These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE Information Portal

 
  • Topic is locked indefinitely.
 

New dev blog: Team Security - Banning Bad Guys and also Bad Guys

First post First post
Author
CCP Sreegs
CCP Retirement Home
#241 - 2012-03-02 15:29:15 UTC
David Forge wrote:
Might there be a way to crossreference the ten banned market bot accounts with their past market activity to determine for certain that they were indeed responsible of such a noticeable effect on the markets or if we are coincidentally experiencing a time of less vicious competition? It seems hard to swallow that ten bots were doing so much and this way we could know for sure one way or the other. If they were responsible their owners must be sitting on a massive pile of ISK and assets.


We'll certainly do some digging in this direction. Probably not until Monday though.

"Sreegs has juuust edged out Soundwave as my favourite dev." - Meita Way 2012

David Forge
GameOn Inc.
#242 - 2012-03-02 15:33:45 UTC
I understand as well as anybody that it's the weekend and a certain amount of alcohol must be consumed in the next two days. Blink
pmchem
Brutor Tribe
Minmatar Republic
#243 - 2012-03-02 15:36:46 UTC  |  Edited by: pmchem
CCP Sreegs wrote:
Vera Algaert wrote:
malaire wrote:
Asuri Kinnes wrote:
If it automates player actions it's a bot. Nothing unusual there... Nothing grey about it either.

How do you define "player action" ?

Opening market window for certain item is usually "player action", but that can also be done with javascript API call.

So would you consider using that javascript API call "automating player action" ?

exactly

Ausri, visit http://eve-central.com/home/upload_suggest.html with your IGB for an example

Here's a forum thread (by malaire) on a practical application of the javascript API in connection with a cache reader (both ccp sanctioned tools).


Could you please provide me with some link validating that CCP sanctions cache scraping?


Well, actually, yeah. There's a good example out there. Reverence is a tool specifically designed to read the Eve client cache. It was created by Entity, who I understand has some pretty good connections at CCP. It has existed for years, had many many forums threads, and its OP specifically states:
"Special thanks go to CCP for granting permission to release this product, even though it is heavily inspired by EVE Online's design."
https://forums.eveonline.com/default.aspx?g=posts&t=6501

So either this quite well-respected (even famous!) player is lying and this illegal tool has been allowed to flourish in the technology lab forum for years and years while being used by dozens of third party developers -- or CCP sanctions cache scraping.

Market uploaders using the IGB similar to eve-central's uploader are quite common, really. Eve-central's has been around for years too. If you feel they haven't been properly sanctioned, I hope you take the opportunity to do so! They are not the droids you're looking for.


edit: I presume the petition referred to in this post sanctioned cache scrapers and using the IGB for market uploads?
https://forums.eveonline.com/default.aspx?g=posts&m=881205#post881205

https://twitter.com/pmchem/ || http://community.eveonline.com/news/dev-blogs/community-spotlight-garpa/ || Goonswarm Economic Warfare Cabal

IsTheOpOver
#244 - 2012-03-02 15:52:21 UTC
First of all, I'd like to applaud CCP Sreegs and CCP for banning bots. The last few months have been somewhat depressing as the bots running rampant (despite petitions, gankings, whatever) seemed unhindered. The "War against bots" thread that was very active right after fanfest had been dead and buried for the better part of a year. It truely seemed that CCP did not care. This is very good news and a step in the right direction.

CCP Sreegs wrote:

We're simply not going to design our game, played by piles of people legitimately, around a few bad apples. We may make changes because they make sense from a gameplay perspective or to spice things up or for a plethora of other reasons, but we're not going to sic the design team on making it impossible to bot via complete randomization of everything or captchas or *insert flavor of the day barrier to getting things done in a videogame here*.


Except for calling Eve a videogame (it's a computer game) I agree with your paragraph there completely. Please do not add captcha to the mining process (or anything else that a bot would be created to circumvent and make it even more of a pain in the ass to legit players)

Now about the 3% number. C'mon man. Instead of saying "3% of the botters did not change their behavior and had to be permabanned", it would have been much more accurate to say "3% of the botters were too stupid to not sell character, start new account, buy new character and continue on botting." The whole idea of botters being "reformed" by a ban and not changing their ways is rediculous. It might fly with the board of directors when describing how you didn't have to turn off 10,000 paying accounts, but to the average player in eve it's quite insulting. Cheaters are gonna cheat. Penalizing players for a maximum of 1/2 month subscription time for earning 100's of billions of ISK via illegal botting is obviously not a deterrent.

Now that you have implemented the "character freeze" for offending accounts, this should help things. But really it's just upping the penalty to 3 billion (or perhaps more for a ratting character) that the botter would not get back by cashing in his old character on the Bazaar. If this is going to continue to be a once-a-year thing (see you next Fanfest!) then the problem will continue as the botters will make that 3b back soon enough and be back out there doing evil.

I'll be optimistic that the whole Incarna/reorg/whatever was the reason for the lack of progress in this matter of the last year and that from now on things will be better. As a legit player who puts a lot into this game, I appreciate my efforts not being mitigated by cheating botters. Keep up the good fight!
malaire
#245 - 2012-03-02 16:04:25 UTC
pmchem wrote:
edit: I presume the petition referred to in this post sanctioned cache scrapers and using the IGB for market uploads?
https://forums.eveonline.com/default.aspx?g=posts&m=881205#post881205

Yes, basically same what GM Karidor said a bit later publicly (see post after that one on this thread.)

New to EVE? Don't forget to read: The Manual * The Wiki * The Career Options * and everything else

CCP Sreegs
CCP Retirement Home
#246 - 2012-03-02 16:04:49 UTC
pmchem wrote:
CCP Sreegs wrote:
Vera Algaert wrote:
malaire wrote:
Asuri Kinnes wrote:
If it automates player actions it's a bot. Nothing unusual there... Nothing grey about it either.

How do you define "player action" ?

Opening market window for certain item is usually "player action", but that can also be done with javascript API call.

So would you consider using that javascript API call "automating player action" ?

exactly

Ausri, visit http://eve-central.com/home/upload_suggest.html with your IGB for an example

Here's a forum thread (by malaire) on a practical application of the javascript API in connection with a cache reader (both ccp sanctioned tools).


Could you please provide me with some link validating that CCP sanctions cache scraping?


Well, actually, yeah. There's a good example out there. Reverence is a tool specifically designed to read the Eve client cache. It was created by Entity, who I understand has some pretty good connections at CCP. It has existed for years, had many many forums threads, and its OP specifically states:
"Special thanks go to CCP for granting permission to release this product, even though it is heavily inspired by EVE Online's design."
https://forums.eveonline.com/default.aspx?g=posts&t=6501

So either this quite well-respected (even famous!) player is lying and this illegal tool has been allowed to flourish in the technology lab forum for years and years while being used by dozens of third party developers -- or CCP sanctions cache scraping.

Market uploaders using the IGB similar to eve-central's uploader are quite common, really. Eve-central's has been around for years too. If you feel they haven't been properly sanctioned, I hope you take the opportunity to do so! They are not the droids you're looking for.


edit: I presume the petition referred to in this post sanctioned cache scrapers and using the IGB for market uploads?
https://forums.eveonline.com/default.aspx?g=posts&m=881205#post881205


Yeah I got what I needed out of those replies. I was just curious how we were communicating this because you guys seemed to know and I didn't and it saved me a trip downstairs. :)

"Sreegs has juuust edged out Soundwave as my favourite dev." - Meita Way 2012

CCP Sreegs
CCP Retirement Home
#247 - 2012-03-02 16:20:16 UTC
IsTheOpOver wrote:
First of all, I'd like to applaud CCP Sreegs and CCP for banning bots. The last few months have been somewhat depressing as the bots running rampant (despite petitions, gankings, whatever) seemed unhindered. The "War against bots" thread that was very active right after fanfest had been dead and buried for the better part of a year. It truely seemed that CCP did not care. This is very good news and a step in the right direction.

CCP Sreegs wrote:

We're simply not going to design our game, played by piles of people legitimately, around a few bad apples. We may make changes because they make sense from a gameplay perspective or to spice things up or for a plethora of other reasons, but we're not going to sic the design team on making it impossible to bot via complete randomization of everything or captchas or *insert flavor of the day barrier to getting things done in a videogame here*.


Except for calling Eve a videogame (it's a computer game) I agree with your paragraph there completely. Please do not add captcha to the mining process (or anything else that a bot would be created to circumvent and make it even more of a pain in the ass to legit players)

Now about the 3% number. C'mon man. Instead of saying "3% of the botters did not change their behavior and had to be permabanned", it would have been much more accurate to say "3% of the botters were too stupid to not sell character, start new account, buy new character and continue on botting." The whole idea of botters being "reformed" by a ban and not changing their ways is rediculous. It might fly with the board of directors when describing how you didn't have to turn off 10,000 paying accounts, but to the average player in eve it's quite insulting. Cheaters are gonna cheat. Penalizing players for a maximum of 1/2 month subscription time for earning 100's of billions of ISK via illegal botting is obviously not a deterrent.

Now that you have implemented the "character freeze" for offending accounts, this should help things. But really it's just upping the penalty to 3 billion (or perhaps more for a ratting character) that the botter would not get back by cashing in his old character on the Bazaar. If this is going to continue to be a once-a-year thing (see you next Fanfest!) then the problem will continue as the botters will make that 3b back soon enough and be back out there doing evil.

I'll be optimistic that the whole Incarna/reorg/whatever was the reason for the lack of progress in this matter of the last year and that from now on things will be better. As a legit player who puts a lot into this game, I appreciate my efforts not being mitigated by cheating botters. Keep up the good fight!


The 3% number was quoted out of hand and was not meant to be taken as law. The 3% number was also quantified. I will say that the difference between the 3% number I gave and the numbers you just mentioned related to bots and character transfers is that yours were invented out of thin air and mine came from actual measurements. I don't give these numbers to any board, council of elders or anyone else. These numbers at the time were pulled solely because we wanted to start taking measurements of effectiveness on our (mostly)volunteer time for what was a (mostly)volunteer effort.

I know that we did spend some time keeping an eye on character transfers and that initially it wasn't a problem. It might be fun to go back and run the actual numbers, but I find it to have been as good a measurement for it to have popped up in a "how not to get caught" guide as for us to devote time to writing queries. It was bad and we fixed it.

As you say only time will tell and to be honest I don't even see curbing the activity as so much of a challenge of curbing people's preconceived notions of that activity.

So big takeaways are more communication and that was something we've always identified as necessary. It can't be a flood of information because I have 100 jobs to do but it can't be nothing either, because in essence a lack of communication has been translated as a lack of activity whether that's true or false, good or bad. Lol

"Sreegs has juuust edged out Soundwave as my favourite dev." - Meita Way 2012

Carlos Aranda
Doomheim
#248 - 2012-03-02 16:27:33 UTC  |  Edited by: Carlos Aranda
I sleeped 1 day over this - and I can tell you, I am still raging about what our PR-blue cop Darius Johnson tells us here.

You confess between the lines, you did nothing several months at least vs bots and cheaters. You do not confiscate or track their ill-gained ISK. All you do, is giving them a 14day ban and hope, they now really, really find their rightous way to be no more cheaters. This is not, how power works!

Acknoledged you did some work and fu_cked u_p - then the result is overall still f_uck u_p and not minus x minus = plus how you want to sell it to us.

I have a question for you:

How many days you think a botter with a tengu needs to break even, if he calcs in, that you ban him and he is losing the account with the tengu+char for it?

All you did, you catched some small fish and bragg about it.

I told you, from my experience many of them had the bots for months ,becuase you did nothing against them. Even if they get banned, it is still a huge profit for them.
Soporo
#249 - 2012-03-02 16:32:22 UTC
Nmae and shame the Corps and, especially, the Alliances who are shown as the worst offenders and you will change the rather morose perceptions people often have about anti-botting efforts.

Every normal man must be tempted, at times, to spit on his hands, hoist the black flag, and begin slitting throats. - H.L. Mencken

Carlos Aranda
Doomheim
#250 - 2012-03-02 16:40:29 UTC
Soporo wrote:
Nmae and shame the Corps and, especially, the Alliances who are shown as the worst offenders and you will change the rather morose perceptions people often have about anti-botting efforts.


agreed.

It is not like the 0.0 people do not know, who is bot-friendly and who not. CCP, Darius and also other CCP-moderated forums just prefer not to talk about these unpleasant people, often stop discussions about it, because it could be bad for their reputation.

This way they only protect the botters. make the problem worse, make ppl like me, who see them every day, at least angry, many other honest players just leave to find a better game.
Jouron
Hadon Shipping
#251 - 2012-03-02 16:59:43 UTC
Botting is unacceptable. Always.

However people do it currently because they believe it makes more sense to take a risk and save time and let a program do a remarkably simple and mundane task for them instead of doing it themselves.

Creative gameplay changes which increase player interaction to complete a task is another way of combating boters.

If all pve rat killing became more similar to how incursions are, people wouldn't be able to run ratter bots in null sec. How many people do you know are farming Incursions...With bots? Probably none.

Same thing with mining. increase the player involvement to achieve the task. Make it more like PI.
Now I know there are PI bots out there, However; I would hazard a guess most of those bots still need a player to make a functioning colony in the first place for the bot to be any use at all, it still need player involvement on the front end.

Hearts and Minds.

No one should bot it is cheating. However people do bot for there own reasons and to them it makes sense, otherwise they wouldn't do it.

Another way to combat botting is to take away that reason and one way to achieve that is creative gameplay development.
Hopefully in the future with improvements to eve people wont be able to bot either because bots cant handle it or player experience in an activity will improve to the point where people will have fun doing an activity and the bot wont be desired.
IsTheOpOver
#252 - 2012-03-02 17:01:06 UTC  |  Edited by: IsTheOpOver
CCP Sreegs wrote:

The 3% number was quoted out of hand and was not meant to be taken as law. The 3% number was also quantified. I will say that the difference between the 3% number I gave and the numbers you just mentioned related to bots and character transfers is that yours were invented out of thin air and mine came from actual measurements. I don't give these numbers to any board, council of elders or anyone else. These numbers at the time were pulled solely because we wanted to start taking measurements of effectiveness on our (mostly)volunteer time for what was a (mostly)volunteer effort.


The numbers I mentioned were not taken from thin air. You can get a perfectly able mining character for 3 billion on the Bazaar pretty much any day of the week. 14 days is about 1/2 of a month. Forgive me if I can't accept that a botter making billions is going to be set straight by such a petty fine when it was so easy to get started again (perhaps out the money for buying a different bot program). (if you want to say my "97% of botters did this" was taken out of thin air.. okay Blink )

CCP Sreegs wrote:

So big takeaways are more communication and that was something we've always identified as necessary. It can't be a flood of information because I have 100 jobs to do but it can't be nothing either, because in essence a lack of communication has been translated as a lack of activity whether that's true or false, good or bad. Lol


It's not the communication, it's the rampant botting that has plagued the game for the last year visible by anyone who's playing the game. Actions not words.

Thanks for taking the time to respond personally to our concerns, even if some of us are a bit antagonistic.
Seb Seba
Garoun Investment Bank
Gallente Federation
#253 - 2012-03-02 17:10:46 UTC
This should be 30 days / 60 days + ISK wipe into negative and on third offence perma ban.
14days for a botter is nothing. Change the IP you log from? Nothing. Rule of three is ok just make it meaningful.
Marlona Sky
State War Academy
Caldari State
#254 - 2012-03-02 17:11:29 UTC  |  Edited by: Il Feytid
CCP Sreegs and the rest of the team killing bots,

I just wanted to say once again, thank you. I am especially excited because a friend of mine who helped get me into this game quit five years ago due to his frustration with bots. All he really liked to do was mine and build ships and such. He was more about the whole process of building with the very stuff you mined. Anyways, he quit because the botters made it impossible to compete. I showed him your blog and pointed out some dotlan graphs and such and now, he said he is going to reactivate his account. He wants to dust off his pick ax and get busy building ships.

Now granted the moment he sits still in a belt I plan on suicide ganking his Hulk for epic lulz Lol, but the point is, your work is causing players to return to the game.

Keep up the good work!
kakmonstret
Domain Mining and Trading Corp
#255 - 2012-03-02 17:14:18 UTC
Another metric that could be interesting and maybe give a hint on th effectiveness of different system is to relate to the "Report a bot" system.

So how many of the bots banned had previously been reported by a player? How many characters have been reported in total by players? My guess is that the latter will be huge and probably quite useless. But the first could be interesting as my hunch is that players might be good at finding bots, sadly I think we have a large amount of false positive in that reporting to.

If a large portion of bots actually are tagged as such by players maybe it would be worth it to use more costly methods for finding bots in this group?
Mioelnir
Brutor Tribe
Minmatar Republic
#256 - 2012-03-02 17:17:27 UTC
CCP Sreegs wrote:
My perspective has always been that we make a client to interface with our server and that's what you're allowed to use


Oh really? Isn't it more like a pc game, soon a console game, a number of websites like evegate, an XML API and maybe a JavaScript API (more a client interface really)? Because if we take that statement literally, everyone interfacing his evemon, eft or pyfa with the API uses an interface to the server that is not allowed.
Vaerah Vahrokha
Vahrokh Consulting
#257 - 2012-03-02 17:37:51 UTC
Why did you link a RMT site? Are you crazy?
Grey Stormshadow
Sebiestor Tribe
Minmatar Republic
#258 - 2012-03-02 17:39:20 UTC
So this thread has 10+ pages already. I'm really lazy today so could someone make combined "top 10 tears" quote.

Get classic forum style - custom videos to captains quarters screen

Play with the best - die like the rest

Xantor Bludberry
#259 - 2012-03-02 17:40:50 UTC
Vaerah Vahrokha wrote:
Why did you link a RMT site? Are you crazy?

Because I personally have the impression that the CCP did not see and live in what is an illusory world. Yes, there are bots, but the RMT is so difficult, "how do we track?" Ok, here's a SAUCER FOR THIS ****! Kill them!
CCP Sreegs
CCP Retirement Home
#260 - 2012-03-02 17:44:18 UTC
Xantor Bludberry wrote:
Vaerah Vahrokha wrote:
Why did you link a RMT site? Are you crazy?

Because I personally have the impression that the CCP did not see and live in what is an illusory world. Yes, there are bots, but the RMT is so difficult, "how do we track?" Ok, here's a SAUCER FOR THIS ****! Kill them!


We're very well aware of the various websites out there people may use to illegally purchase product. There's a bit more to it than that but it's really kind of off topic. I'd be happy to have a discussion about RMT at the appropriate time. Grab me if you're heading to fanfest even. :)

"Sreegs has juuust edged out Soundwave as my favourite dev." - Meita Way 2012