Regarding the recent banishments (Programmers need your input)

[Xura]

I bet they just pick the free account hehe

[WRtB]

"About 4000 of the 4959 banished accounts are premium accounts."

[Yaboomaster]

"About 4000 of the 4959 banished accounts are premium accounts."

sure, and most of them have premium for 10 years... They can tell what they want cuz the black list will not be published, same as proofs etd.

[Jan]

Hey guys,

I was just thinking some about Tibia's past, how they started, what security leaks they had and then i remembered the XTEA generation algorithm wich was really insecure. There was the possibility to bruteforce.
Remember, update 8.22 fixed this with getting the mouse position to generate a random XTEA key.

Now, may it be possible to use this method for getting the mouse position to check if the player is cheating? Everytime a normal player attacks a monster, normally he klicks on it in the battlelist or at the screen. Bots do not klick on the monster, they just send an attack packet, even if Tibia is minimized.

for more information about the mouseposition thing read some here:
http://www.tpforums.org/forum/showth...?t=1959&page=9

//Jan

[Yaboomaster]

Hey guys,

I was just thinking some about Tibia's past, how they started, what security leaks they had and then i remembered the XTEA generation algorithm wich was really insecure. There was the possibility to bruteforce.
Remember, update 8.22 fixed this with getting the mouse position to generate a random XTEA key.

Now, may it be possible to use this method for getting the mouse position to check if the player is cheating? Everytime a normal player attacks a monster, normally he klicks on it in the battlelist or at the screen. Bots do not klick on the monster, they just send an attack packet, even if Tibia is minimized.

for more information about the mouseposition thing read some here:
http://www.tpforums.org/forum/showth...?t=1959&page=9

//Jan

Yea but Tibia Client dont send anything new to server

[Jan]

Are you sure? Maybe they send it in a way where we wouldnt realise it as an "im a botter" information. Something stupid that seems normal but isnt. We thought about a packet that starts the "scan for bot mode" and that this packet is only sent once a month. Maybe it just hasnt been captured yet?

[Yaboomaster]

So they need to store informations from this one month at our disc. Cuz its big possibility that u will not use bot in the day that client send infos.

[jtalh2003]

I've added this into the waypoint making of my bot. When you make a ground waypoint, it randomly chooses other positions within 4 squares of that on,e then uses the dat reader to make sure they are walkable. It then puts them at the end of the waypoint like:

1,2:3,2:1,-1
That means
It can go to the set position X+1 and Y+2, X+3 and Y+2, and X+1 and Y-1

Pretty easy to implement.

just wondering will it pick a random square after every kill when it starts to move towards that wpt again?

[DarkstaR]

Not now it only does it in waypoint creation. But it will get up to 6 randoms for each space so im pretty sure thats undetectable as a set path

[DruidRox]

Its just a matter of time and testing to work around it, I find it amusing they are so scared to give any details about what it is because it must be easy to work around.