Discussion: How Can We Handle Botting Better?

[Fhaerron]

Which would mean Square isn't taking action on people breaking the terms. Doesn't sound like a good thing for a company to do.

I actually had a discussion with some people about botting a while ago, and I think that the person replied to me might actually be right. (To give more context I was actually wondering why SE wouldn't perma ban accounts of people who buy gil from such botters).

So it's basically totally fine to break the ToS then.

Why make a ToS in the first place then?

Because if they actually had 14 million players like they brag about, they could actually enforce them. But when you tell the media 14m and only have maybe 500k you need to hold onto them as hard as you can to give the illusion your numbers are real.

[Risvertasashi]

Which would mean Square isn't taking action on people breaking the terms. Doesn't sound like a good thing for a company to do.

In many cases. This is precisely what is happening.

What you'd really want is anticheat software. But this is a thorny subject, both legally and ethically. On top of that, aside from bots, SE would need a clearer stance on addons that do things like optimize game graphics or crowdsource information... and the most controversial of all, parsers. ..Moreover, Asian companies have a notorious record of making really ineffective anticheat software, when they even bother to try.

But SE likes the "don't ask don't tell" status quo, which means they can't take action against people that disguise their botting well enough to plausibly be players. If you want things to change, this topic needs to be addressed first.

Finally, as has been mentioned in other posts, relying on players to report other players for botting leads to alarmingly high false positives.

[KisaiTenshi]

In many cases. This is precisely what is happening.

What you'd really want is anticheat software. But this is a thorny subject, both legally and ethically. On top of that, aside from bots, SE would need a clearer stance on addons that do things like optimize game graphics or crowdsource information... and the most controversial of all, parsers. ..Moreover, Asian companies have a notorious record of making really ineffective anticheat software, when they even bother to try.

But SE likes the "don't ask don't tell" status quo, which means they can't take action against people that disguise their botting well enough to plausibly be players. If you want things to change, this topic needs to be addressed first.

Finally, as has been mentioned in other posts, relying on players to report other players for botting leads to alarmingly high false positives.

Most anti-cheat software is easily defeated by the very same "well meaning" third party tools people. Botters don't care.

Putting the legality of any such tools aside, there are ways of crowd-sourcing the bot hunting , and it wouldn't require every player to have the program, just the same people who complain about the bots, and those who would benefit from the bots disappearances. Basically the same idea behind an antivirus program, have users with the program track the coordinates of all players, and then use the OOB areas to detect the worst disposable bots, and some smarter logic to find the "undetectable" bots by detecting behavior that gives away that it's a farm bot (and quite frankly it's embarrassing how easy it is to find bots just from just the Lodestone, no game client needed. But that doesn't tell you that they're active.)

What you want is passive reporting. Kick a player, GM gets a report with the entire chat log from the client and a screenshot. Vote for kick, log+screenshot. Report RMT log+screenshot. Allow reporting bot activity from any search panel, have it report the coordinates of the player, the reported bot, and any players within 20y of the target. Bots like to stand on top of each other, so that would reveal all the bots. Keep seeing players in the same locations, especially out of bounds, then you know who is botting, and who's controlling them.

But like any combating of fraud, you need to go after the source, and law enforcement just moves too slow to do anything when the bots only exist for a week.

[Final-Fantasy]

The current system does not work.

[Vnolan]

Which would mean Square isn't taking action on people breaking the terms. Doesn't sound like a good thing for a company to do.

The current system does not work.

Depends on your point of view. If you're trying to strike a middle ground between everyone using bots, and spending more time and money than necessary trying to get rid of them, it works.

[Dreggit]

It has been quite some time since last i posted on the forums, having recently come back to the game after 13 months I do not have any solutions for how to resolve nothing. However, I was doing hunting logs to ease myself back into the game and bore witness to black mages/thuamages clipping below the player world in the two circled areas in Western Thanalan. Specifically in the northern indication, many (and I mean 7-8) evil eye (level 40) mobs were attacking one such character below the world.

I put them on my blacklist but here\\'s the thing I noticed though. The name was as you\\'d expect but they also were part of an FC and they weren\\'t the only only one out of bounds, just the only one I physically saw. (The mobs were targeting different people)



In case the image doesn't load, a direct link: https://i.imgur.com/hdxvXty.jpg

[Kuzulo]

You can't take action against bots, as a subscriber; It does not work on this level.

As a 14 year plus subscriber of World of Warcraft, I can say it originally worked that way more. Wow had fewer players, so "reporting a bot" might actually do something. Eventually, you had too many players/too many bots to report and too many people reporting people who were not actually "bots."

Blizzard wisely did something, which was instead just detecting them and banning those accounts in waves. I don't know how it works with FFXIV, but with Wow the bot is taking advantage of a particular "seed" or something (I'm greatly simplifying things here.) So the bot program will work, until Blizzard then fixes the way that particular "seed"/whatever works or how they access it. So things just seem to sit there, working normally, then suddenly there is a huge ban wave of bots. At that point, the botting program no longer works either (until they rebuild it, to take advantage of another "seed"/breaking the encryption/whatever.)
I don't know why it works this way, it is something about how it has to be able to work with clients at a high speed, which presents a vulnerability that the bot program writer takes advantage of.

So, as all of you say, this does not work and could not work. Just as with Wow, it HAS to be automatic. It has to be something that is detected, then the accounts just get banned (perm, by the way.) This is basically the one thing they've learned to do right with Wow, after 14 years. You don't really see the posts about bots on the Wow forums like you used to, nor do I EVER see a single one while out herbing/mining anymore. A part of the reason is that even the people making the bot software, as well as people on the message boards for it, are aware that they have to use "throwaway" accounts; They know they will get banned in the next automatic ban wave.

It just doesn't work, at this level, for you or I to report someone suspicious. Then someone live has to follow up, then they might not even be a bot. All of that takes too much time and effort.

[Hestzhyen]

You can't take action against bots, as a subscriber; It does not work on this level.

As a 14 year plus subscriber of World of Warcraft, I can say it originally worked that way more. Wow had fewer players, so "reporting a bot" might actually do something. Eventually, you had too many players/too many bots to report and too many people reporting people who were not actually "bots."

Blizzard wisely did something, which was instead just detecting them and banning those accounts in waves. I don't know how it works with FFXIV, but with Wow the bot is taking advantage of a particular "seed" or something (I'm greatly simplifying things here.) So the bot program will work, until Blizzard then fixes the way that particular "seed"/whatever works or how they access it. So things just seem to sit there, working normally, then suddenly there is a huge ban wave of bots. At that point, the botting program no longer works either (until they rebuild it, to take advantage of another "seed"/breaking the encryption/whatever.)
I don't know why it works this way, it is something about how it has to be able to work with clients at a high speed, which presents a vulnerability that the bot program writer takes advantage of.

So, as all of you say, this does not work and could not work. Just as with Wow, it HAS to be automatic. It has to be something that is detected, then the accounts just get banned (perm, by the way.) This is basically the one thing they've learned to do right with Wow, after 14 years. You don't really see the posts about bots on the Wow forums like you used to, nor do I EVER see a single one while out herbing/mining anymore. A part of the reason is that even the people making the bot software, as well as people on the message boards for it, are aware that they have to use "throwaway" accounts; They know they will get banned in the next automatic ban wave.

It just doesn't work, at this level, for you or I to report someone suspicious. Then someone live has to follow up, then they might not even be a bot. All of that takes too much time and effort.

What you described is what SE does, only they don't seem to address the root cause like Blizzard does. SE bans bots in the thousands every month, but there is apparently no investigation or effort put into fixing the exploits that allow the bots to function. That's why you still see map hacking years after it was reported and why the botting problem seems to be wholly undeterred despite the regular ban wave reports.

I get that SE doesn't see the problem as much in Japan but they have to look further abroad with their global customer base. They market to us, serve us in our home countries, so they should support and listen to us as well. If this is a uniquely Western problem maybe it would make sense for them to have a Western task force with the necessary tools and power to address it.

[OurMom]

Something is being done to botters in most cases it's just not perm and when it is, it's done really half assed.

Have a few friends that use to play this game, they botted. The first I think 4 or 5 times they got 3 day bans then after that they got a "perma ban" but for some reason SE only banned their on that account. So they could just use a vpn for the launcher and or get another account and go back to what they were doing.

[Riardon]

All it takes is a GM to visit the usual nodes and spectate. The bots are pretty easy to tell just by observing. Once they see them they can begin the investigation.
I'm pretty sure they know the procedure which makes me believe they either don't want to take any action because those bots also pay for their sub or they simply don't have the technical mean to prove that those players are botting.
I've made many reports in the past and nothing happened.
As for the Gold Sellers in town. I'm pretty sure they are solely focused on those as they do indeed ban them.