tripwire activates, Bossland GmbH will not give an ETA on getting Buddy Bot online again.
Your game account safety is our highest priority, and we'll take whatever time necessary to check out the situation thoroughly, and make any needed corrections.

Bossland GmbH considers Tripwire proprietary technology.
We will not discuss any details regarding how the technology works. For the same reasons, we will not discuss anything regarding a particular Tripwire event.

[video=youtube;nCsVOO_3EUU]https://www.youtube.com/watch?v=nCsVOO_3EUU[/video]

 

[frosticus]

the remix where he is talking as a blizz developer is better

[video=youtube_share;rL49T4vis6Q]https://youtu.be/rL49T4vis6Q[/video]

 

[dragonbuddy]

i have tears in my eyes from laughing

 

[odano1988]

If Tripwire activates, Bossland GmbH will not give an ETA on getting Buddy Bot online again.
Your game account safety is our highest priority, and we'll take whatever time necessary to check out the situation thoroughly, and make any needed corrections.

If this statement was true, wouldnt Bossland have changed the way the bot injects into the game since the first banwave happened? Oh no, thats right, because they really dont care about our game account saftey.

 

[chinajade]

If this statement was true, wouldnt Bossland have changed the way the bot injects into the game since the first banwave happened? Oh no, thats right, because they really dont care about our game account saftey.

How do you know the techniques weren't changed?

Oh, THAT's right... you DON'T HAVE A CLUE, and just like to spout vapid, uninformed drivel. My apologies, I forget these things from time to time.

cj

 

[odano1988]

china, i love you, but you guys aren't known for any kind of transparency, i dont need to know specifics, because obviously i probably wouldnt understand but you need to keep it secret from blizz, but what can you guys say you've done to help keep the security of the bot safe? Thats all we're asking, the bots been detected now what 3 times or 4? And you guys just say oh tripwire missed it move on noobs. I just want you guys to be like, hey, we spent some time upgrading the security of the bot, we did triangles instead of x's. Just sometyhing, hell make it up and lie to us, its better then nothing right? You've always been a good help to me and I appreciate your customer service as always china. thank you.

 

[chinajade]

china, i love you, but you guys aren't known for any kind of transparency, i dont need to know specifics, because obviously i probably wouldnt understand but you need to keep it secret from blizz, but what can you guys say you've done to help keep the security of the bot safe? Thats all we're asking, the bots been detected now what 3 times or 4? And you guys just say oh tripwire missed it move on noobs. I just want you guys to be like, hey, we spent some time upgrading the security of the bot, we did triangles instead of x's. Just sometyhing, hell make it up and lie to us, its better then nothing right? You've always been a good help to me and I appreciate your customer service as always china. thank you.

I deeply apologize for being a bit touchy about the subject. The response was inappropriate.

Yes, every time we get caught, heavy analysis is done. Things are changed—we are never detected the same way twice. In addition to fixing the hole, we always look around to see what else might be exposed in other ways, and proactively go after that, too. Every time. We not only look for the obvious, but also 'side attacks' like network vectors, out-of-band vectors, and other such things.

Bliz has a new 'warden guy' (head of the team). He is much more gifted than the last one, and is trying to prove his worth to the company. This time, they caught a bunch of bots, not just Honorbuddy. He appears to be on the ball.

We are still analyzing the issue. It truly is like looking for a needle in the haystack, but we've never failed to discover it yet. Sadly, it does take time, which causes frustration for us all.

cheers,
chinajade

 

[TheGodKing]

Yes, every time we get caught, heavy analysis is done. Things are changed—we are never detected the same way twice. In addition to fixing the hole, we always look around to see what else might be exposed in other ways, and proactively go after that, too. Every time. We not only look for the obvious, but also 'side attacks' like network vectors, out-of-band vectors, and other such things.

I'm very curious what Bosslands stance is on having Honorbuddy binaries publicly available. Are there reasons why you guys aren't worried about hash detections, or having Honorbuddy reverse engineered in general?