Tree of Savior Forum

Suggestions for making the Best Anti-Bot for ToS

To start, I’d just like to say that any bot might be illegal for a game, but not all bots are bad. It depends on how they are used (think free buffs and heals for every one). Unfortunately, they are, nearly 100% of the time, used for personal/group gains - rarely to improve and help other players’ progress on the game.

"Security" Check

This might be a stupid suggestion but what if instead of captchas, we use something else that involves pressing specific control buttons.

How it could work

At random intervals (1-3 hours), a small, semi-transparent notification would slide from the side telling the player that a quick security check sorta would commence in 60 seconds (with a countdown, but player has option to either close it just to remove it from view, take the check now OR to remind him again ONCE in 10 minutes). This will make the player expect and have enough time to prepare for the check.

When the countdown ends, the player has a 3 second invulnerability/invisibility/untargettable buff to do the check. The last control key/button he’s been using/pressing will also be muted during that window and will not be included in the check (to prevent him from getting consecutive failed tries NOR automatically pass the check). Once the check is up, it will ask the player to press a random control button/key (doesn’t trigger the assigned skills/functions in-game, does not include movement keys and jump key so player can still move around) to remove the prompt. The player has 3 tries. After the failed 3rd try, he’s logged out of the game and will have to wait for a specific amount of time (1 hour?) before he can log in again.

Exceptions

The check will not appear if player is:

  • Vending;

  • In towns;

  • In PVP situations;

  • In quest/field boss fights;

  • AFK-ing but doing nothing outside of towns.

Advantages

  • Bots can guess, but with the number of keys available (can even use 2-key/button combos) and the limited number of tries, they’ll have to be smarter.

  • It’s less intrusive than captchas. Players are alerted well without affecting gameplay, and have the option to delay the check in case they’re doing something really critical (e.g. on very low hp).

  • It’s joypad-friendly. Captchas may require alphanumeric inputs so players on game controllers will have to reach out for the keyboard just to get around the check. Simply pressing the correct button/key is easier on either keyboard or game controller.

  • Consider it a bonus, possibly life-saving, buff. If you’re lucky (the check appears at the right time), you can use it to save yourself from a last-hit demise.

I thought this might work. I’ve nowhere versed with game security, but maybe this will give them ideas (hopefully).

(Most) bots will kill a game

I come from RO and have experienced using bots (I won’t be a hypocrite and say I haven’t) AND know how annoying they are when they’re used by other players against you.

It was not a matter of being able to abuse the system or have advantage over other players, but rather the idea that “if you can’t beat them, might as well join them”.

It was still fun, in a way, but not 100% fun (if there were no bots at all). I doubt there was ever an MMO where the creators thought “hey, let’s create a game botters can enjoy”.

This will not work at all. There were MMOs in the past with security checks and it still didn’t stop bots. Hackers created autoresponding with their bot programs to bypass them. It’s also a big inconvenience to players especially when it appears in the middle of combat. And what about players who go AFK in the field? Will they get banned because they were unable to respond to the security checks?

I still think creating their own bot program is more viable solution. Of course using it wouldn’t give the same advantage as actually playing the game. A huge XP and drop rate penalty should be given to balance it.

Thanks for your input. I included “AFK-ing when out of town” under exceptions. Yeah, maybe hackers will always be smarter.

This post was flagged by the community and is temporarily hidden.

You can’t just have a GM simply teleport in all the time just to investigate for every instance. It’s not practical nor efficient. GMs have also other important stuff to do than hunting bots.

2 Likes

This post was flagged by the community and is temporarily hidden.

It still won’t work. You think game publishers and developers haven’t tried? If it were that simple then bot problem in any MMORPG would have been rectified or at the very least greatly reduced their numbers. And like I said previously your idea inefficient. GMs don’t have a lot time to hunt for bots everyday and have other duties to fulfill. Not to mention some publishers don’t prioritize that bots are actual threat to the game and can even profit from them leaving them unchecked for a time. How do I know all this? Take a wild guess.

This post was flagged by the community and is temporarily hidden.

1 Like

so your solution to this is to simply let them be. good job

I never said that. Please don’t assume and read my posts dumbass.

Bots have been a problem in most MMOs but never been truly been resolved. The main reasons why there are bots is leveling, loot hunting, and gold/in-game money farming. Not all players have the time and effort to log in and actually play the game which is why they resort to it. Gold sellers use it as a means to earn gold/in-game money without effort.

But if the game developer creates their own bot program integrated into the game (with corresponding XP and drop rate penalties) that issue is solved and don’t have to rely on a hack since its legal. But to make that work they have tighten their server security and ensure that any hacks tampering their bot program is immediately booted out of the game or their accounts banned.

Even with legal bots, why would hackers and gold sellers use them if they can earn more by using their own illegal bots? Your solution is not really much better than trying to clamp down on bots directly, since botters will still use their bots that have no penalty.

This post was flagged by the community and is temporarily hidden.

There was another mmorpg i played where players could buy a scroll for 1 gold that summoned a little bomb monster, when a player attacked it they would instantly die and be forced to respawn in town, and if you killed too many it would alert a gm somehow. We could have something similar in ToS since we already lose durability on equipment for dying (plus we even have the adventure log which shows who killed the most of a mob), which would make it impossible for the bot to actually continue leveling unless it knew to go repair after a certain number of deaths. This way every player in the game is technically a bot hunter, maybe they could even add rewards for each time one of your own summoned bomb things gets killed by a bot.

The game already has an anti-bot.

If you bot in one map for awhile, the Grim Reaper boss appears ontop of you (this boss has a timer till it dissapears).

He will summon magic mobs that will hit 100% of the time, and needs skillfull play to defeat. Defeating him nets you 0 drops, and 0 money, but some okay exp for taking your time to kill it. Bots will have a difficult time dealing with it, although it’s not impossible to deal with it.

But for it to get triggered, the bot has already killed 1000 monsters already. The bot has already collected the loots, so instant silvers to sells. Though the bot may die on the Grim Reaper, after spawn, the bot will just go back and repeat, kill another 1000 monsters.

Isn’t it much better to have something like a Captcha System, But instead of typing the answer, pushing a button for the answer is much better and faster.

This is just and idea though:

  • Captcha System with Math equations as the Questions.
  • 10 Buttons to choose the answers. With 2 additional buttons for the
    confirm and Clear buttons. [0-9, Confirm, Clear] Needs to be
    randomized like entering a secondary password on some other games.
  • Captcha window will appear either upper left, left, lower left, upper
    right, right, or lower right of screen. We need to make it random so
    macro programmers will have hard time where to click if Captcha
    window appear.
  • 10minutes before the captcha ends. You can close the captcha and
    reveal it again if you type /captcha or similar. So that if you are
    fighting mobs in grinding area, you have time to enter the answer.
  • Captcha will not appear when fighting Bosses.
  • If 1 minute left and still not entered the answer, the captcha will
    appear instantly(can’t be closed until time limit or answered).
  • The question will appear like some simple math problems, like 45+31,
    2x15, etc.
  • If the answers are 3 digits, you need to press 3 digits and Confirm
    buttons. If you press wrong, you have a clear button and can repeat.
    You have 3 attempts to enter the right answer.

For example:
Question: 5 x 10 = ?, Press 5 and 0 and Confirm.
Question: 20 + ? = 120, Press 1 and 0 and 0 and Confirm.

If for example, you spent 3 attempts wrong, you will be sent on a special map where there is a route needed to get to a warp to a city. The route needs to have jumping and moving platform so the bots can have a hard time walking to get out and go to the warp point. If the char fall out, it will go again in the spawn place of the map to repeat.

I dunno, its just an idea. To make them suffer a little, but if not botting, simple math with less than 5seconds on pressing the button can finish the captcha. If you enter the captcha correctly, 1-2minutes movement speed buffs is the rewards. So no overpowering like additional damage buffs to receive.

Bumping OP Post.
This is BY FAR the best counter measure against botting, the last problem are the Spammers & Gold Sellers.

But the two are related. If you stop the farming, where do you find your gold to sell :wink: ?

This thread deserved to be Necroed! But I agree, I don’t want to see this game getting ruined by botters.

Necromancers.

Let’s begin the ritual ! Advanced Revive !

1 Like

or make something like captcha every 25-30 mins for all player there will be captcha that will appear, and for 1 min if a player didnt successfully entered the captcha they will be automatically disconnect to server

Guess what, koreans dont care about bots because no one bots or hacks in Korea, they need to use their social security number to register for stuff online, and if you get banned from a game, you will never be able to play anything from that company again, never.