What's new
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal

I know how they are catching you

Status
Not open for further replies.
Your probably right...I interned for a private defense agency; so our investigative techniques might be a little more extreme than blizzards...I just really like this community and after watching swolbyn leave, I finally decided to speak out and see if any of my advice could help.

I would not underestimate Blizzards anti-bot team. They are programmers just like us...and to be a programmer they must be somewhat intelligent. Blizzard has already tried to sue the Buddy team. If they are willing to do that, don't you think they would be willing to research the developers?

You make the mistake of thinking any of the so called developers here are worth looking into; most of them just had the gumption to invest some time. The truth is most people could do what profile developers and even plugin developers do if they would just get past the mental block of it is to hard... sorry for those of you disillusioned, but the only thing special about anyone here sharing is just that they are willing to share; which you will note is what in a round about way this person is speaking against.

As far as bot detection goes... well that is a very deep subject, but no I don't think they would simply ban everyone based on detection; most companies at least have a review where they look at the infraction level and a person makes the final call; because, an automated instant ban could create a HUGE mess, if for example a mistake was made and all fraps users are flagged and insta banned...
 
Last edited:
Although the spirit of this post is great, I find that there is no way this is a grad student for software engineering. This whole thing is pretty much a farce and should probably just be deleted. A software engineer would understand that it doesn't matter if you trade items in a dungeon or in town- if they're tracking trades, they're going to nab you where ever you do it. As for dropping items, they could just as easily track dropped items as an ULTIMATE red flag. They know the stats of all the items in the game- so if they just monitor every time you drop one of the top 20% items on the ground... you're also instantly banned.

Further, the money thing makes no sense. You don't have someone's IP just because they have a paypal account. Maybe you can say Paypal has their IP. I don't know what you're even trying to get at here, it makes no sense.

They are not tracking payments made to demon buddy, because purchasing DB does not mean use of DB... which means they can't punish you for buying DB and telling the world that you have it.

The problem here is that people are looking for an answer... they think one up randomly and then throw some false credentials on it to convince everyone else. You're not a software engineer, and you're not a grad student. Grad students that are prospects for security firms would explain a lot more technical function than "ip tracking" and "item tracking."

These types of posters need to be told to stop, and if they continue- they need to be banned. They lure others into a false sense of security, which could cost accounts.

Please lock this thread.

Well, I am grad student....I have two years left so I do have more to learn.

If you read my first post more carefully you would see that I merely mentioned ways to "Stay under the Radar". Yes, if blizzard decided to look into my account; they would see that I was botting. However, they have not done so because my activity has not caused them to be suspicious of me. If they got a list of emails that they believe could be attached to hacked accounts, they could go to their database and see if the emails are connected to any current user accounts...then they could investigate you further and so on.

I never said they can track your IP from Paypal.
I never said they could track DB payments from Paypal.
I also never mentioned IP tracking or Item tracking. What I did say is that there are log files that store your activity into a database whenever you log in and out out of this game. My post is how to make your log files look less suspicious.

What I did say is that IF THEY WANTED TO they could view your paypal email address and use it to find your account on the radar.

Please read more carefully

Also, people drop trash items all the time in this game. Keeping logs on dropped items is a hell of a lot more time consuming then looking up trades.
 
Last edited:
Well, I am grad student at standford....I have two years left so I do have more to learn.

If you read my first post more carefully you would see that I merely mentioned ways to "Stay under the Radar". Yes, if blizzard decided to look into my account; they would see that I was botting. However, they have not done so because my activity has not caused them to be suspicious of me. If they got a list of emails that they believe could be attached to hacked accounts, they could go to their database and see if the emails are connected to any current user accounts...then they could investigate you further and so on.

I never said they can track your IP from Paypal.
I never said they could track DB payments from Paypal.
I also never mentioned IP tracking or Item tracking. What I did say is that there are log files that store your activity into a database whenever you log in and out out of this game. My post is how to make your log files look less suspicious.

What I did say is that IF THEY WANTED TO they could view your paypal email address and use it to find your account on the radar.

Please read more carefully
Also, people drop trash items all the time in this game. Keeping logs on dropped items is a hell of a lot more time consuming then looking up trades.

The problem is, you didn't say a hellova lot of anything- except some tips at the end of which don't really matter at all. Dropping trash is super different from dropping some 1500dps xbow. Don't you think they'd monitor this type of thing just as easily as any trade windows, if not EVEN FURTHER? Think about it, imagine someone could find a bug to make you drop your inventory- this is why this type of thing would definitely be monitored.

Let's read "carefully," so you can understand why I thought what I did.

"1. Developers, I really hope the paypal account you have tied to the "DONATE" button is not the same paypal account on your Bnet. All I have to do is click that donate...and I know who you are. "

So, the people that made HB- they don't have just 1 account on Bnet. If they did, it probably would be different and to a different email than the paypal account. This is how businesses work. For organization and accounting purposes, you have many different things and you wouldn't do something like mixing all your accounts into one batch. That makes tracking things incredibly difficult. On to your next point... "all I have to do is click that to donate and I know who you are." Uhh, WHAT the HELL are you saying here? You don't know who anyone is, you have a name and an email. Could be connected to a legitimate person, could be connected to a phantom account that is only used to xfer funds. You'd never know the difference. And you don't get any IPs or anything, so... NO CLUE wtf you're even hinting at here. This is read EXTREMELY CAREFULLY. So don't tell me to read carefully, when you can't be bothered to explain yourself in a coherent matter... as a grad student, I figured you wouldn't be so full of yourself. You sound like a computing science first year undergrad- wishing and thinking he was a grad student.

2. Do not use the same emails and user names that you use on this forum with your bnet account OR ANY SOCIAL MEDIA. We caught a small fry in Florida a week ago because I traced his Twitter account name to his XBOX Live account name which were almost identical, and OH LOOKY! his xbox live account is tied to his FACEBOOK.....didnt make much of a difference that he always tweeted about his hacks over a Prox.y at that point lol

Yea? Really? Okay. Most people know this already, if they don't- most people that use cheating applications know this already, if they don't, most people who have ever done something they didn't want everyone and their dog to find out about know this already. EVEN SO, Blizz would never use any of these means to ban people. Purchasing a product, talking about it, doing anything like that- does not confirm that you are using it. Even if you posted a youtube video of you using it, and linked the account- they would have to personally watch the video- confirm it's a bot- confirm you're the one botting on that account... and EVEN THEN, it's extremely tough for them to ban you.

NEEXXXXXXXXXXXT:
They have software that fishes through logs of game data and flags your account if your activity correlates their "bot" template.

No, this is an assumption and incorrect. They might have software that monitors equipment, but they never would say, "Hey, this guy has a bow that gives X, and so do all botters, plus with all their Life on hit... definitely everyone wearing equipment like this is a botter." If somehow you're not talking about equipment... and you mean the patterns of walking- then we already know and assume this- and you have not given a solution. So... thanks tips.

Makes NO SENSE. This is all using your words, so don't tell me to read carefully- otherwise you're going to be read into and you're going to be the one made a fool of.

Next:
If I worked in Blizzards anti-bot department, I would:
look at the top 5% of players that have the highest trade of Gold.

If you worked at blizz, they'd be just as stumped as they are now. Of course they look at the top 5% of players that have the highest gold earned, xp per day, items sold on the auction house... and then they monitor what they're doing using screening software. This is standard for EVERYTHING in life. Not just D3. This, in no way, explains how people are banned within 5 minutes- or before they reach 60, or anything of the sort.

"They are finding you based on how you transfer your items/gold."

I don't know ANYONE that uses trades over using the AH. The AH is the ultimate launderer. This shows your ignorance to the subject.

"How to stay under the radar:
If you have an item that you want to transfer from one account to another account DO NOT TRADE THE ITEM!
1. Go into a public game with your bot and your main and maybe some friends.
2. Leave the city and go into a dungeon where their are enemies.
3. DROP all of the items that your bot has on him.
4. pick up all of the items with your main."

This process is the most ridiculous thing I've ever heard of in my entire life. As a software engineer, explain to me the difference between dropping trash in a town and dropping it in a dungeon? You think there's some line of code somewhere: "If item dropped in town, then log and send to blizz hq for warden rape. Else, forget completely about item dropped- regardless of stats."

This is malarkey.

"Also,
Do not buy and Resale in the AH a lot. Only buy what your going to use and sell what you don't need. They do flag accounts that buy items just to resell them for quick profit. "

This is all over the blizz forums, anyone that does any research knows this. This isn't anything new and insightful that you've shared with the public, so don't act like you just delivered the golden chalice. You haven't.

I just read and quoted your entire post. I did this "carefully" and in context. Don't tell me to read carefully son, I'm actually a grad student.

Thanks for your 3 posts, all of which have been in this thread. You're a pillar to the community with your lies and deceit.

CLOSE THIS THREAD PLEASE.
 
Last edited:
You make the mistake of thinking any of the so called developers here are worth looking into; most of them just had the gumption to invest some time. The truth is most people could do what profile developers and even plugin developers do if they would just get past the mental block of it is to hard... sorry for those of you disillusioned, but the only thing special about anyone here sharing is just that they are willing to share; which you will note is what in a round about way this person is speaking against.

As far as bot detection goes... well that is a very deep subject, but no I don't think they would simply ban everyone based on detection; most companies at least have a review where they look at the infraction level and a person makes the final call; because, an automated instant ban could create a HUGE mess, if for example a mistake was made and all fraps users are flagged and insta banned...

Your right, I am new in this field. I have already started working on my own profile :)
The purpose of this post was to share my experiences working in a internet security firm to let people know tips on making yourself more anonymous on the net. I am by no means an expert in this field...my job was to sit on a computer and look into forums and record Usernames, Emails, MSN handles, Twitter ect. Then they had a customized search engine where they would search for similarities.
and like I said 9/10 hackers that we caught shot themselves in the foot because the Alias they were using was attached to older public accounts that they even forgot they registered to...anyone ever have a AIM or aol account? lol The good hackers don't publicize their stuff and it is almost impossible to track them. Most of the hackers we catch are 16 - 25 years old.
 
Man makes a well written post, explaining what has worked for him.. And is flamed, buddy forums never dissapoint.
 
The problem is, you didn't say a hellova lot of anything- except some tips at the end of which don't really matter at all. Dropping trash is super different from dropping some 1500dps xbow. Don't you think they'd monitor this type of thing just as easily as any trade windows, if not EVEN FURTHER? Think about it, imagine someone could find a bug to make you drop your inventory- this is why this type of thing would definitely be monitored.

Let's read "carefully," so you can understand why I thought what I did.

"1. Developers, I really hope the paypal account you have tied to the "DONATE" button is not the same paypal account on your Bnet. All I have to do is click that donate...and I know who you are. "

So, the people that made HB- they don't have just 1 account on Bnet. If they did, it probably would be different and to a different email than the paypal account. This is how businesses work. For organization and accounting purposes, you have many different things and you wouldn't do something like mixing all your accounts into one batch. That makes tracking things incredibly difficult. On to your next point... "all I have to do is click that to donate and I know who you are." Uhh, WHAT the HELL are you saying here? You don't know who anyone is, you have a name and an email. Could be connected to a legitimate person, could be connected to a phantom account that is only used to xfer funds. You'd never know the difference. And you don't get any IPs or anything, so... NO CLUE wtf you're even hinting at here. This is read EXTREMELY CAREFULLY. So don't tell me to read carefully, when you can't be bothered to explain yourself in a coherent matter... as a grad student, I figured you wouldn't be so full of yourself. You sound like a computing science first year undergrad- wishing and thinking he was a grad student.

2. Do not use the same emails and user names that you use on this forum with your bnet account OR ANY SOCIAL MEDIA. We caught a small fry in Florida a week ago because I traced his Twitter account name to his XBOX Live account name which were almost identical, and OH LOOKY! his xbox live account is tied to his FACEBOOK.....didnt make much of a difference that he always tweeted about his hacks over a Prox.y at that point lol

Yea? Really? Okay. Most people know this already, if they don't- most people that use cheating applications know this already, if they don't, most people who have ever done something they didn't want everyone and their dog to find out about know this already. EVEN SO, Blizz would never use any of these means to ban people. Purchasing a product, talking about it, doing anything like that- does not confirm that you are using it. Even if you posted a youtube video of you using it, and linked the account- they would have to personally watch the video- confirm it's a bot- confirm you're the one botting on that account... and EVEN THEN, it's extremely tough for them to ban you.

NEEXXXXXXXXXXXT:
They have software that fishes through logs of game data and flags your account if your activity correlates their "bot" template.

No, this is an assumption and incorrect. They might have software that monitors equipment, but they never would say, "Hey, this guy has a bow that gives X, and so do all botters, plus with all their Life on hit... definitely everyone wearing equipment like this is a botter." If somehow you're not talking about equipment... and you mean the patterns of walking- then we already know and assume this- and you have not given a solution. So... thanks tips.

Makes NO SENSE. This is all using your words, so don't tell me to read carefully- otherwise you're going to be read into and you're going to be the one made a fool of.

Next:
If I worked in Blizzards anti-bot department, I would:
look at the top 5% of players that have the highest trade of Gold.

If you worked at blizz, they'd be just as stumped as they are now. Of course they look at the top 5% of players that have the highest gold earned, xp per day, items sold on the auction house... and then they monitor what they're doing using screening software. This is standard for EVERYTHING in life. Not just D3. This, in no way, explains how people are banned within 5 minutes- or before they reach 60, or anything of the sort.

"They are finding you based on how you transfer your items/gold."

I don't know ANYONE that uses trades over using the AH. The AH is the ultimate launderer. This shows your ignorance to the subject.

"How to stay under the radar:
If you have an item that you want to transfer from one account to another account DO NOT TRADE THE ITEM!
1. Go into a public game with your bot and your main and maybe some friends.
2. Leave the city and go into a dungeon where their are enemies.
3. DROP all of the items that your bot has on him.
4. pick up all of the items with your main."

This process is the most ridiculous thing I've ever heard of in my entire life. As a software engineer, explain to me the difference between dropping trash in a town and dropping it in a dungeon? You think there's some line of code somewhere: "If item dropped in town, then log and send to blizz hq for warden rape. Else, forget completely about item dropped- regardless of stats."

This is malarkey.

"Also,
Do not buy and Resale in the AH a lot. Only buy what your going to use and sell what you don't need. They do flag accounts that buy items just to resell them for quick profit. "

This is all over the blizz forums, anyone that does any research knows this. This isn't anything new and insightful that you've shared with the public, so don't act like you just delivered the golden chalice. You haven't.

I just read and quoted your entire post. I did this "carefully" and in context. Don't tell me to read carefully son, I'm actually a grad student.

Thanks for your 3 posts, all of which have been in this thread. You're a pillar to the community with your lies and deceit.

CLOSE THIS THREAD PLEASE.

Why so angry bro, we are on the same team?

The reason I recommended dropping items outside in a combat area is actually mentioned in one of my "3 posts" that I guess you also read carefully too.
Its because I have not seen their database and I do not know how thorough their history is on their items. If they do record where you pick up an item, it would look suspicious if you picked up all of your items that you sell in the AH from New Tristram whereas if you picked up most of the items from the Northern Highlands it would look less suspicious.

I also mention in another one of my "3" posts on how they are catching people in the first 15 minuets - 4 hours. I'll give you a chance to READ it.

Also if you READ the rest of this thread you would see that one user did not know that buying and selling in the AH for profit can flag your account...

As for the paypal account...When you transfer money through paypal it sends you a receipt with the email of the user you sent the money to. I am just saying that i would be wise if you didnt use the same paypal with your bnet account.

My post was tips that I USE to stay under the radar...and I have not gotten caught so until then I am only trying to help out.
I am 0/5 and I use other Bots other than DB... I like to diversify my funds and spread out risk as much as possible. I am 0/5....never banned "knock on wood"
P.S. Demon Buddy is my new favorite :)

I apologize if my post somehow offended you.
Happy Labor day bro
 
Last edited:
I really think everyone overestimates what blizzard is actually logging or what they can see. Of course they have logs of the more basic activities like login/out timestamps, game creation statistics, chat, GAH/RMAH etc. But I highly doubt they are logging every mouse click or movement, every item dropped on the ground or traded. I personally think alot of what they do log and can see are errors and patterns of abnormal commication via client/server. A few examples would be crash reports, combat routines trying to use skills abnormally (ie: I wont name profiles/plugins but there were 2 that were using DH vault suspiciously/unintended on here for awhile), users trying to run profiles with the wrong quest and getting match making errors etc. I could go on...

I am also willing to bet the percentage of players banned for botting or for whatever else is much smaller than those that havent yet. So I personally dont buy the idea that I am lucky that I havent been banned yet after botting on 12 accounts for 3 months from the same ip/hwid, trading billions of gold, $1000's of dollars worth of transactions through the RMAH, accounts with 700 million gold collected, etc. The intelligence of most users in this community is laughable at best and instead of picking to battle blizzard to find ways to "stay under the radar", everyone should learn what they are actually doing/using.

I also agree with codenameG, they could easily combat botting with the proper technology/investment/time but blizzard now lives in a corporate world. They are not going to piss away money behind the scenes to deter us, customers like everyone else making them money. They choose to use the lawyers they have on retainer (being paid whether they are doing anything or not) to publicly look like they are doing something.

Just woke up and I am baked, so I hope this makes sense. ;)

Also I was speaking hypothetically, I dont bot...
 
I strongly agree with Deliver with his thought on not linking your D3 email address to the forum which is DB. That is just common sense lol. My other suggestion is... dont brag in blizzard servers you have a "bot". That just seems very idiotic for someone to say and we all know that conversations are monitored. All blizzard would have to do is run a simple search for the word, then do an extensive search on the profile's they have listed, also not to forget their possible algorithms of identifying one. But blizzard logging everything form millions of users and then greping certain information I would think is not possible. The amount of server load and memory just to catch a handle full of users in the blizzard community?? Plus limit your friends to trust worthy people/family and dont tell them you are botting (in my case my botting account has no friends), you just do not know if that one person can report you and then you are screwed. Do not bot in channels, your account is viewed in a channels and people can report you if they felt you were botting. Dont play in public games period lol that is just silly. Also, check on your chat in your account ever so often and dont leave unattended conversations going. Do not run multiple clients under 1 Physical Address, this means 1 Diablo client per ISP (Do not use proxies, slaves..etc)... This is just common sense stuff.

Suggestions for Profile makers and Dev's:
1. Fix all stuck areas, fail safe would to either leave the game and restart it or reset profile. This should not be a plugin but implemented into the bot!! (running into a wall for long time = insta imo)
2. Improve on blacklisting certain monster which are not reachable.
3. Improve priorities with monsters. One example is Hatcheries for bats or any other minion. If the bot is stuck in a loop of minions spawning constantly... Well then do a radius walk around and look for the Hatchery. Same with trees in random spots... kite them out
4. Random pathing, dont always take the same path every game for profiles, routines...etc. Coding should be written where the output can never be the same, very easy condition to write.

Steps I usually take to assure my safety is, cleaning all sorts of cookies using Ccleaner and ATF cleaner. Rename the .exe of DB and put the folder and contents in a random location (not a common location like "Downloads, Desktop, Documents"...etc). I also take these measures which I have suggested. And when i visit this forum I use my smart phone and never user the same network the bot is running on. These seem like extreme measures but I believe they minimize my chances of becoming caught and make me feel safer when running.
 
Last edited:
Status
Not open for further replies.
Back
Top