[Update] XenoBot Apophis v14.11.19.893 [Protocol 10.72]

[DarkstaR]

This update adds compatibility for Tibia 10.72. The update will be automatically downloaded when you restart XenoSuite.


Also, a side-note about this update: I would recommend against using authenticator for all of your accounts. It provides a very solid link between accounts, and can lead to CipSoft banning all of your accounts upon a single one being detected. If you want to use it but don't want to increase your risk of banishment, I would recommend only using it on important, lightly-botted accounts (such as your main character). Using it on bot farm accounts, money makers, etc, is not advisable.


Changelog:

v14.11.19.893
Added 10.72 compatibility.

[iMike]

<3 <3

Edit: <3

[Gordo]

ggggggggggggggggg

[kubax36]

Damn, you are always updating first and we need to wait few hours more until wind addons will be updated :/

are u going to make something like Wind Addons in future? (only fps buster thing)

[nichjeremy]

This update adds compatibility for Tibia 10.72. The update will be automatically downloaded when you restart XenoSuite.


Also, a side-note about this update: I would recommend against using authenticator for all of your accounts. It provides a very solid link between accounts, and can lead to CipSoft banning all of your accounts upon a single one being detected. If you want to use it but don't want to increase your risk of banishment, I would recommend only using it on important, lightly-botted accounts (such as your main character). Using it on bot farm accounts, money makers, etc, is not advisable.


Changelog:

v14.11.19.893
Added 10.72 compatibility.

i dont understand what an authenticator is can u explain so i dont do it on accident. i know nothing about programming or xenobot.

[Pidek098]

I would recommend against using authenticator

Ah you little hacker! You won't be possible to hack us anymore!! :D

Just joking thanks :D


i dont understand what an authenticator is can u explain so i dont do it on accident. i know nothing about programming or xenobot.

http://www.tibia.com/news/?subtopic=latestnews

Check last news ;d

[roxx]

Fast mofo! day saved :D

[kimse]

Also, a side-note about this update: I would recommend against using authenticator for all of your accounts. It provides a very solid link between accounts, and can lead to CipSoft banning all of your accounts upon a single one being detected. If you want to use it but don't want to increase your risk of banishment, I would recommend only using it on important, lightly-botted accounts (such as your main character). Using it on bot farm accounts, money makers, etc, is not advisable.


This is how I feel reading the above: https://www.youtube.com/watch?v=UEaKX9YYHiQ

Here's why:
You have the option to use any authenticator app you want, so you could split the accounts over several apps.
There's several desktop based auth apps too, which means you could spread out the acc auths over several devices too.

I know you're saying it because there's some seriously stupid people out there and they'd probably put all accs on the same auth and then get deleted on all in one go.
But you shouldn't have to recommend something that doesn't really make a difference... unless the person reading the recommendation is stupid and didn't think about using several apps/devices.

/rant


- Kim

[godot]

RDP fixed? :D

[DarkstaR]

This is how I feel reading the above: https://www.youtube.com/watch?v=UEaKX9YYHiQ

Here's why:
You have the option to use any authenticator app you want, so you could split the accounts over several apps.
There's several desktop based auth apps too, which means you could spread out the acc auths over several devices too.

I know you're saying it because there's some seriously stupid people out there and they'd probably put all accs on the same auth and then get deleted on all in one go.
But you shouldn't have to recommend something that doesn't really make a difference... unless the person reading the recommendation is stupid and didn't think about using several apps/devices.

/rant


- Kim

The assumption is that anybody who understands it (e.g. you) can make their own decision. As it stands, though, CipSoft has been handing out bans to accounts that have never been botted, simply because they are associated with bot accounts.

[begin speculation]
Also, they have the option to use Google Authenticator. That means, regardless of what authenticator you choose to use, it will likely go through the OAuth protocol. If you read the OAuth 2.0 specification (https://developers.google.com/accounts/docs/OAuth2UserAgent), you'll see that responses contain a field called userid. If I've read the spec correctly, this is a constant that will be the same when given to any application (or any different accounts for the same application) that can be used to identify a single user across multiple apps. This means the only solution is to use completely separate authenticator apps and hope that the Google OAuth server doesn't have a way of correlating them. And, since this is Google we're talking about, it probably does.

[bit311]

Ive got problem cause I cant login into Xenobot and my Xeno cent automaticaly update.

[DarkstaR]

Ive got problem cause I cant login into Xenobot and my Xeno cent automaticaly update.

Remove the crack you were using.

[Pageypeo]

Remove the crack you were using.

haha, also had this problem, but i had the old client open and about 20 bots :)

but good comeback if this is true :P

[Boomtune]

Thanks mate. ;)

[kimse]

The assumption is that anybody who understands it (e.g. you) can make their own decision. As it stands, though, CipSoft has been handing out bans to accounts that have never been botted, simply because they are associated with bot accounts.

[begin speculation]
Also, they have the option to use Google Authenticator. That means, regardless of what authenticator you choose to use, it will likely go through the OAuth protocol. If you read the OAuth 2.0 specification (https://developers.google.com/accounts/docs/OAuth2UserAgent), you'll see that responses contain a field called userid. If I've read the spec correctly, this is a constant that will be the same when given to any application (or any different accounts for the same application) that can be used to identify a single user across multiple apps. This means the only solution is to use completely separate authenticator apps and hope that the Google OAuth server doesn't have a way of correlating them. And, since this is Google we're talking about, it probably does.

Multiple devices (virtual desktops could be an option?) sounds like the only answer, if you wanna use the auth on bot chars and still be safe.

[DarkstaR]

Multiple devices (virtual desktops could be an option?) sounds like the only answer, if you wanna use the auth on bot chars and still be safe.

Yeah, but who wants to set up multiple VMs just to launch an auth program?

The better option may be just to run the accounts in different VMs, as nearly nobody focused on hacking Tibia has the technical expertise to intercept passwords that are inside of a VM from the host machine. It's actually potentially much harder to do than intercepting the auth token from host if the clients aren't virtualized(though I haven't researched it). Also, another thing that I failed to mention before is that running the authenticator on the host leaves the credentials vulnerable to being copied/read by the same facilities used to read Tibia account and password.

Bottom line is that, unless you feel like spinning up multiple VMs, this is only secure in cases where your account/password gets disclosed by means other than a virus on your host computer. And, since Tibia implements secure assymetic encryption over the wire, disclosure in other events is rare unless you're handing it out to people.

Don't get me wrong, I'm a huge fan of 2FA, but I'm worried about CipSoft's motivations. In 18 years, they've never addressed the hacking problem (short of adding RSA in like 2006, which is more of an anti-bot measure than anything, considering nobody ever used MITM to grab Tibia accounts), even though preventing most hackers is as simple as dropping the account and password from memory (or storing it in a non-plain-text format). So why would they implement it now, in a time where them having an easy way to link multiple accounts is, statistically speaking, more detrimental to botters than the threat of being hacked?
[tinfoil removed]

[Relius]

DarkstaR pls. Gibe Login Function and Framerate Changer.

[marcin252]

DarkstaR what about vps bug? Did u fixed that?

[marcin252]

DarkstaR

[Unuke12345]

Getting debugs/client crashes quite a lot recently, anyone experiencing the same?

[Merked]

Getting debugs/client crashes quite a lot recently, anyone experiencing the same?

None at all mate.

[DarkstaR]

Getting debugs/client crashes quite a lot recently, anyone experiencing the same?


VPS ?

[Unuke12345]

VPS ?
Nope. Also had my client "bugging out" a few times aswell, the client just "stops responding" until I restart it :( Not sure if it used to happen before the last update as I didn't bot then.

[DarkstaR]

Nope. Also had my client "bugging out" a few times aswell, the client just "stops responding" until I restart it :( Not sure if it used to happen before the last update as I didn't bot then.

Does it only happen with certain scripts? Freezes like that are most commonly from giving some malformed input to the scripter.

[kubax36]

Does it only happen with certain scripts? Freezes like that are most commonly from giving some malformed input to the scripter.

i have also noticed that tibia "stops to respond" in last 3 weeks. Sometimes it happens 2-3 days per day and sometimes once per 3 days. Weird thing is that i checked those "not responding" characters, was following then on other char and it was keep botting like nothing wrong happened. I had also debug 3 times while using one of my script while just walking, always on same place, but I think it could be tibia problem cuz its happening always in same spot.

[Sikkness]

Update coming.

Tomorrow, the server save on all game worlds may take somewhat longer than usual due to the release of a patch. More information about the contents of this patch will be published with its release.

[DarkstaR]

Update coming.

Tomorrow, the server save on all game worlds may take somewhat longer than usual due to the release of a patch. More information about the contents of this patch will be published with its release.



No need to tell me, I always know.

Thanks, though.

[Unuke12345]

Does it only happen with certain scripts? Freezes like that are most commonly from giving some malformed input to the scripter.
Yes, it mostly happens to my script (Hrodmir Crystal Cave) although it happens in other places aswell just less frequently. This script is similar to my other scripts though so not sure what would cause it.

[DarkstaR]

http://forums.xenobot.net/showthread.php?33235