I farmed tens of thousands of us dollars in modern RuneScape by unhooking the mousehook. It worked for decades.

Find call to `SetWindowsHookEx` -> Find dword (`HHOOK`) it returns -> Inject module that calls `UnhookWindowsHookEx((HHOOK)(module_base + hhook_rva));` -> profit.

Jagex has done some interesting things, but without fail, there is a blunder accompanying each.

“This is good for LLM.”

In reality since the new CEO, they have been much more strict with antibotting and they have virtually disappeared from the game. It’s been an incredible 6 months without major botfarms in the game. Botting subreddits have been on suicide watch since.

Hi, I'm the author of the article.

Sadly, the anti-cheat is not something I'm too knowledgeable in. Half of the story is visible in the client: which data is tracked, and when (as well as some visual adjustments to defeat older colour-recognition bots such as SCAR) - as well as the data scrambling I mention in the article, though this was more likely meant to break all third-party clients and packet sniffers.

Knowing how Jagex used this data once they'd tracked it isn't something I have much of an idea about, though.

On the wink: I wrote this article by hand over a couple of weeks back in May; I used AI to provide wording review on some of the more technical sections, and to create the SVG diagrams from my specs.

It's gotten pretty good (finally good enough that you can observe it in the game's macroeconomics), but if you're any good as a programmer then it's no work whatsoever to build something which can bypass it indefinitely.

The evolution for Old School RuneScape was to just make cheating a built-in feature. It only takes a couple clicks every ten minutes to "play" the game.

It was enough to just write your own scripts instead of using freely available ones to avoid detection for an extremely long time.

A large amount of work has been done this year alone to reduce botting to levels i didn't think was possible.

Obviously we only get the details JMods are willing to give away but some of their techniques can be seen in various reddit Smackdown posts like this one from six days ago - https://preview.redd.it/prx0s0qp2hlh1.png?width=355&format=p...

No need for mouse heuristics. Sandwich Lady will wreck your shit

Publish 124 released last week. Quite incredible that the game is still undergoing development and new content. Admittedly it has changed hands several times, and the Richard Garriot days are a distant memory now, but still!

I used to operate one of the more popular player run shards, after the peak of the mainstream game, and even that feels like a distant memory.

Edit: latest notes https://uo.com/wiki/ultima-online-wiki/publish-notes/publish...

Here's an enjoyable read by lead designer Raph Koster on the influence of UO: https://www.raphkoster.com/2017/09/28/ultima-onlines-influen...

Still no better MMORPG.

Ultima Online is one of very few games (probably Star Wars Galaxies and that's it) that actually merit the label MMORPG. It's kind of insane when you think about it, that the MMO that most closely came to fulfilling the promise of a "shared, persistent, virtual world" was also the ~first one.

I played EverQuest on the PS2 using a modem in 2003. Performance was fine.

Hi, I'm the author - no it's not an analysis of the Lost City codebase (though I am a contributor to LC).

Most of the knowledge came from my refactor of the #317 RS2 client (https://github.com/Jameskmonger/317refactor) though I looked at some other decompiled versions while writing this blog post.

It is. Code snippets in the article are JavaScript as well, while only ever mentioning Java in the article

Oh Britannia, how you were so amazing before the Tramel/Felucia split.

The algorithm is very cheap to run for a client (linear first, then diagonal to target, stitch together as many of these as it takes in the fewest number of hops), as they have full map data downloaded. For 2k concurrent players on mid range 2004 hardware (you have to remember they had kind of old school tech even for the time, though I'd love to be proven wrong on this), and with all the other interactions that needed to run before the next game cycle, I think they probably decided it was better to be clientside.

It's also possible they could have made it work, and it would have been a technical win, but just didn't need to since they had an MVP.

Validating that a path on a grid doesn't move through impassable objects is definitely much cheaper than running a pathfinding algorithm, especially on 2004 hardware. You'd have to make those checks as well in order to run the pathfinding.

You're putting the computation of waypoint finding on the all clients, or on your server.

People spam click, so it's cheaper to compute it once and pass it around.

Interesting, when I was a WoW GM our special “GM WoW Client” contained a lot of features that QA would use.

One of these was showing NPC pathing in the form of dots with lines in between. At any time the WoW client would know next 5 or so waypoints of a mob that was idle patrolling.

I guess it’s more efficient to send a batch of waypoints occasionally than one at a time more regularly.

It was a interesting watching boss fights where the pathing would update quite regularly, especially if the tank had just died and it was systematically clobbering everyone else.

It's a trade-off, especially for longer paths, especially when you count the cost of server RAM cache misses.

MUD1 is from 1978

The other comments hit the big ones (didn't have to download, had a free tier, didn't have significant irreversible character choices, had meaningful solo or quasi-social activities, etc), but I think a major contributing factor was it appearing on miniclip.

It was free to play when that wasn’t a popular financial model for games at the time. The memberships were also much cheaper than WoW and accepted different payment methods that would be more available to minors at the time.

As a kid, I didn't have a computer that could run WoW, nor would I have been able to convince my parents to pay for the subscription. I suspect most of the popularity was from kids in a similar situation, probably playing it on library computers when they should've been studying.

MapleStory was also quite popular back then for similar reasons.

RuneScape was very popular at my local public library, and as a kid I only played the F2P content. I knew maybe one or two people around that time that played WoW. The paid subscription made it not a realistic option for me at the time. Though one of those WoW players did once bring his discs over for me to install the game and play on a private server with him. I don't think I kept playing WoW long for whatever reason. I was more into MapleStory, Graal Online, and RuneScape.

It's free and you could play it in the school library, for one. Also it came out a few years before WoW.

Besides what everyone else said, it was a pre-WoW style sandbox MMO with a lot of freedom at the time. Those have their own appeal.

in addition to what others said...

2004 runescape, now "old school runescape", which is actually successor 2001 Runescape "Classic", were both playable in a browser.

and my (parent's) PC couldn't even install, let alone run WoW. despite me trying with all my might.

so I'm sure I wasn't alone.

it was absolutely magical to me.

They were two very different games and target audiences, with the incidental commonality that both are MMOs.

WoW needed a purchase, an expensive subscription, and a good PC. Runescape ran on a potato, was F2P, the P2P was 5$ a month, and you could get started in 2 minutes from Miniclip.

I was going to say a comment about “back in my day”; but your account is from 2011, so you should know what video gaming was like in ye olden era. Did you mod in a Mew, or 256 Masterballs in Pokemon Red with a Game Genie? Why not? How about doing some weird stuff with Missing No?

What about loading in some rare items in Diablo 1 on your local save and them importing them into Battlnet? especially before Diablo 2, 1.10?

How about Early Minecraft - we’re talking Beta days. Did you test out those X-Ray block packs that helped you see diamonds?

Cheating literally only matters when there’s a PvP or leaderboard or whatever glory-theft that comes from it. It’s only really shamed on when it hurts other people’s gameplay experience - like screwing with a leaderboard at the “low pain” end and ruining a multiplayer experience in the middle end. For everything else, it’s an experience modifier or a difficulty slider for your own private game experience. Lots of games nowadays add in those difficulty sliders directly or add sandbox modes where there used to be “cheating” that stuff in.

Why would they care about maintaining a reputation on a pseudonymous Hacker News account? They have tens of thousands of $, that's way better than not being known as a RWTer.

I think this is both a fair cultural observation and one that's a bit excessive. I think people regard it as a point of pride because it didn't necessarily harm anyone, and because that experience was one of their pivotal early programming challenges that has a tangible return and that they had relatively high agency over. I look back on my time as a player of WoW during the Glider days as one where I was largely pissed that botters were ruining the economy for actual players, but I look back on my time in RuneScape as one where I was completely fixated on running my little factory and not wanting to actually play what was kind of a boring tedious game. I'm not proud today of having scammed people when I did, but I was proud of having a modicum of ingenuity and figured out how to exploit various things in the system. Real world trading, like many rules, isn't inherently immoral, but deliberately stealing money or items from people is.

I highly doubt I'd have ever given a damn about programming if I hadn't tried my hand at Scar scripting as a kid for both RuneScape and Neopets. Simultaneously, I also scammed people and ripped off friends in various games, but that the two activities were mutually exclusive and I was just an asshole. I'm glad I got to explore the worst part of myself in a sandboxed environment rather than taking it to any serious level.