Implementing Monthly Subscription System

03/02/2014 01:23 badguy4you#1
Well I am creating a bot which I want to be used for a little amount of monthly money. However I don't have any idea how would I implement such thing securely to avoid MATM attack's attempts to alter the received packets or so on. Also I want to know an overall idea of how would an application securely call a website asking for some information like (is trial enabled, if no does the user has credits to use the bot and so on).
03/02/2014 15:07 atef201080#2
as i cracked a few bots using website methods, i'm suggesting you to make your own encryption which has timing on the send and receive and don't use .net since ppl can see your source code using reflector
03/02/2014 17:15 badguy4you#3
So will that force me to use a VPS to run my Custom Socket Server ?, if not what are the possible ways of achieving my goal ?
03/02/2014 19:37 atef201080#4
running it using Http Requests to ur website is the same as socket and more cheaper since you wont need to buy a vps
03/02/2014 19:48 SteveRambo#5
Quote:
Originally Posted by atef201080 View Post
as i cracked a few bots using website methods, i'm suggesting you to make your own encryption which has timing on the send and receive and don't use .net since ppl can see your source code using reflector
:facepalm::facepalm::facepalm::facepalm::facepalm: :facepalm::facepalm:
03/02/2014 19:52 badguy4you#6
Quote:
Originally Posted by SteveRambo View Post
:facepalm::facepalm::facepalm::facepalm::facepalm: :facepalm::facepalm:
So what is your opinion, along with the facepalms :D

Quote:
Originally Posted by atef201080 View Post
running it using Http Requests to ur website is the same as socket and more cheaper since you wont need to buy a vps
Well, HTTP Requests returns a plain text responses which is pretty bad as far as I know and very easy to be altered with MATM attack.

-Will using SSL make HTTP requests and responses encrypted when connecting to it from my C# client ?
03/02/2014 20:17 SteveRambo#7
Quote:
Originally Posted by badguy4you View Post
So what is your opinion, along with the facepalms :D
I don't really have an opinion, but you should NEVER make your own encryption for these kinds of things. Or, more generally, you should probably just not listen to atef201080 at all.

I would probably go with a simple authentication server using some public, well tested, secure encryption between the client and the server.
03/02/2014 23:52 badguy4you#8
So any more help ?
03/03/2014 07:51 Y u k i#9
Do it like Ultimation..

His Dmap Editor has a licensing server wich compiles the maps and sends them back.

My point is, you cant really crack something that has not the full functionality on its own :D
03/03/2014 08:22 Spirited#10
I do believe that's how ConquerAI works. They have their bot server that processes the secrets of effective botting and require an account login to access their server. If you want your application to be more secure, it would be best to make it an online application where the primary function of the program is on a server. If you're making a bot that interacts with an online game, then why not make the bot online as well?
03/03/2014 16:42 badguy4you#11
Quote:
Originally Posted by Spirited View Post
I do believe that's how ConquerAI works. They have their bot server that processes the secrets of effective botting and require an account login to access their server. If you want your application to be more secure, it would be best to make it an online application where the primary function of the program is on a server. If you're making a bot that interacts with an online game, then why not make the bot online as well?
This is very good idea, but then I will have to get VPS which till now I don't find good cheap one. also can I relay of SSL to secure my communication between the bot and the server (whether Web, or TCP) ? as far as I know SSL implements two way authentication like RSA or am I wrong ?

Quote:
Originally Posted by Y u k i View Post
Do it like Ultimation..

His Dmap Editor has a licensing server wich compiles the maps and sends them back.

My point is, you cant really crack something that has not the full functionality on its own :D
So is there any way to do the same with webserver or I have to create my own Socket server ?
03/03/2014 17:35 KraHen#12
[Only registered and activated users can see links. Click Here To Register...]

Here you go. 1GB ram, 4CPU cores, 100GB disk space with a 50 mbps connection for $10. More than enough to get you started.