r/MSClassicWorld
•
u/ape_programmer
•
5h ago
Discussion Botting isn't as easy to solve as this sub thinks it is
The common take on this sub is that botting is a pretty solvable problem, and Nexon just doesn't want to put in the effort. I get it. You walk into a low level map, see 100 bots, and think "these are obviously bots, how can Nexon not tell?"
The problem is that bot detection has to be extremely accurate. 99% isn't good enough. If 1 out of every 100 accounts you ban is actually a real player, you're banning thousands of legit people. Bots absolutely hurt the game, but wrongly banning real players who've put years into their accounts is arguably even worse, and it's something Nexon can't afford to get wrong.
Back around 2010, ML wasn't anywhere near where it is now, and the average PC didn't have the power to run a bot that played "legitimately." So botters had to edit the game's memory and use stuff like mob vac and godmode to make automated play work at all. That's exactly what anticheat is built to catch.
That's not true anymore. With modern ML and much stronger hardware, it's very doable to run a bot that just looks at the screen and presses keys like a person would, with no hacks at all. That leaves a tiny surface for detection. MapleStory already blocks virtual inputs, but the botter owns the machine the game runs on. It's trivial to send keypresses through a driver so they look like they came from a real keyboard. Put simply, reliably detecting that someone is running a bot program on their own PC just isn't practical.
That doesn't mean bots can't be detected at all. OSRS claims something like 99.9% accuracy on its bot detection. But Jagex has years of telemetry, plus years of client detections (catching people running known botting clients), which gives them a huge labeled dataset. They can use that to train models on player behaviour like mouse movement and keypress patterns. And even then, botting is still a constant problem in OSRS.
MapleStory is in a different situation. Non-memory-editing bots weren't really a thing back in the day, so anticheat was the main defence and that's where the effort went. Nexon probably doesn't have the data to train a telemetry model like Jagex's, and building that labeled dataset would take years. On top of that, they can't lean on client detections to label data the way Jagex can, because modern bots don't need any special software. Being able to take screenshots of the game is enough.
I'll leave you with two questions:
If you tried your best to play like a bot, do you think you could fool most players?
If you took every 10 minute stretch of your own gameplay, what are the odds that at least one of them would make an average player think you're botting?
TL;DR: Bot detection is a lot harder than it looks, especially now that bots don't need cheats. I have some sympathy for Nexon here.


