What if GGG can detect VMs

[f1ndm3h 3]

Hello guys..

 

I had this weird thought today. It may be true it may not.. but I remember once I saw a Windows API function which could tell if you are in a virtual environment... maybe I was wrong or drunk or whatever.

 

So, my thought was.. what if GGG could detect if poe client is running inside a VM ?

Who the fuck is playing poe at 800x600 resolution from a VM ? No one !

 

This gives them a huge leap in detecting us.. also I am not sure if this is related to people getting banned on all of their accounts

even if they were running them from diff VPN and VM. However, it could help them process a smaller amount of players for patterns etc.. which would be those who are behind a VM.

 

So.. I would like to hear your opinion on this.

[Jarvis101 75]

Many people use VM's, not just people who bot. Some people who do bot, don't use VM's.

 

There are already enough bans on false positives, and legit players losing accounts.

Edited December 16, 2013 by Jarvis101

[xiwic 3]

Don't know if people use much VM and mostly the trick is to use Steam PoE and PoE non steam, might be possible it's not like anyone here knows what GGG are exactly doing.

[darkbluefirefly 11]

2% of the PoE players run PoE on a VM windows box from their Linux box.

playonlinux or w/e. Should be safe, plus you can easily hide that the box is currently runing in a virtual environment with a few tweaks here and there, but atm, the hence of them detecting via this is too low, to be honest they don't have the time or resource.

[stef 30]

no need to worry about that subject tbh

 

its even more likely that they will detect the behavior of your "bot" sooner or later (when ggg staff people sitting in town and ur bot is doing strange stuff at the wrong time etc.).

 

[f1ndm3h 3]

I agree mostly with you guys. Thanks for sharing your opinion.. I just thought to share.

 

I was mostly referring to the thing that GGG may check mostly poe clients that run from VM.. like giving those clients higher weight in their checks.

 

But on the other hand.. they cannot fix and implement other more serious things in game.. I doubt they are filtering actions in such a great detail.. but who knows.

[dasnon 1]

1 false positive is worser than 100 right positive flags. they are a company and are also afraid doing mistakes. Vmwares are also used by mac/linux users. 800*600 could also be used because people are looking while grinding like an idiot over and over again porns/music videos/series ....

in WoW blizzard would also never would consider to extra check people who are using Click To Move, also when 95% botters use that

[Maper 0]

I'm not sure that I understand the whole VM thing in the first place. What's the point of botting in a VM?

[stef 30]

I'm not sure that I understand the whole VM thing in the first place. What's the point of botting in a VM?

thats the only way to run ur bot minimize since it requires mouse & keyboard action. so you able to run it on your virtual machine while continue to use your computer as normal.

[Maper 0]

thats the only way to run ur bot minimize since it requires mouse & keyboard action. so you able to run it on your virtual machine while continue to use your computer as normal.

 

Oh, dang, now that you mention that it makes perfect sense haha. Thanks for clearing that up! I thought it was like a security thing, like people thought it would be less detectable or something like that. I dunno.

[f1ndm3h 3]

I'm not sure that I understand the whole VM thing in the first place. What's the point of botting in a VM?

In addition, a VM allows you to use multiple VPNs on the same machine.

 

This means that if your PC is strong enough, you can have many VMs and use another VPN connection on each.. thus bot with different IPs + accounts.

[Maper 0]

In addition, a VM allows you to use multiple VPNs on the same machine.

 

This means that if your PC is strong enough, you can have many VMs and use another VPN connection on each.. thus bot with different IPs + accounts.

 

That also makes sense now that I think of it.

[f1ndm3h 3]

That also makes sense now that I think of it.

Generally its a clean work.. since its almost isolated from your Host OS.