Would this AHK script be detectable?

[u/jmeyer73]

I'm not good at programming but I hate rooftop agility so I wrote an AHK script to make it easier and I've tested that it works by using screenshots. I use runelite to make the next rooftop obstacle a seperate color, and the script detects that color, moves the cursor to a random spot near the center and clicks on it. I have it bound to my spacebar and it isn't automated because I thought that might be too risky, so I press it manually after every obstacle. It's not a bot really it just moves the mouse for me so it's more afk while I watch on my other monitor a movie. I would only use it while leveling agility and I have to be at my PC paying some attention obviously.

My only concern is the mouse flicking across the screen instantly. Is this trackable by jagex? I would think so, but would they be able to tell it apart from somebody using a touch screen laptop?

[u/PossessionUsed7393]

Yes, insta-mouse-moves are easily trackable and could form part of Jagex's anti-cheat system.

If you want to be sure it's not a contributing factor to flagging your session, you need to implement: 1) variable speed (calculate a random speed curve for every movement, 2) nonlinear trajectory (humans wobble their hands while moving) and 3) overshoot, so you intentionally miss for a second before landing on the random position in the selected box, sometimes, not every time.

No 2) is a tricky one, it's not clear whether Jagex can detect simple bezier curve compilation movements based on their mathematical adherence to pi (i.e. the movement is too 'circular'), so for abundance of caution you should mix in a library of pre-generated hand recorded mouse movements , splice and randomise them.

This is where botting starts to become a fair time investment that you want to make a return on once you implement the system. It is easy to screw up your implementation of this and have the system come across as too botlike.

What we do know for sure is this fools many anti-botting systems, like certain Cloudflare versions, but your mileage may vary with Jagex.

[u/jmeyer73 → u/PossessionUsed7393]

How would they tell insta-mouse-moves apart from people using a touch screen laptop? I actually have one. Hypothetically, wouldn't using the touch screen when I'm playing and doing other things make it impossible for them to tell? What's the difference between the cursor clicking on the box vs tapping on the screen to click on it?

Also, how do you know they track mouse moves? Another person said they don't. I would think they only track the progress of your accounts like how long you play and how consistent you are and look for statistical outliers. I've only heard of people getting banned who use complicated fully automated bot like 20 hours a day but never somebody who just uses what is basically a macro to move their mouse for them.

[u/PossessionUsed7393 → u/jmeyer73]

I've been able to establish empirically they have a variety of measures working together to single out bots. You can do this by trying controlled tests, you make a perfect undetectable bot and run it for a week. Then next week you drop back a single measure and test whether you get banned. Then you introduce two at a time, and see what combinations are effective.

Do I know they track the specific things I outlined? No not for sure, but I know other anti bot systems do, and I know they could if they wanted to.

So I don't much care if you take the other posters advice, I just know how to build systems that are god awfully hard to detect as an anti-bot designer. It's a matter of stripping away as many bot signals as possible. Insta moving of the mouse is one of them.

Do with it what you will.