Skip to content
TORNLIFE More

Finally wrangling websocket mug bots

Started by Omanpx [1906686] on in General Discussion.

419 replies · 6.76k views · thread synced · 3 days ago · View on torn.com

Posts archived: 420 / 420 posts (100%) · the total is Torn's reply count + the opening post at the last fetch

Viciously_Grim [2752611]

There are many ways to bypass anon. Anon listing is a game of deception.

 

Anon listing can be bypassed by:

 

  1. Knowing who bought the weapon on the auction house
  2. Knowing who is selling the weapon off the forums
  3. Knowing who is in property broker and knowing the time the item was listed and when someone in PBs last action was
  4. Knowing who has you on their enemy list and checking to see if you can buy the item and their last online time
  5. Knowing what property brokers bought (non weapon stuff) in bulk

 

There are ways to fake all of this information as a property broker.

 

  1. Ghost selling, which is anon selling for someone else. This works best if the item will not affect your net worth.
  2. Swapping listings with another seller
  3. Price matching other anon sellers
  4. Timing your listing to match someone else's online time when they're out of hospital. I am the 15th most active player in Torn. I welcome sellers to match my online time and last action for all anon listings.
  5. Mass adding of muggers to enemy lists by entire groups of people, with enemy selling enabled to fudge enemy list results 
  6. Listing items and immediately changing your last action time by putting on and taking off a hidden clothing item a few times (in case they can view your avatar with job perk)
  7. Limit changing prices because once you've listed an item in certain categories you're now on a watch list
  8. List 1 item in your stack so it doesn't get watched and then change the stack size later
  9. List high initially so you don't get put on a watch list and change the price later
  10. Lie about what you're selling and not selling, what you've sold and when

 

I haven't had a successful incoming mug on any major listings since last December barring some shopping mugs and some gray gear sales (which are 1000% markup or more anyway).

Viciously_Grim [2752611]

Yes that's part of item 1. Ghost selling is the only way to bypass this. I have ghost sold weapons for someone before and sometimes ghost sell items I have "no way" of getting - items not on my price list, items I didn't buy from anyone. Items I didn't buy at all. 🙃

 

You can actually see some ghost selling on my networth graph last January through February is items sold.

DarthRevan [2836054] Reporter

more working off the timings. Others who have more experience with websockets have already said that it's around 20 seconds. Theres no physical way for a websocket to get a 1-2 second attack started, purely through human reaction speed. 

 

Wheras a buy mug you can have the attack page up on one side and then buy on the other side. Same setup with stalking except you ain't the one doing the buying and your waiting for somebody else to do it. 

 

 

DieselBlade [1701621] Wiki Contributor

Since the accounts have been banned for automated mugging, could mugs they made be reversed?

 

Seems fair given that they broke the rules to gain an advantage. What about the people who were disadvantaged?

BLS-Envoy [1395147]

dont know if this counts, but might have to look into it as well

about 10-14 secs each time

 

 

19:04:08 - 03/01/26 You sold 5x Feathery Hotel Coupon on the item market to bobert2422 at $13,198,000 each for a total of $62,690,500 after $3,299,500 in fees

19:04:22 - 03/01/26 Andrew_616 mugged you for $7,154,253 sending you to the hospital for 0h 34m [view]

 

23:30:50 - 17/12/25 You sold 18x Can of Red Cow on the item market to Nuggie at $1,894,655 each for a total of $32,398,600 after $1,705,190 in fees

23:31:03 - 17/12/25 Andrew_616 mugged you for $6,508,173 sending you to the hospital for 0h 37m [view]

 

17:45:20 - 20/12/25 You sold 20x Can of Red Cow on the item market to Bruv at $1,954,999 each for a total of $37,144,981 after $1,954,999 in fees

17:45:30 - 20/12/25 Skjold mugged you for $3,799,931 sending you to the hospital for 0h 44m [view]

 

19:05:56 - 21/12/25 You sold 30x Can of Red Cow on the item market to DragonArmy at $1,996,000 each for a total of $56,886,000 after $2,994,000 in fees

19:06:11 - 21/12/25 Skjold mugged you (with 1 other) for $6,320,034 sending you to the hospital for 0h 33m [view]

Scuba [512975]

The winning bid? Or each bid? If the latter, that's f**ked to the nth level given active players can't even view that data accurately. Even viewing a winning bid's data accurately feels like it shouldn't be always accurate if one considers last-second snipes players aren't likely to physically see.

 

Honestly, despite benefitting from other's hard work via APIs (to arguably remain competitive), the fact that APIs are even a thing create a massive disparity of haves vs. have nots on just about anything one can creatively think of. It's as shitty as it is wild to me. I don't like scripts and would rather play vanilla but doing so would just be a dumb hill to die on either from a competitive or from a quality of life standpoint if comparing ones own progress to others.

 

The amount of passive data scraped and compiled is sometimes interesting (re: HOF) but crappy in so far as eliminating the mystique of eg. who now has #100 ranked equipment.

BiiGz [2733267]

I’ll be honest mate I’m no API whiz but as far as I know just shows who won the item and at whatever price 

Rockem [1639350]

This new lead of shat is already looking at rmt'ing the faction for a mars bar. Swamp runs deep over there. 🤷‍♂️

Stealzy [3393105]

It seems to be copium because he is probably just scared himself, maybe he bought the script and used it too

Viciously_Grim [2752611]

Not exactly. You're allowed to scrape a websocket on a page you're actively on. But they didn't have a way to distinguish pages you're actively on and tabs you have open, possibly even on different devices with screensaver off.

 

I gave a suggestion in DM to splent 6 days ago, and today we see feds. Probably a coincidence, but I'm just going to bask in the glory of helping fix this.

 

@bogie no bursting my bubble

Anton [422812]

Some of Monarch track weapons too that are listed publicly on market and is assumed same person is listing if it goes up anonymous later if not sold. Was funny when I listed a weapon for someone else anonymously and removed from market a bit later and they mugged that person because it was last listed publicly by them and they were offline as I saw them ping their retal bot for the mug lol