The Most Damaging Bot In RuneScape History - AutoRune

Thanks to Factor75 for sponsoring today's video. Use my link to get 50% off your first Factor box and 20% off your next month of orders! strms.net/factor75_se6822751
Kaitnieks was RuneScape's first major bot maker. His bot AutoRune caused the great partyhat duplication glitch, stole a Jagex moderator's account, and so so much more.
WATCH ME LIVE ON KICK: kick.com/colonello
AutoRune Rap: • Young P- For The Win (...
↓FOLLOW ME IN THESE PLACES ↓
► SECOND CHANNEL: / @nellooo
► Kick: kick.com/colonello
► Discord: / discord
► Join the "Historians" OSRS Clan Chat!
Visual Sources:
Grand Theft Auto San Andreas Jet Pack Cheat Code - • GTA San Andreas Defini...
Sonic 2006 Gameplay - • Sonic the Hedgehog (20...
Turning off a Playstation 3 - • Sony Playstation 3 Ps3...
Windows XP Delphi Programming - • Learning to program De...
Visual Basic 6 Programming - • Visual Basic 6 Easy An...
#OSRS #RuneScape

[@ColonelloRS]

Thanks to Factor75 for sponsoring today's video. Use my link to get 50% off your first Factor box and 20% off your next month of orders! strms.net/factor75_se6822751

[@ChaoticScape]

Yeah, let me just buy some premade food in a plastic container that causes cancer, Bruh talk about a failed sponsor. You realize heating things in plastic containers allows TPI and BPA to seep into the food. Which causes cancer. But as long as you get paid right? Would you eat or drink out of an asbestos cup? I didn't think so same thing with plastic. It's horrible for you.

[@SomeSlushies]

Anyone viewers ever tried this stuff? I'd consider it for a couple weeks

[@roughtoast]

Where is the link in the description for the first rune scape song

[@GetOwnedInc]

@@roughtoast the 4th line in description, not including spacing

[@roughtoast]

XD gg that's the subscription to the food thing

[@MithDragon]

Wait... taxi bots need to come back wtf.

[@larperdoodle]

Should be an official feature with NPCs walking around that you can follow or pay to walk you somewhere

[@erickchristensen746]

They still do it in Oldschool F2P but that's about it.

[@AutisticWimpyKid]

Do that instead of sailing lmao

[@pickledokra2963]

​@@AutisticWimpyKidBro it looks so terrible it's crazy. Hoping they change course and just make it a mini game.

[@iiWicked]

​@@pickledokra2963 They won't. Too many players just want anything new added that they will accept literally any dogshit idea. Sailing was an April fools joke for a reason.

[@Handleya]

Fun fact : Kaitinieks was Latvian and his name literally translates as - a pest/someone causing harm.

[@ProfessionalGasLighting]

It sounds like a racist slur lol

[@hemis1861]

feels surreal anytime i hear latvian representation in random videos lol

[@MeanBeanComedy]

​​@@ProfessionalGasLightingI think if you swap the t and the second k, you'll be in business (Or, I guess out of business, since you'll be losing your bank account.).

[@chieeftain]

@@hemis1861 Es to dzirdu, brāli No one really gets how strange it feels to see a word, name or place show up with a tie to Latvian language. There's not many of us left, I think 2m globally, and as such it almost feels like an Easter Egg specifically for me whenever I clock a reference.

[@pillgrimm]

That would be kaitēklis

[@koenradmacbride7158]

SCAR was my first introduction to scripting languages. It launched me on the path to the programming career I have today. I owe it all to Jagex and Kaitnieks, but ultimately RuneScape :D

[@digi3218]

Same except I didn't follow a career in programming. But my beginning in programming was RuneScape clients and SCAR

[@partickstar1135]

I am just starting out like you did in the past, been writing runescape scripts for a year now and have 2050 total all done via my code. Not sure if I will stop once maxed but all I need to figure out now is slayer which is very hard for me to code. I am not sure if I will go on to work with code as a career but I'll definitely keep leaning these skills to have under my belt.

[@ButcherTTV]

programming bots for games is one of the most rewarding and exciting ways to learn programming tbh... what a great way to learn.

[@wvguy7238]

Bots amaze and interest me. But I'd love to learn how people decrypt the code mainly, but also then figure out what to inject into the client. I have a phone game, ffbe, that has a bot. API based game. I'd love to just know how the guy decrypted what was sent to the server. Capturing the traffic is probably easy enough with Wireshark or something, but I could be wrong with what they use to do that as well. We use Wireshark commonly to capture network traffic in my line of work, but I only got a year or 2 programming experience.

[@dallascompton6379]

@@partickstar1135are you interested in having some testers?😂🥹

[@Brentastrophe]

The sonic 06 joke was unexpectedly good

[@ReverantKnight]

Agreed, Caught me off guard! 10/10 comedy

[@biggysmals9715]

nah. the game is overhated

[@Eira_99]

I feel like inserting a Sonic '06 joke into an unrelated video in 2024 is actually the lamest joke you could make.

[@etherealradar]

​@@Eira_99it actually works for modern day sonic games too 😂

[@Eira_99]

@@etherealradar did you time travel here from 2010 or something?

[@mgh797]

I love the documenting of RS history. I always look forward to a good Colonello upload.

[@Baldilocs]

I went to high school with one of the "Cheating Scum gets banned" players. He was really high level and smug and gave me so much satisfaction to see him banned lol

[@Real_Ivan_ooze]

Cap

[@superg33kify]

​@@Real_Ivan_oozeflap

[@Real_Ivan_ooze]

@@superg33kify wap

[@superg33kify]

@@Real_Ivan_ooze slap

[@originofsin2605]

Crap

[@MinkJu]

“It’s impressive RuneScape cheaters were using AI in 2005,” AI isn’t just stuff like ChatGPT and Midjourney. Your autocorrect is an AI. Simple forms of AI have been apart of computing for decades now

[@erikstrand9876]

Nah fam ai refers to the modern ability for programs to scavage the internet in order to find an answer. What you are referring to is simple a+b=c coding

[@OnyxWasp]

@erikstrand9876 wrong. AI is just code

[@RickDSanchez]

Young kids are just researching the old days, you cant blame them.

[@cephelos1098]

AI has been actively researched since 1956, and has been an extremely impactful technology for the last 50 years at least. Modern large language also models also don't require an internet connection at all, they're just slower to run on your shitty laptop than on a big corpo's servers

[@kurtasee2314]

Even elon musk said a lot of ai and really good high end coders came from runescape! It's awesome

[@A6by]

God, I miss luring flax bots into the bats by Keep Le Faye. Those were the days.

[@MAORIATLAS]

Hey when the bot went down could you loot the bodies?

[@A6by]

@@MAORIATLAS Yeah, if I recall correctly. I don't think I ever did because they only had flax, and others jumped on it so quick, but it was fun nonetheless.

[@darnit006]

I remember the taxi bots that would loop between lumby, fally, varrock. It was a godsend for noobs because walking was so slow, and for me with dial up internet, the lag lines took 30-45 seconds a piece :'D. Getting lost was such an enormous waste of time, those bots were so helpful.

[@erickchristensen746]

You fired up my ptsd with the dial up...Ugh i cans till hear the AOL booting sound

[@darnit006]

@erickchristensen746 lmao for real. I remember seeing a ladder and my curiosity got the best of me. I click it, screen starts loading, I hopped on my scooter and did 2 laps around my house trying to beat the loading screen. Then when there was nothing, go back down ladder and repeat. Sometimes a lag line went beyond 60 seconds and Id log out from too much afk

[@matthewkelly28]

You should do a video on the Reinet/wartnet era of runescape cheating(2005-2009) haven’t seen anyone do a video on that yet. Awesome videos man, keep it up!

[@mr.hightower8839]

Filet mignon in the microwave is a crime against humanity ;-;

[@oneeyedguy99]

yeah that steak looked so fucking sad lmao

[@mr.hightower8839]

@@oneeyedguy99 😭😭

[@PivotBanq]

Came here to say this

[@yananm8171]

This man microwaving steak that is vile

[@queensofthedthrone8267]

More like bovinity

[@Hungryghost01]

3:19 skip ad intro

[@hellofend4734]

W

[@RealNovgorod]

Use sponsorblock. It's not 2006 anymore.

[@TheFinalSluggy]

Honestly thanks, I'm sick of having to wait 3-5 minutes before actually getting into the video

[@RealNovgorod]

conveniently, the sponsorblock comment was deleted. nice.

[@GrzegorzBrzeczyszczykiewicz420]

If you are using Chrome or Opera get yourself the "SponsorBlock" extension it will skip segments like this automatically

[@Cuckie1996]

Jagex not rolling the game back after the duplication glitch was a very bad idea lol

[@kingjasko]

Did they even have a way of doing it back then?

[@Cuckie1996]

@@kingjasko Sounds like they did from the way Mod Ash talked about it.

[@Derekzparty]

It could have been rolled back from dvd or other backups if it needed to be. The issue with rolling back the server would be that it would have set a precedent that the servers could be rolled back at any point in time due to severe bot exploits which rightfully may have causing players to lose confidence in their progress being saved. Botting, as the video demonstrated, was rampant meaning that players would have been on edge of a rollback occurring in the future whenever any new cheat/hack was discovered. Losing confidence in your progress being saved in an MMO would be very unsettling for a player.

[@ianwoneill]

This video made me feel old instantly, I was around for all of this.

[@fulltang1]

Thinking back to the feeling of playing the original rs makes me feel nostalgic and fuzzy inside. It's a pleasant memory!

[@Voidesth]

I enjoy these longer videos great job!

[@kingjaries]

Man how time flies seeing all this classic footage

[@anthraxmanic]

1:21 never have I ever lost all respect for someone, only to then regain it tenfold. You got me.

[@Phill_mcCrackin]

id like to shake a hand of a chef who is working on these shitty tv dinners

[@HAZKIN_Official]

Love these type of videos, the history of this game is unrivaled.

[@ixJake]

That Napstablook reference didnt go unnoticed

[@MoliorRS]

A 28min video, we've been blessed

[@jignite1346]

love your videos dude, keep em up

[@bailey125]

16:16 "Dylock's Sex Tips" for teens? WTF?

[@SlayerMuff]

Absolute banger video as always Colonello, i love your content discovering all this lore about runescape i never new existed Keep dropping bangers G!

[@ColonelloRS]

Will do, thank you!!

[@skatmanscott]

​@@ColonelloRS how do you find all this information? Do you just dive deep into old forums, archieves, and publicly available info? Or do you actually find and talk to the old osrs legends themselves?

[@PlumbRandomNoob]

I played RS from 2002 to 2009. It's insane all these memories I had completely forgotten!

[@MeanBeanComedy]

Ha! He got out of the RuneScape criminal underworld and went clean! 😆😆

[@Slash0mega]

as far as we know, for all we know he could have backdoors in his product or something.

[@Pittato]

Saying they used AI was the best joke in the video.

[@psychosomatiqueofficial]

It's so funny your ad for diet and meal prepping came on after I let out a huge fart

[@ladwigs]

instead of botting, I wanna create coffee, maybe as a ports reward

[@user-eo7qi2kf7d]

I remember hearing a story about the first guy to get 99 woodcutting ended up getting banned for botting so he took his PC to Jagex to show them that his computer was running language translation software and not botting software. He ended up getting unbanned. I’m not sure if it’s actually true or if I remembered it correctly but it would be cool to hear a story on that if it is 😊

[@kendog0013]

1:18 SOLID sonic 06 dis

[@TheSubbyGod]

This video got an audible wow from me at the end.

[@LazarusIsBackBaby]

I love these stories of early-tech arms races! They show such creativity & ingenuity on the part of both the hackers and the game devs.

[@personious_k]

Love everything RSC. Thanks man! 💚💚💚

[@erickchristensen746]

Ah man i remember the community train system ♥Back in old f2p when rs2 first started(this is when i first started playing), people did this a lot for folks since Lumbridge was flooded with new players all the time. Old times man...

[@EggEarl]

That sonic 06 line was cold. Bro sonic tried his best to be fun

[@xodzphone]

SCAR = "Shite Compared to AutoRune" ended up being the biggest and best... And then Simba happened.

[@NoClue-rat]

I really enjoyed the fact that developer created a backdoor when he sold the software in case source code got into wrong hands.

[@thegreatanorak35]

Great vid! Love osrs content from you

[@ponderlife1645]

We love the Fart Shartly editing here

[@dennisalvarado5134]

that sonic 06 line was N A S T Y

[@TheRileyg98]

Oh my lord, the autominer email being ihug! My dad used to resell their dial up in the 90s.

[@fleeper20]

Sonic '06 still catching strays almost 20 years later lol

[@ohwinz]

I remember the flax bots in 06-07 that would get lured from the flax field. good times.

[@michaelschuler2711]

Coolest thing about the auto taller besides only happening to type what you want it to say ones.. and it would automatically type it out as fast as you wished. It had to color words saved into the auto taper so you didn't have to remember the old color commands Like it was. Cyan: whatever you want and it would come out light blue it basically help start color typing in RuneScape Rain: Scroll: Flash: Red: So on...

[@developersean]

Thank you for these videos, I really enjoy them!

[@taron6858]

oh nice havnt watched one of your runescape videos in ages

[@WildArmACF]

so much effort to not play a game

[@J3dotgg]

It is worth noting that not every bearded lady / male with female head mesh account on RS3 originated with AutoRune. Bugs with similar outcomes have come and gone multiple times over the course of the game's lifespan (even on oldchool!).

[@GlassWindowYT]

Colon, what a beautiful video my brother. Keep up the good work

[@ColonelloRS]

Thank you, I will :D

[@EmilyLisle]

I actually enjoyed the fatigue system, it's basically how I learnt to spell things =p you could still gather items you just wouldn't get the xp, so botters could bypass the system completely by having auto pick up items etc not gaining xp but they would gain value which is my theory why they scrapped the system because it only bit one head of the metaphorical hydra

[@joshyo3771]

Perfect time for a video.

[@meroman08]

some lil feedback: The 'background' music is too loud that its distracting and sometimes louder than your voice

[@yunghuztler1000]

Didn't even notice it what you on

[@KoraOSRS]

So much for Kaitniek’s intellectual superiority lol, dude leaves with THAT for a speech, and proceeds to open an e-commerce store lmao

[@Dryblack1]

Unfortunately, Tobias Lütke, co-founder of Shopify, seems to fit Colonello's description. So not just an e-commerce store, but the go-to product for any small business looking for an online storefront.

[@KoraOSRS]

@@Dryblack1 You believe Kaitniek to be the co-founder of Shopify? What leads you to this? Can you substantiate? I'm super interested now haha

[@Dryblack1]

@@KoraOSRS 😜 I thought it sounded like Shopify when Colonello said he co-founded an ecommerce website builder that's been around for over a decade so I did a quick Google. Kaiteneks retired from RS cheating in 2004 - Tobias Lütke co-founded Shopify in 2006. Kaiteneks is a Latvian word - Lütke was born in Germany, just a couple countries away from Latvia. His Wiki page says his parents gave him a computer when he was 6 and he was modding games at 11 or 12. Anecdotally, he moved to Canada in 2002, which is the same year Autorune was made. I'm probably reaching, lol.

[@name927]

​@@KoraOSRSLutke started coding young, eventually leaving school for a programming apprenticeship. He met his wife gaming online, visited Whistler with her, then moved to Canada to be with her in 2002. Lacking a work permit, he started his own business: an online snowboard shop. In 2006, he used the e-commerce platform he built as the base for Shopify.

[@Zack-504]

24:31 FYI you/anyone is able to use 8 seconds of audio that is copyrighted, only 8 seconds though, 9-10 seconds of constant audio will trip the detection system and will also become non transformative. If a claim comes up you are within your right as a content creator to dispute it if the audio is under a certain threshold. When you produce music you know these things like the back of your hand, you also can set the algo to trip detection within percentages, aka 99% leniency would result in an instant claim.

[@SimplyLivid]

That sonic 06 reference made me laugh lol

[@sk8rdman]

Maybe you know something I don't, but my understanding of the bearded lady phenomenon is that it was a glitch with the makeover mage that was later patched. I didn't think it had anything to do with nefarious software.

[@SnipezOsrs]

4:28 that made me laugh out loud

[@mcchaderson]

20:11 "who spends irl money on games?" Bro had no idea what was coming

[@tehjamerz]

Nobody did

[@wvguy7238]

Botting still exists so much in Ultima Online today that its been incorporated as part of the game, though unofficially. In unofficial servers, its officially part of the game.

[@TheLKStar]

The script for these videos is so funny "some internet random said it was impossible, so he did it" LOL

[@SakamuG]

I don't even play that game but it is really interesting to see Drama in Games.

[@AmazingWowacow]

You can't be serious my ign has been Cow God for YEARS now and I never new there was an Evil Cow God lol

[@Trillyana]

Regarding the item duplication glitch, every story is always that someone has the chance to get away with something but either can't keep it to themselves or can't stop doing it until they get caught. But I guess the people who do get away with it because they were responsible, we just don't hear about.

[@daleHarrison93]

I used to use the bot at 11:50 which found the colours of monsters way back in the day, it worked really well at the top floor of fally castle, killing the white knight things because they were out of the way on the top floor nobody ever broke it, I did this for over a year to train while asleep/at school lol

[@poeskey]

Man that account you showed with the like 50+ party hats would have made that guys so much money back in the late RS2 days. Id have said fuck my account for that kind of payout.

[@Eladnav1]

the persons who appear to have the biggest ego, most often have none, it just looks like vast sky, but when you investigate you´ll see nothing at all. Stating one is different from others is just honesty and knowing oneself. Both rare talents.

[@sparttin117john]

Oh wow. I have SCAR, and used it over a decade ago to fletch arrow shafts for a day or two once. I didn't know it was made for runescape.

[@waffle8364]

I remember a similar bot program for the Sims online. it would allow you to level up your character by doing tasks and take care of your sim. you just need to identify for the program where things were. it was clever. but you couldn't move the screen or touch your computer otherwise it would mess up the clicking

[@kasperdomagala7031]

autohotkey macro, it's not hitting but macroing

[@REDMAGEV00]

The good ol' Icarius Bus.

[@livf3107]

I pressed like the second you mentioned it in the video and now I'm having an existential crisis, cheers. Great vid though, never played runescape but I'm always into MMO-related chaos.

[@ProfessorOfCookies]

I remember trying all these programs out in the day but since I used AoL internet I never left the bots running xD

[@hexangel1523]

Is there a video about the Autominer guy getting shut down by his dad?

[@0condolences]

well done video

[@christiansutton6001]

13:28 butter moist bowels eh?

[@bladelores666]

haha crazy that some of those bearded lady accounts are still in rs3

[@ArdentMoogle]

The RS bot detection still sucks... I know someone who botted to 99 in several skills with a basic AHK script that didn't even try to act human. It even broke at one point and they were running into a wall for hours.

[@ladyfuse241]

Did yall see the like button light up when he mentioned it too?

[@OD3E]

Your videos are awesome mate bring back so many memories thankyou

[@Demonslay335]

It's not all that surprising that they would break that encryption. ISAAC is a symmetric stream cipher - meaning they just would have to find the key in the client really. You would have to use asymmetric crypto (e.g. RSA or ECC) to prevent that sort of simple attack.

[@artforz]

Asymmetric crypto also doesn't help if the bot user also controls the client. Just replace the server pubkey in the client with your own, then MITM the key exchange. Source: Wrote packet-intercepting and even fully clientless bots for several MMOs.

[@TheTraderStan]

This was such a good vid

[@CMDR_John_Crichton]

My man just threw some shade at Sonic 06, holy shit.

[@ViThePrincess]

Why did I never realize the taxi was a bot??

[@mr.cauliflower3536]

I mean, Kaitnieks had a pretty good reason to have that ego. He did do a good job trolling Jagex and a job of teaching people how to code.

[@ClassifiedGrayZoneWarfare]

Damn i remember all of these and aryanrune auto sleeping bags and captcha codes it was a pain in the ass

[@brenoldt]

fatigue operator solving captches , holy fuck. this is amazin

[@Slo151burnouts]

Wait the RuneScape express was a bot?!? 🤯

[@coleknight1699]

I remember usuing scar and typing in the words for people to get their fatigue back down I think I had my account killing blessed spiders and mining iron ore good times lol

[@qvcybe]

i don't mind bots when there harmless like the taxi bots or something like the bot that explain stuff if you messaged them but really the taxi bots would be super handy XD

[@mr.cauliflower3536]

Uhhh, no, the guy who emailed them was a crown witness. And you treat your crown witnesses well.

[@MattGates16]

The runescape express, damn why isnt that still a thing. Probably be a good gp maker

[@Boppin.]

Yoooo that's my favorite sonic 06 cheat too

[@crose5309]

Jeeeze this brings back memories.

[@pentestical8265]

Just for the record, any game crypto can quite easily be broken, even in OSRS and RS3. The legitimate client has to know the real encryption key otherwise it can’t perform the encryption and decryption, so you just need to modify the right part of the real client to log its encryption key.

[@lward53]

A good way to explain why your not entirely right here is this, Imagine you click to move, The client will encrypt this packet with a public key, Once encrypted, it will be forwarded to the server, once the server receives this packet, it can decrypt it with its own "Private key" or "Master key" and verify the command. This key is known only to the server, and is NEVER sent back. Basically the server sends back an "okay, no problem" (Also encrypted) back and the movement is processed for the client.

[@pentestical8265]

@@lward53 yes it will encrypt using the public key from Jagex, but the original value is known in the client and the public key is also known, so all an attacker has to do it hook the encrypt function and modify the values before they are encrypted. It doesn’t matter that they can’t decrypt the encrypted value because they can control what is encrypted and encrypt arbitrary values.

[@lward53]

@@pentestical8265 You seem to be misunderstanding the encryption thing (Partially my fault, based on how i said it, I forgot to mention the entire session is already encrypted, thus impossible* to grab...). This encryption is happening within the client LONG before you even click. The entire process is likely to be encrypted... The Public Key is on the client, not the server. The server likely doesn't even know the clients Public key (Since it has the Private Key/Master Key)... So, It is 'Not Possible' to catch and hook the packets editing them before they're sent, They're encrypted the exact moment the client even begins. The TL:DR is, The Packets are encrypted during the entire session, and they're never given a chance to be modified because of this. Just because its called a "Public key" Doesn't mean its known or readable to you or me.

[@lward53]

@@pentestical8265 Bro, I dont know any other words to explain that even a public key will be encrypted and un readable without its decryption key. If you dont understand i give up

[@NME1012]

Robert Sapolsky will not be happy with Kurzgesagt's portrayal of this philosophical debate.

[@EatTheSkis]

Who the fuck is Uncle Gabe! Who the fuck is Uncle Gabe!

[@gonnalearntoday5649]

I remember having a scythe on an account someone gave me that quit...was a maxed acc but sadly some others had that pw also and it eventually got banned 😅. All i remember was it was knight something and at the time i was new so didnt really know a single thing on a maxxed account 😂.

[@BIacklce]

Using dmca to solve the bot problem is like jagex wanted to get dunked on

[@nobodylovesditto]

"Oh, this message doesn't sound so egotisti- oh. Oh. Oh... nevermind."