I think people deserved this server crash

Even soloing being 3-4x quicker the group of bots still gave better chance for xtals were talking about 4 different rolls each time plus rank rewards

 

One would then argue why there's no market for certain crystas and why there are no Super Costeros

 

Popular xtals are quick and easy spina unpopular xtals and low drop apps would be a nightmare to farm and sell.

 

You see where I'm getting at tho

 

Why not blame both sides why only the devs? Just because the game has a "weak system" doesn't mean you have to abuse it and I care because someday I know this game will die and one of the reason might be because the game is just full of botters (Lets hope that it won't be like that)

 

"Tuyul" is HARMFUL and isn't a good thing even if you say that it helps to make 2s or Extract Crysta cheaper. You ask why? These orb items are the things what makes the game alive, it is the salary of the employees to keep on working on the game and pay for servers. If no one will spend "real money" in the game how can they keep the game keep on working. If you just keep on making accounts it means you don't have to buy orbs just to get a piercer or any other orb item(You are overloading information in the servers). Salute to the people who spend money to support the devs(Mostly to the people of the Japan server)

 

Well we have different perspectives of view.

 

Honestly these thing you called orb are so overpriced. I dont actually mind to buy 10$ worth of orb but the thing is everthing in toram online have gacha system. 10$ for 1 set ava is fine price, but 10$ for a less than 1% chance to get ava? It's a big no no.

 

You actually don't need to spend money to play this game its not required but if you want to support the devs go ahead and buy orbs. The sad part is some people think just because they can't afford to buy orbs its "okay" for them abuse the orb reward system.

 

I dont mean to pay for games that i play for more than 3000 hours, just not worth it, if i could support the dev without paying those orbs i would

 

And you can: by not accepting those random friend requests from god knows who and reporting the bots when you see them. At that point whether or not it'll do any good isn't your problem, it's up to the people running the game.

 

I've played Toram for a while now (DEC/2017) and, even though I didn't go after popularity or those sorts of things that make people known, I've seen my share of what went on the game for those past few years.

The very first problem I immediately noticed was that Toram never had an Anti-Cheat program. With that in mind, I reported every single bot I could find in the beginning of the botting era, when:

• They were few;
• Were less likely to spam world chat;
• Could barely evem move from point A to point B;
• Probably weren't able to equip items different from the starting ones.

Even so, it wasn't enough; with time these botting accounts started spreading and programmers started getting money out of their programs, leading to a major evolution in their abilities and numbers. This would ultimately prove that our current applied Anti-Cheat measure (which is reporting directly to developers) is not efficient enough for Toram's big playerbase.

Therefore, the best way to get rid of botting quickly and easily is through the implementation of a proper, well engineered Anti-Cheat system, which has been proven to work in other games, both big and small-budget.

 

Toram does have a program that detects more well know macro and autoclick programs and prevents you from loading the game. But it's not a real good program you can bypass it just by using a macro that the program hasn't been updated to identify yet

 

Therefore, it still isn't enough for the game's current needs; as we all can see, macro programs keep growing in complexity due to the fact that they are now being sold as products, like modifications for many other games.

smells like denuvo :l

 

Personally I wouldn't be against the idea of asobimo hiring mods to wander around deleting bots and keeping the toxicity in check. Even if it was something as simple as giving mods the ability to temp ban bots to get them off the servers that would be a big win in my book

 

Xigncode3 is their anti-cheat program. It black-listed all the known apps that could interfere with Toram including apps that changes memories, speedhack, and modify the apk,etc. It can also check the integrity of protocols, the apk, and messages, etc. However there are some kind of cheats that cannot be detected by xigncode3 nor any anti-cheat in existence: the macro. It's impossible to detect macro since they mimic a human tapping on screen.

In computer security, we have this technique called "anomaly detection": basically, it uses a machine learning process to learn the patterns of all the benign players and whenever a new pattern emerges that doesn't look like a normal player, it will flag it and prompt it to the administrators. In theory, this technique could detect any kind of macro. However, there is a limitation, a big one: the cost. The cost to manually label player's data to tell which one is benign, which one is malicious is simply too much, pretty much outweight the monetary benefit that the game brings. Also the cost to hire data-scientists, a team of administrators, infrastructure to maintain this kind of monitoring is also very huge. Therefore, they can't do anything about it, nor any game in existence. Solving this problem is considered one of the "holy grails" of software security, and humankind is hundreds of years from that.

One example of this problem that you can see every day is the "are you a robot?" questions that some times appear when you surf the web. Web services ask you to verify your status as a human, because it can not detect by itself if you were a human or not.

 

I'm totally with you on that but it wouldn't be an efficient solution to get over the problem. A modular Anti-Cheat would solve the problem faster because it would be easier to upgrade, apply and modify the program without breaking a part of the system.

They should've thought about that when they dropped that engine update some time ago.

 

Hey, thanks for sharing your insights. About this specific point above, how exactly does checking this simple box identify you as a human instead of a robot...?

 

Makes total sense. Just went up to see a basic example of macro in C and it is indeed a dilemma to get through these. In fact, as you said, it's too far away for game industries to get a truly effective solution to the problem.

Then, a possible way to get to those bots would really be through the report method. A huge expansion in server personnel for monitoring would be needed: something like an anti-cheat Task Force.
Expensive, but not impossible.

 

There are many levels of it.
- Low level for low threat: simply check a box and wait for a few seconds. This aims to disable simple html crawlers because the box is generated randomly by Javascript. Those simple html crawlers cannot bypass this at all. It also acts as a shield against Denial of Service attack, because they simply send requests, while this box needs them to respond.
- higher level for higher threat: Some crawlers use advanced browser simulation (e.g. Selenium), and can easily bypass a simple random check box on their way by rendering the js code and pretend it is an actual human. For this kind of threat, the box will also prompt a bigger image check box (weird text that you have to type in, or ask you to identify a car, a bus, a fire hydrant, Sarah Connor, etc). For most of those image checks, the current image recognition technology that hackers could obtain and operate would not be suffice, and would be costly if they try to. Only big organizations like foreign government intelligence agencies could possibly able to afford it to attack high-profile targets.

It's a cheap solution which requires the attackers to invest a huge amount of money into bypassing it. A solution that stays true to the motto of software security "don't try to make the perfect security system, just try to make a system that is not feasible to attack".