Seriously...if you can confirm cheating, why not perma-ban them? Because that would solve most of this.
But I'm sure we can guess why they don't....
The reason we're not able to take action is that we can't 100% prove who broke the Terms of Service, which means that we wouldn't be able to hand out suspensions either. We also DO take action on accounts that break the Terms of Service, so not sure what you're thinking here, because accounts of all shapes and sizes have received Suspensions, including permanent ones.
Seriously...if you can confirm cheating, why not perma-ban them? Because that would solve most of this.
But I'm sure we can guess why they don't....
The reason we're not able to take action is that we can't 100% prove who broke the Terms of Service, which means that we wouldn't be able to hand out suspensions either. We also DO take action on accounts that break the Terms of Service, so not sure what you're thinking here, because accounts of all shapes and sizes have received Suspensions, including permanent ones.
this makes sense, but what prompted the team to make the decision now, rather than at an earlier or later date? i'm wondering if there has been an increase in mercs that you all have seen recently
Require them to do Legends runs at their “home” location. Anyone who magically “took a trip” during their legend run is automatically disqualified.
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
@Kabam Miike it sounded like the list of people who hit this past run was completed from the post. Can you provide any clarity on when we should expect to see it?
Seriously...if you can confirm cheating, why not perma-ban them? Because that would solve most of this.
But I'm sure we can guess why they don't....
The reason we're not able to take action is that we can't 100% prove who broke the Terms of Service, which means that we wouldn't be able to hand out suspensions either. We also DO take action on accounts that break the Terms of Service, so not sure what you're thinking here, because accounts of all shapes and sizes have received Suspensions, including permanent ones.
If you're not 100% sure it's a legit run, just disqualify them from the results. You made the Legend Run rules, you can do whatever you want. If a slight discrepancy gets you thrown out of the results, nobody will hire mercs for legend runs. Then you'll have a top100 you're fully confident it's legit.
Seriously...if you can confirm cheating, why not perma-ban them? Because that would solve most of this.
But I'm sure we can guess why they don't....
The reason we're not able to take action is that we can't 100% prove who broke the Terms of Service, which means that we wouldn't be able to hand out suspensions either. We also DO take action on accounts that break the Terms of Service, so not sure what you're thinking here, because accounts of all shapes and sizes have received Suspensions, including permanent ones.
If you're not 100% sure it's a legit run, just disqualify them from the results. You made the Legend Run rules, you can do whatever you want. If a slight discrepancy gets you thrown out of the results, nobody will hire mercs for legend runs. Then you'll have a top100 you're fully confident it's legit.
a bit radical but i can't disagree !
if someone "took a trip" to do the legend run before re-appearing at its original location, there is a high chance he gave its ID to a merc to do the legend run for him ! if you can't ban him, at least disqualify him for the legend run.
Going to these extreme measures for something this insignificant seems like a big overreaction.
If it is too insignificant to take action upon, it is too insignificant to miss if it is gone.
The fact is, most of the end game is "insignificant" in the sense that only a tiny percentage of the players actually experience it at any one time. Act 7 is insignificant, Map 6 and 7 are insignificant, Master rewards are insignificant in that sense. The problem is that's not how we judge the end game and the top tier rewards. If we judge the end game and the top tier rewards in the game based on how many people get them, they aren't important enough to *add* to the game in the first place.
There's lots of reasons why cheating and mercenary behavior is bad for the game, but the biggest one is that it fundamentally erodes player's notions of fairness. Even if you aren't competing for those rewards, the idea that the game is rewarding cheaters erodes your confidence in the fairness of the part of the game you're playing. If cheating is allowed at the highest levels of the game, who knows how much of it is happening here. And by extension, why not cheat if everyone else is doing it.
Ultimately, Kabam can't eliminate all cheating from the game. What they can do is give the impression that it is intolerable, and actions will be taken against it, and if the players want a game with the fewest amount of limitations it is up to them to treat cheating as equally intolerable. This stuff can't really happen in a complete vacuum. For every merc there must be dozens of customers, and hundreds of people who indirectly benefit from those customers, and thousands of people who know about those hundreds of people. Kabam has to do their part, and we have to do our part. If we want a game that isn't jerked around by the actions of a few cheaters, we have to treat the behavior as equally intolerable. And if the playerbase has too many people who think this is perfectly fine, then we need to keep squeezing them out of the game until there aren't.
The people who think these actions are overkill, or think the cheating that goes on in the game is no big deal, are sitting at the base of the mountain of cheating that's holding the entire thing up. They need to change their minds, and we need to let them know that attitude is itself intolerable.
Seriously...if you can confirm cheating, why not perma-ban them? Because that would solve most of this.
But I'm sure we can guess why they don't....
The reason we're not able to take action is that we can't 100% prove who broke the Terms of Service, which means that we wouldn't be able to hand out suspensions either. We also DO take action on accounts that break the Terms of Service, so not sure what you're thinking here, because accounts of all shapes and sizes have received Suspensions, including permanent ones.
That's cool. So when is this list going to be announced? Since it's been stated you guys are happy with your new top 125. Are we holding out for a day and letting the 7.3 is delayed because of mercs announcement sink in or. And can you do this for the monthly eqs as well?
Require them to do Legends runs at their “home” location. Anyone who magically “took a trip” during their legend run is automatically disqualified.
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
As it turns out, this is not the best option for reasons I will not discuss publicly.
I will say that Kabam hunting down mercs has up to now been a game of cat and mouse, and the mice keep learning how to better avoid the cat. The game need to change to guillotine and mouse, where the mouse doesn't get a chance to learn how to avoid the guillotine. We don't need to train the cat to be smarter, we need to change the game into something the mouse no longer wants to play.
Require them to do Legends runs at their “home” location. Anyone who magically “took a trip” during their legend run is automatically disqualified.
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
As it turns out, this is not the best option for reasons I will not discuss publicly.
I will say that Kabam hunting down mercs has up to now been a game of cat and mouse, and the mice keep learning how to better avoid the cat. The game need to change to guillotine and mouse, where the mouse doesn't get a chance to learn how to avoid the guillotine. We don't need to train the cat to be smarter, we need to change the game into something the mouse no longer wants to play.
That's theoretically possible.
I believe the "home" option also would mean violation of some privacy terms. It would just be a mess.
They could've used a scalpel, instead they used the flamethrower with rocket launcher built in.
Instead of kicking everyone out of the hospital, they could have just performed random surgery on everyone. If a few people lose working kidneys, eh, they can always come back for that tonsillectomy
Require them to do Legends runs at their “home” location. Anyone who magically “took a trip” during their legend run is automatically disqualified.
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
As it turns out, this is not the best option for reasons I will not discuss publicly.
I will say that Kabam hunting down mercs has up to now been a game of cat and mouse, and the mice keep learning how to better avoid the cat. The game need to change to guillotine and mouse, where the mouse doesn't get a chance to learn how to avoid the guillotine. We don't need to train the cat to be smarter, we need to change the game into something the mouse no longer wants to play.
That's theoretically possible.
I believe the "home" option also would mean violation of some privacy terms. It would just be a mess.
Probably not, because it would be opt in, just like the Showdown wasn't a violation of privacy terms even though the players had to agree to be video recorded - not just their gameplay, but their own persons.
The real problem is that there are tactical responses to forcing players to "be home" and there's absolutely nothing to be gained from teaching mercs one more counter-surveillance technique. We've basically been doing the analogous equivalent to breeding resistant bacteria. We find one thing the mercs are doing and ban them, they figure out what that one thing was based on who was banned and do something else. Eventually, through dumb random chance you breed a semi-competent merc.
Instead you want to deploy a spectrum of overlapping drugs designed to give the microbes no way to evolve resistance. They are just banned, and they don't know why.
That bot has been around for years, and I'm pretty sure Kabam is aware of it.
The problem is less a question of the bot software, and more a question of how that software is tuned to attempt to evade detection.
I agree, and there are tons of those bots (a simple search in Google and you have at least 4 bot solutions on the first page). Maybe Kabam could use one to see how they can circumvent their process to better act against those cheaters
The challenge with bots is best highlighted by describing how I grind arena. I'm usually sitting on the couch, barely watching the screen, tap tap tapping away while watching people rescue entangled seals on Youtube, for an hour at a time. I *am* a bot when I'm grinding arena. It is hard to tell the difference between a software bot and a meatsack bot.
At the moment.
Well when a "meatsack" bot is doing between 50 to 60 series by hours without stopping during 72hrs without sleeping you can wonder abour the use of bot ! Of course you could have 3 peoples playing each 8hrs/day non stop during 3 days...
That bot has been around for years, and I'm pretty sure Kabam is aware of it.
The problem is less a question of the bot software, and more a question of how that software is tuned to attempt to evade detection.
I agree, and there are tons of those bots (a simple search in Google and you have at least 4 bot solutions on the first page). Maybe Kabam could use one to see how they can circumvent their process to better act against those cheaters
The challenge with bots is best highlighted by describing how I grind arena. I'm usually sitting on the couch, barely watching the screen, tap tap tapping away while watching people rescue entangled seals on Youtube, for an hour at a time. I *am* a bot when I'm grinding arena. It is hard to tell the difference between a software bot and a meatsack bot.
At the moment.
Well when a "meatsack" bot is doing between 50 to 60 series by hours without stopping during 72hrs without sleeping you can wonder abour the use of bot ! Of course you could have 3 peoples playing each 8hrs/day non stop during 3 days...
Well, when I first started Grinding, I would go straight for 3 days. I'd play until my Recharge came, and play more. I slept very little. Now, I'm not saying bots don't exist. That's obvious. I just know when someone wants a Champ, they're going as constant as possible. That's my first rule of a Grind. If I think I have enough, I do more.
It also ends the program for everyone else, not sure this is a win.
i mean this is only temporarily. they're going to end up finding a fix for it
Hope it's facial recognition or fingerprint scanner !! @Kabam Miike
People have been suggesting this for a very long time now, but unfortunately this doesn't really work. Kabam cannot use the biometric scanners built into the phones because the phones don't send biometric data to the app vendor. They only say if someone successfully authenticated against the phone. So for example if Kabam turned on FaceID for iPhones, mercs could just sign in with their face on their phone, because that would match. MCOC itself would have to implement facial recognition ID in the game client and keep a facial recognition database for all their players, which is not likely to be practical (also, a huge security issue).
The other thing that is often suggested is even worse: two-factor ID. How could two-factor ID be worse? Because it makes mercing safer for clients without making it harder for the mercs. Suppose you implement some kind of two-factor ID that involves codes or something similar. I could send the merc the code when they needed it to log into my account, so this doesn't hurt my ability to hire mercs at all. Meanwhile, once I'm done with that transaction I don't even have to change my account password. I know the merc cannot get back into my account once he completes his task, because only I have the two-factor generator. So I don't even have to worry about giving out my password, because my password no longer matters. I send the merc a token number to get in, and that's the only time he can get in.
So yeah, the two "obvious" panaceas recommended by others over the years, biometric authentication and two-factor authentication are both completely useless to stop mercs. Games that have implemented two-factor authentication in the past, like say Blizzard using tokens for World of Warcraft, were not using them to stop mercs, they were using them to stop people from hijacking other players' accounts. If I have 100% control over who can log into my account and when, it actually makes it much safer to hire mercs.
Require them to do Legends runs at their “home” location. Anyone who magically “took a trip” during their legend run is automatically disqualified.
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
As it turns out, this is not the best option for reasons I will not discuss publicly.
I will say that Kabam hunting down mercs has up to now been a game of cat and mouse, and the mice keep learning how to better avoid the cat. The game need to change to guillotine and mouse, where the mouse doesn't get a chance to learn how to avoid the guillotine. We don't need to train the cat to be smarter, we need to change the game into something the mouse no longer wants to play.
That's theoretically possible.
I believe the "home" option also would mean violation of some privacy terms. It would just be a mess.
Probably not, because it would be opt in, just like the Showdown wasn't a violation of privacy terms even though the players had to agree to be video recorded - not just their gameplay, but their own persons.
The real problem is that there are tactical responses to forcing players to "be home" and there's absolutely nothing to be gained from teaching mercs one more counter-surveillance technique. We've basically been doing the analogous equivalent to breeding resistant bacteria. We find one thing the mercs are doing and ban them, they figure out what that one thing was based on who was banned and do something else. Eventually, through dumb random chance you breed a semi-competent merc.
Instead you want to deploy a spectrum of overlapping drugs designed to give the microbes no way to evolve resistance. They are just banned, and they don't know why.
This might be a dumb question, but how do they find a merc then anyways? My understanding was Kabam are able to see the location of people who log in to your account. They see that someone or multiple someone’s from much different location than the “original” location are logging in as well as the “original” location. That would signal to me that this “original” person has shared their account information with one or multiple other somebody’s. That understanding seems to be justified by their announcement today.
Therefore, I’m not entirely sure where the harm would be in Kabam coming out and stating anyone not completing the Legend run in their home location is automatically disqualified
Require them to do Legends runs at their “home” location. Anyone who magically “took a trip” during their legend run is automatically disqualified.
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
As it turns out, this is not the best option for reasons I will not discuss publicly.
I will say that Kabam hunting down mercs has up to now been a game of cat and mouse, and the mice keep learning how to better avoid the cat. The game need to change to guillotine and mouse, where the mouse doesn't get a chance to learn how to avoid the guillotine. We don't need to train the cat to be smarter, we need to change the game into something the mouse no longer wants to play.
That's theoretically possible.
I believe the "home" option also would mean violation of some privacy terms. It would just be a mess.
Probably not, because it would be opt in, just like the Showdown wasn't a violation of privacy terms even though the players had to agree to be video recorded - not just their gameplay, but their own persons.
The real problem is that there are tactical responses to forcing players to "be home" and there's absolutely nothing to be gained from teaching mercs one more counter-surveillance technique. We've basically been doing the analogous equivalent to breeding resistant bacteria. We find one thing the mercs are doing and ban them, they figure out what that one thing was based on who was banned and do something else. Eventually, through dumb random chance you breed a semi-competent merc.
Instead you want to deploy a spectrum of overlapping drugs designed to give the microbes no way to evolve resistance. They are just banned, and they don't know why.
This might be a dumb question, but how do they find a merc then anyways? My understanding was Kabam are able to see the location of people who log in to your account. They see that someone or multiple someone’s from much different location than the “original” location are logging in as well as the “original” location. That would signal to me that this “original” person has shared their account information with one or multiple other somebody’s. That understanding seems to be justified by their announcement today.
Therefore, I’m not entirely sure where the harm would be in Kabam coming out and stating anyone not completing the Legend run in their home location is automatically disqualified
This gets into technical ways and means, and given the current situation I'm no longer giving specific hints to the merc community in that area. Let me just say that the technical description of how I would describe what I believe Kabam is doing is not the same as the colloquial description that @Kabam Miike is using to attempt to convey the situation in a non-technical manner. I saw a Youtube comment on one of the content creator's channels flipping out about how Kabam just admitted to performing "surveillance" on the players with Miike's statement. That's reading way too much into the wording of the announcement.
To answer your question, I would have to explain what I think Kabam is doing that Miike is describing, then describe how that works technically, explain how countermeasures would work, how counter-countermeasures could be deployed, and what the ramifications of all of that would be on the players. That's unfortunately something I would love to do ('cause, you know, DNA) but no longer willing to do while we're in this particular situation with the mercs.
It is not a dumb question. It is internetworking 101, internet fundamentals 150, network security 205, and basic forensic analysis 301.
Require them to do Legends runs at their “home” location. Anyone who magically “took a trip” during their legend run is automatically disqualified.
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
As it turns out, this is not the best option for reasons I will not discuss publicly.
I will say that Kabam hunting down mercs has up to now been a game of cat and mouse, and the mice keep learning how to better avoid the cat. The game need to change to guillotine and mouse, where the mouse doesn't get a chance to learn how to avoid the guillotine. We don't need to train the cat to be smarter, we need to change the game into something the mouse no longer wants to play.
That's theoretically possible.
I believe the "home" option also would mean violation of some privacy terms. It would just be a mess.
Probably not, because it would be opt in, just like the Showdown wasn't a violation of privacy terms even though the players had to agree to be video recorded - not just their gameplay, but their own persons.
The real problem is that there are tactical responses to forcing players to "be home" and there's absolutely nothing to be gained from teaching mercs one more counter-surveillance technique. We've basically been doing the analogous equivalent to breeding resistant bacteria. We find one thing the mercs are doing and ban them, they figure out what that one thing was based on who was banned and do something else. Eventually, through dumb random chance you breed a semi-competent merc.
Instead you want to deploy a spectrum of overlapping drugs designed to give the microbes no way to evolve resistance. They are just banned, and they don't know why.
This might be a dumb question, but how do they find a merc then anyways? My understanding was Kabam are able to see the location of people who log in to your account. They see that someone or multiple someone’s from much different location than the “original” location are logging in as well as the “original” location. That would signal to me that this “original” person has shared their account information with one or multiple other somebody’s. That understanding seems to be justified by their announcement today.
Therefore, I’m not entirely sure where the harm would be in Kabam coming out and stating anyone not completing the Legend run in their home location is automatically disqualified
This gets into technical ways and means, and given the current situation I'm no longer giving specific hints to the merc community in that area. Let me just say that the technical description of how I would describe what I believe Kabam is doing is not the same as the colloquial description that @Kabam Miike is using to attempt to convey the situation in a non-technical manner. I saw a Youtube comment on one of the content creator's channels flipping out about how Kabam just admitted to performing "surveillance" on the players with Miike's statement. That's reading way too much into the wording of the announcement.
To answer your question, I would have to explain what I think Kabam is doing that Miike is describing, then describe how that works technically, explain how countermeasures would work, how counter-countermeasures could be deployed, and what the ramifications of all of that would be on the players. That's unfortunately something I would love to do ('cause, you know, DNA) but no longer willing to do while we're in this particular situation with the mercs.
It is not a dumb question. It is internetworking 101, internet fundamentals 150, network security 205, and basic forensic analysis 301.
You could’ve just said it was way over my head and left it at that haha
Require them to do Legends runs at their “home” location. Anyone who magically “took a trip” during their legend run is automatically disqualified.
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
As it turns out, this is not the best option for reasons I will not discuss publicly.
I will say that Kabam hunting down mercs has up to now been a game of cat and mouse, and the mice keep learning how to better avoid the cat. The game need to change to guillotine and mouse, where the mouse doesn't get a chance to learn how to avoid the guillotine. We don't need to train the cat to be smarter, we need to change the game into something the mouse no longer wants to play.
That's theoretically possible.
I believe the "home" option also would mean violation of some privacy terms. It would just be a mess.
Probably not, because it would be opt in, just like the Showdown wasn't a violation of privacy terms even though the players had to agree to be video recorded - not just their gameplay, but their own persons.
The real problem is that there are tactical responses to forcing players to "be home" and there's absolutely nothing to be gained from teaching mercs one more counter-surveillance technique. We've basically been doing the analogous equivalent to breeding resistant bacteria. We find one thing the mercs are doing and ban them, they figure out what that one thing was based on who was banned and do something else. Eventually, through dumb random chance you breed a semi-competent merc.
Instead you want to deploy a spectrum of overlapping drugs designed to give the microbes no way to evolve resistance. They are just banned, and they don't know why.
This might be a dumb question, but how do they find a merc then anyways? My understanding was Kabam are able to see the location of people who log in to your account. They see that someone or multiple someone’s from much different location than the “original” location are logging in as well as the “original” location. That would signal to me that this “original” person has shared their account information with one or multiple other somebody’s. That understanding seems to be justified by their announcement today.
Therefore, I’m not entirely sure where the harm would be in Kabam coming out and stating anyone not completing the Legend run in their home location is automatically disqualified
This gets into technical ways and means, and given the current situation I'm no longer giving specific hints to the merc community in that area. Let me just say that the technical description of how I would describe what I believe Kabam is doing is not the same as the colloquial description that @Kabam Miike is using to attempt to convey the situation in a non-technical manner. I saw a Youtube comment on one of the content creator's channels flipping out about how Kabam just admitted to performing "surveillance" on the players with Miike's statement. That's reading way too much into the wording of the announcement.
To answer your question, I would have to explain what I think Kabam is doing that Miike is describing, then describe how that works technically, explain how countermeasures would work, how counter-countermeasures could be deployed, and what the ramifications of all of that would be on the players. That's unfortunately something I would love to do ('cause, you know, DNA) but no longer willing to do while we're in this particular situation with the mercs.
It is not a dumb question. It is internetworking 101, internet fundamentals 150, network security 205, and basic forensic analysis 301.
You could’ve just said it was way over my head and left it at that haha
I think you'd understand it in about sixty seconds of explaining. It isn't hard, it is just something most people aren't exposed to unless you work in networking a lot and are told these things or run into them first hand.
Require them to do Legends runs at their “home” location. Anyone who magically “took a trip” during their legend run is automatically disqualified.
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
As it turns out, this is not the best option for reasons I will not discuss publicly.
I will say that Kabam hunting down mercs has up to now been a game of cat and mouse, and the mice keep learning how to better avoid the cat. The game need to change to guillotine and mouse, where the mouse doesn't get a chance to learn how to avoid the guillotine. We don't need to train the cat to be smarter, we need to change the game into something the mouse no longer wants to play.
That's theoretically possible.
I believe the "home" option also would mean violation of some privacy terms. It would just be a mess.
Probably not, because it would be opt in, just like the Showdown wasn't a violation of privacy terms even though the players had to agree to be video recorded - not just their gameplay, but their own persons.
The real problem is that there are tactical responses to forcing players to "be home" and there's absolutely nothing to be gained from teaching mercs one more counter-surveillance technique. We've basically been doing the analogous equivalent to breeding resistant bacteria. We find one thing the mercs are doing and ban them, they figure out what that one thing was based on who was banned and do something else. Eventually, through dumb random chance you breed a semi-competent merc.
Instead you want to deploy a spectrum of overlapping drugs designed to give the microbes no way to evolve resistance. They are just banned, and they don't know why.
This might be a dumb question, but how do they find a merc then anyways? My understanding was Kabam are able to see the location of people who log in to your account. They see that someone or multiple someone’s from much different location than the “original” location are logging in as well as the “original” location. That would signal to me that this “original” person has shared their account information with one or multiple other somebody’s. That understanding seems to be justified by their announcement today.
Therefore, I’m not entirely sure where the harm would be in Kabam coming out and stating anyone not completing the Legend run in their home location is automatically disqualified
It is not a dumb question. It is internetworking 101, internet fundamentals 150, network security 205, and basic forensic analysis 301.
Definitely a good move. Sucks, but it's a responsible move.
Problem is, Mercs will always exist. The demand creates them, and the system can't stop them. It's far easier to break a lock than it is to create one, after all.
Seriously...if you can confirm cheating, why not perma-ban them? Because that would solve most of this.
But I'm sure we can guess why they don't....
The reason we're not able to take action is that we can't 100% prove who broke the Terms of Service, which means that we wouldn't be able to hand out suspensions either. We also DO take action on accounts that break the Terms of Service, so not sure what you're thinking here, because accounts of all shapes and sizes have received Suspensions, including permanent ones.
If you were able to identify the violators, but not 100% that it was a coincidence, why can't you just take the action, and those 2-3 legitimate players (if there were any at all) who really did their legends run during a holiday can contact support and prove their right with an evidence of the trip like a ticket or an invoice of the accomodation or something
To stop mercs, it’s might actually be very straightforward.
You just need to make the penalty to be found out harsh enough to discourage people from mercing or allowing mercs to access their accounts.
Upon suspicious activity, send the player an in-game mail, stating that you found “xxx accessed your account on yyy date” and ask for a reply and explanation with supporting proof within 3 working days. Failure of which to provide will result in a permanent ban from the game.
It’s harsh enough, and open enough to decide on a case by case basis.
To stop mercs, it’s might actually be very straightforward.
You just need to make the penalty to be found out harsh enough to discourage people from mercing or allowing mercs to access their accounts.
Upon suspicious activity, send the player an in-game mail, stating that you found “xxx accessed your account on yyy date” and ask for a reply and explanation with supporting proof within 3 working days. Failure of which to provide will result in a permanent ban from the game.
It’s harsh enough, and open enough to decide on a case by case basis.
What kind of proof could an innocent person provide to show that someone didn't access their account?
To stop mercs, it’s might actually be very straightforward.
You just need to make the penalty to be found out harsh enough to discourage people from mercing or allowing mercs to access their accounts.
Upon suspicious activity, send the player an in-game mail, stating that you found “xxx accessed your account on yyy date” and ask for a reply and explanation with supporting proof within 3 working days. Failure of which to provide will result in a permanent ban from the game.
It’s harsh enough, and open enough to decide on a case by case basis.
What kind of proof could an innocent person provide to show that someone didn't access their account?
Correct me if I'm wrong, but an innocent person would not be in that situation in the first place.
Kabam has lots of login data from us. So only out of the ordinary instances get flagged (like suddenly appearing in a different country for a day and back in the original country shortly). If someone genuinely traveled, I'm sure they would have some sort of proof that they did.
Comments
That’s a nuclear option I could get behind. Sucks for people actually taking a trip and doing it, but that has to be a very minimal amount of people. MOST of these magical trips have to be mercs
if someone "took a trip" to do the legend run before re-appearing at its original location, there is a high chance he gave its ID to a merc to do the legend run for him ! if you can't ban him, at least disqualify him for the legend run.
The fact is, most of the end game is "insignificant" in the sense that only a tiny percentage of the players actually experience it at any one time. Act 7 is insignificant, Map 6 and 7 are insignificant, Master rewards are insignificant in that sense. The problem is that's not how we judge the end game and the top tier rewards. If we judge the end game and the top tier rewards in the game based on how many people get them, they aren't important enough to *add* to the game in the first place.
There's lots of reasons why cheating and mercenary behavior is bad for the game, but the biggest one is that it fundamentally erodes player's notions of fairness. Even if you aren't competing for those rewards, the idea that the game is rewarding cheaters erodes your confidence in the fairness of the part of the game you're playing. If cheating is allowed at the highest levels of the game, who knows how much of it is happening here. And by extension, why not cheat if everyone else is doing it.
Ultimately, Kabam can't eliminate all cheating from the game. What they can do is give the impression that it is intolerable, and actions will be taken against it, and if the players want a game with the fewest amount of limitations it is up to them to treat cheating as equally intolerable. This stuff can't really happen in a complete vacuum. For every merc there must be dozens of customers, and hundreds of people who indirectly benefit from those customers, and thousands of people who know about those hundreds of people. Kabam has to do their part, and we have to do our part. If we want a game that isn't jerked around by the actions of a few cheaters, we have to treat the behavior as equally intolerable. And if the playerbase has too many people who think this is perfectly fine, then we need to keep squeezing them out of the game until there aren't.
The people who think these actions are overkill, or think the cheating that goes on in the game is no big deal, are sitting at the base of the mountain of cheating that's holding the entire thing up. They need to change their minds, and we need to let them know that attitude is itself intolerable.
I will say that Kabam hunting down mercs has up to now been a game of cat and mouse, and the mice keep learning how to better avoid the cat. The game need to change to guillotine and mouse, where the mouse doesn't get a chance to learn how to avoid the guillotine. We don't need to train the cat to be smarter, we need to change the game into something the mouse no longer wants to play.
That's theoretically possible.
The real problem is that there are tactical responses to forcing players to "be home" and there's absolutely nothing to be gained from teaching mercs one more counter-surveillance technique. We've basically been doing the analogous equivalent to breeding resistant bacteria. We find one thing the mercs are doing and ban them, they figure out what that one thing was based on who was banned and do something else. Eventually, through dumb random chance you breed a semi-competent merc.
Instead you want to deploy a spectrum of overlapping drugs designed to give the microbes no way to evolve resistance. They are just banned, and they don't know why.
Of course you could have 3 peoples playing each 8hrs/day non stop during 3 days...
In fact, arena bots too. Would Kabam look at how many accounts in arena top 500 are operating 24 hours endlessly during that 3 days?
The other thing that is often suggested is even worse: two-factor ID. How could two-factor ID be worse? Because it makes mercing safer for clients without making it harder for the mercs. Suppose you implement some kind of two-factor ID that involves codes or something similar. I could send the merc the code when they needed it to log into my account, so this doesn't hurt my ability to hire mercs at all. Meanwhile, once I'm done with that transaction I don't even have to change my account password. I know the merc cannot get back into my account once he completes his task, because only I have the two-factor generator. So I don't even have to worry about giving out my password, because my password no longer matters. I send the merc a token number to get in, and that's the only time he can get in.
So yeah, the two "obvious" panaceas recommended by others over the years, biometric authentication and two-factor authentication are both completely useless to stop mercs. Games that have implemented two-factor authentication in the past, like say Blizzard using tokens for World of Warcraft, were not using them to stop mercs, they were using them to stop people from hijacking other players' accounts. If I have 100% control over who can log into my account and when, it actually makes it much safer to hire mercs.
Therefore, I’m not entirely sure where the harm would be in Kabam coming out and stating anyone not completing the Legend run in their home location is automatically disqualified
To answer your question, I would have to explain what I think Kabam is doing that Miike is describing, then describe how that works technically, explain how countermeasures would work, how counter-countermeasures could be deployed, and what the ramifications of all of that would be on the players. That's unfortunately something I would love to do ('cause, you know, DNA) but no longer willing to do while we're in this particular situation with the mercs.
It is not a dumb question. It is internetworking 101, internet fundamentals 150, network security 205, and basic forensic analysis 301.
Every move kabam does against the dark forces will be applauded.
I have never win this title and I have never tried to because I know there are so many mercs out there.
Once it's on again I'll probably never win this title, but at least i'll know someone who actually deserves it did.
Problem is, Mercs will always exist. The demand creates them, and the system can't stop them. It's far easier to break a lock than it is to create one, after all.
You just need to make the penalty to be found out harsh enough to discourage people from mercing or allowing mercs to access their accounts.
Upon suspicious activity, send the player an in-game mail, stating that you found “xxx accessed your account on yyy date” and ask for a reply and explanation with supporting proof within 3 working days. Failure of which to provide will result in a permanent ban from the game.
It’s harsh enough, and open enough to decide on a case by case basis.
Kabam has lots of login data from us. So only out of the ordinary instances get flagged (like suddenly appearing in a different country for a day and back in the original country shortly). If someone genuinely traveled, I'm sure they would have some sort of proof that they did.