Game Development Community

Does World of Warcraft have spyware?

by Paul Fassett · in General Discussion · 10/22/2005 (5:14 pm) · 34 replies

The answer may be yes, read this article then take a quick look at your EULA after downloading a patch.

Quote:
This software is known as the 'warden client'. It is downloaded on the fly from Blizzard's servers, and it runs about every 15 seconds and is designed to verify compliance with a EULA/TOS.

Here is what it does, about every 15 seconds, to about 4.5 million people (500,000 of which are logged on at any given time). The warden dumps all the DLL's using a ToolHelp API call. It reads information from every DLL loaded in the 'world of warcraft' executable process space. No big deal.

The warden then uses the GetWindowTextA function to read the window text in the titlebar of every window. These are windows that are not in the WoW process, but any program running on your computer. Now a Big Deal.

I watched the warden sniff down the email addresses of people I was communicating with on MSN, the URL of several websites that I had open at the time, and the names of all my running programs, including those that were minimized or in the toolbar. These strings can easily contain social security numbers or credit card numbers, for example, if I have Microsoft Excel or Quickbooks open w/ my personal finances at the time.

From all this info Blizzard decides to ban you ... or not. For example, if you have a window titled 'WoW!Inmate' - regardless of what that window really does, it could result in a ban. If you can't believe it, make a dummy window that does nothing at all and name it this, then start WoW. It certainly will result in warden reporting you as a cheater.

I'm thinking about reinstalling it just to test it out. Not so sure it's worth 15 dollars to try it though :)

the full article is here
http://www.rootkit.com/blog.php?newsid=358
Page«First 1 2 Next»
#21
11/07/2006 (9:01 am)
Quote:This isnt about cheating. its about the monitoring of your activities. so they can markey thier other products to you. like ea gives a Shit if you cheat.

they might act like they care, just to slow up the whinners. but honestly they dont give a rats ass.

they just want more money, and marketing is where it is at.

Quote:Sears:

while I dont completely disagree with you.

I will reiterate that big business will use your information for monetary gain.
period.

now you can go ahead and think cheaters have something to do with it.
if you re-read the eula you will note that this is not just during gameplay time.

they are collecting web browser information.
it is for money, they dont give a Rip about cheaters.

Everquest, did not seem to suffer from the great botters.
nor did Asherons call.

Just something to think about... hypothetically of course... lets say that you had a business that put out a product that became the largest selling product of its kind in history... you currently had OVER 8 million subscribers worldwide... each and every one of those subscribers paid you 15$ a month for that subscription... now regardless of overhead costs worldwide thats still over 120 million dollars PER MONTH income... i dont care what kind of overhead you have or how many employees you have.. your making an assload of money off of this product no matter how you look at it...

This brings about a couple things to consider that could make your previous statements both inaccurate and unfair...

1: 120 million per month IS big money... If you had a product producing that kind of revenue wouldnt you do whatever you could think of to make sure it continued and did not decline?

2: botting DOES in fact RUIN online games.. several of note have died out or lost 10s-100s of thousands of players and alot of this can be attributed to cheaters... I've read countless accounts on forums of people who quit lineage 2 because in many areas its unplayable due to botters etc and if you look around cheating is a major factor in people quitting these online games... now where is point #2 going? back to the issue of warden scanning your activities while youre offline... specifically web browsing... why would they need this? maybe because its the only way to reliable track people buying and selling gold/items/characters online? which is largely the purpose of botting in the first place... just something to consider...

3: invasion of privacy... not really... when you click "I accept" all "invasion issues" just became "permission issues" which you granted by clicking it... but all that aside... you are having your activities monitored and your info collected pretty much all the time... whether its the govt., or spyware, or security progs... at least they give you a choice to say "no I dont want that.. Ill find another game to play..." unlike many happenings on the web where you have to get special software just to find the illegal programs that are gathering info on you without you even knowing they are there...

and maybe there is a hidden "marketing agenda" but I do not believe its as conspiratory as you make it out to be... for 2 main reasons...

1: as the article read... there was no mention of any of this collected info being sent to blizzard at all unless you were caught cheating in some form, and if your going to take the time to write the article I think it would have been slammed pretty hard if it was sending the info... and

2: I think 120 million dollar per month continual income is a pretty big motivator to keep "activities that have been proven over and over to be a major contributor to these games dying out" to a minimum. It's called protecting your investment... Now I'm not saying that they are not using your info... maybe they are... but considering the original article cant even say they are sending the collected info if its not neccessary I would lean more towards the "hey lets keep our 120 mil per month income safe, side of it" at least for now.

So the comment of
Quote:they are collecting web browser information.
it is for money, they dont give a Rip about cheaters.
may be a bit unfair... we pay them 120 mil per month ... im pretty sure they care a little about that... and Blizzrd has always been one of the better companies when it comes to caring about there products and yes... the players who play them... maybe not perfect... but certainly better then MANY of the others.

Remember... innocent until proven guilty... and even if its guilty... all that means is..."oops... guess i should have read it after all!" :P lol
#22
11/08/2006 (3:46 pm)
"they are collecting web browser information.
it is for money, they dont give a Rip about cheaters.

Everquest, did not seem to suffer from the great botters.
nor did Asherons call."

Erm...as already stated, EQ and EQ2 have had botters and been affected by it.

As for AC, my brothers still play and constantly use a macro/bot system called ELTank, most people who use AC still use ELTank for leveling, buffbots, player run shops, so on and so forth.

As for the tracking browser info, that kinda makes sense because I have scripted a few bots for DAoC that utilizes it's own weblink to automate my character. They patched the game so my bots no longer work though. -.-

Seeing as mmos all run over the internet, it is a security risk if they don't traks your browser searching too because I know you used to be able to hack DAoC, Everquest, and a few other games without actually logging in. If WoW is the same in any way they need to make sure people aren't messing with their servers from an angle they can't reach.

Just as well on an associated note, isn't there some kinda program that sony was putting on their music cd's that at least used to screw with Warden?
#23
11/09/2006 (6:49 am)
(AFAIK) Warden looks at running processes, and reports you if it finds a hack .exe running. As mentioned above Punkbuster and Valve's VAC have been doing this for a while.

BTW, what private information is Blizzard going to "steal" from you? You give them your name, email, address, credit card number, phone, when you sign up and they need your IP just play the game. They already know everything about you. =)
#24
11/10/2006 (6:08 am)
Quote:BTW, what private information is Blizzard going to "steal" from you? You give them your name, email, address, credit card number, phone, when you sign up and they need your IP just play the game. They already know everything about you. =)

LOL! good point! :P
#25
11/10/2006 (2:52 pm)
..
browsing habits.
online times.

games installed.
cmon, get real the list goes on and on.

and to the botter lunatics.

Honestly this does not affect the game for most players.
sure there are some that care.. maybe alot.


but when I play a game like that I dont give a shit what the other people are doing.
unless they are in my group / party / raid.

who cares about botters?
honestly?
#26
11/10/2006 (8:17 pm)
The people who mine/craft/collect in games don't like botters. Most players. Including Me. And a list of about a hundred other people I know personally. Honestly, it's the majority of players.
Why?

They kill all the monsters, steal all the gold, mine all the mines, chop down all the trees, shear all the sheep, collect all the rarer items in the outer regions, and generally ruin the experience of the online game, undermining the virtual economy. It's a huge turn away for real players, the ones who pay the company to play the game. If they complain, the company is forced to do something about it otherwise they will stop paying. If this is what they are forced to do, it's for a good reason.
Anyway, theres a Privacy Policy on the Blizzard website you should read in addition to the EULA.
#27
11/10/2006 (8:17 pm)
Quote:who cares about botters?
honestly?...

well I do, because although you don't give a $%^& about what others are doing.. I do... because the person that just joined my group who botted their way upto lvl 40/50/75 depending on the game has about as much idea of how to play the game as my cat does and is generally going to die.. get me killed.. get the group killed and make the whole evening totally pointless cause we will all spend our time waiting for bothead to get back from the graveyard every 5 seconds.


Quote:Honestly this does not affect the game for most players.

yes it does, when an area becomes unplayable due to botters, and that area includes the NPC you need to progress in the game, it affects anyone playing the game at that level totally.

Quote:sure there are some that care.. maybe alot.

is it some or a lot, hard to be both and I think you'll find its closer to a lot :)

Regards

Graham
#28
11/11/2006 (11:38 am)
Ok, not to disregard your words.
I just dont think you see my point.

All games worth playing have cheaters.
any game worth playing still has a playerbase.

lots of first person shooter games have all kinds of "exploits" "hacks" and stuff.
why do you think this game is any different.

on this same note, all games worth playing get pirated.
all politicians are power hungry usually corrupt to some degree bastards.

there are some things in life that are a given.

so honestly realistically, this stuff should not affect you.
what you all need to do is learn how to look past these very minor annoyances and find the little niche for you.

that is why you should not care about botters.
but the fact that if you want to play this game you have to allow this other stuff they want to do.

seems so government to say "we got cheaters to deal with, lets install some software to monitor all this other stuff at the same time."

Quote:They kill all the monsters, steal all the gold, mine all the mines, chop down all the trees, shear all the sheep, collect all the rarer items in the outer regions, and generally ruin the experience of the online game, undermining the virtual economy.

while there is no doubt a certian amount of truth to this, this is obviously a little overkill.
as I have played most of the games mentioned and was still able to find plenty of gameplay for myself.

Quote:well I do, because although you don't give a $%^& about what others are doing.. I do... because the person that just joined my group who botted their way upto lvl 40/50/75 depending on the game has about as much idea of how to play the game as my cat does and is generally going to die.. get me killed.. get the group killed and make the whole evening totally pointless cause we will all spend our time waiting for bothead to get back from the graveyard every 5 seconds.

see, this is easily controllable by You in your game.
you dont have to play with this guy, and surely not all night.
this might happen once, but really if it is that bad then you simply disband and go elsewhere.

these mmorpg's are great for having at least a few places a guy can be at any given time.

things you can control are nice, things you cannot are not.

Edit:
what you need to do is go play some MoM before it is contaminated.
now that is a fun game
#29
11/13/2006 (7:39 am)
There is a difference between fps and mmorpgs that your missing. The monthly cost, once you buy a 3d shooter your done paying, the people run the servers and they're small games. So those people can do the policing and kick/ban anyone they want to create the perfect user base. Also in a fps someone comes in cheating you leave go join another server. In an mmorpg your paying everymonth to play there's only a few server selections all of which have botters that get in the way and are there 24/7 (unlike cheaters who go to sleep) so you can't get around them, you can't enjoy the game that your paying every month to play. You no longer have fun and you quit both you and the company lose out.

In a fps the company already made all it has to make (unless expansion pack like EA does on everything) and since you can change to one of the thousands of other servers, some of which are bound ot have active admins to keep banning the cheaters you can keep having fun.

And since you just say just go somewher eelse in the mmorpg you either haven't played many to know 1) that's not always possible and 2) have not played a game that did not punish botters and see that they literally take every spot in the game. You'd have to experience that to see how impossible it is to work around. And I love how people say that's so government ot spy on everyone to stop the few, what are all the people who say that really trying to hide? The only stuff I have to hide is anything that can be used for identity theft and as someone nicely pointed out you already gave all that to blizzard. Don't worry I'm sure blizzard knows that porn is the biggest internet bussiness and some of it is freaky
So no that's not a valid comparison at all.
#30
11/13/2006 (8:23 am)
If you honestly think that you are being logical with your statements..
cmon guy give your head a shake.

I have played eq / eq2 / wow / and some ac.

and while playing these games, there are at least 5 areas I can be at any given time.
each of these five areas has at least a handfull of mobs I could be fighting (as a gross est.)

and to state that each of these 5 areas is chockfull of botters.. is pure insanity.
to think about it, I find it humurous, and would be happy to see it.

I have never seen botter's in any of those games to that degree..

so you would have to provide me with something to show me this that you mentian cause I have never seen it.

I get a mental picture of a large battle zone, with a few hundred players strewn about.
and each one of them is a botter just standing there waiting for the script to trigger, or the mob to spawn.
then, TICK! the bot's go wild and all hit thier triggers and go to thier tasks at the same time.
funny shit.

it is kinda funny in a freaky sorta way.
#31
11/13/2006 (3:31 pm)
Yes Badguy, JS is being completely logical.

Every Post you make shows you've never been close to endgame in any MMORPG. Did you get you class weapon in eq. Did you get your helm and weapon of Dragonkind in eq2. did you aid the alliance/horde in the war effort at the top level in WOW? if so you will know that in each and every one of those cases there is ONE mob in ONE zone that you have to kill to progress... and each of those is camped by two groups.. one group is players patiently waiting their time in groups and in order, and helping each other out, the other is botters set to hammer anything that spawns, getting in the way, and in eq1 training mobs onto those waiting.

Another example.. bot mining.. when the deserts expansion came out in EQ2, there was no way anyone who was not a bot could get close to an ore node for the level 6 ores without at least 3 or 4 botters jumping on it first... this does not make for a good economy.

Your mental picture is quite correct, and its only funny to you because you have never seen it happen.

For me, the funniest site was 10 guides in EQ2 moving through a zone, walking upto each player in a zone and asking them a question... if there was no reply in 10 seconds, they were disconnected and their accounts banned :) now THAT was funny :)

Try playing any of the games you have mentioned to the top levels, not just to level 10 or 20, and THEN come back and carry on explaining how you are right and everyone else is wrong:)

Botting is only explainable and acceptable to those that do it.

Although in a freaky kind of way, I have to thank the botters a little, because they forced me into playing full PVP all the time which I used to hate, because there are no botters on a PVP server.. it is the one place they can't get away with what they love to do.. and that is steal the game away from those who want to play it in person, cause when they try they get killed.

Regards

Graham
#32
11/13/2006 (3:44 pm)
Lol,
Ok then that settles it.
it Must be true.

well see I did not get to level 60 on each one.
so you are correct there.

but being able to play to level 40 and 50 (wow never went as far tho)
I was able to play the game and have next to no trouble with players / botters camping the "One" mob I need. I did do my first epic for eq1.

this still seems pretty far fetched. with regards to your statement's about the class weapon and the dragonkind stuff.

sure there are gonna be some problems when you design a game that plays zillions of player upon One quest mob.

sounds like we found a Reason to bot, because if you have to wait forever for that one mob.
then how long are you going to play that scene? prolly till the job is done.

at any rate, I will concede I dont know.
because I have not played to level 60 and required the single elusive mob that is being heavily botted.

you must then agree and understand that this is very small instance stuff, compared to the big picture.
the big picture being that there is a Large player base.
and over 90% of those players are able to get thier game on.

for the few that require this single mob and item from it. are in a bad way.
this we also agree on.

again while what you are saying could be / is true, it is only for a very small specific case.

and my proof is that these games all have a large enough player base to continue operations.
and that is not about to change cause of some cheaters.

but the bottom line is that this specific software is not stopping anyone.

Quote:For me, the funniest site was 10 guides in EQ2 moving through a zone, walking upto each player in a zone and asking them a question... if there was no reply in 10 seconds, they were disconnected and their accounts banned :) now THAT was funny :)
hehe that would be Awesome to see that.
#33
11/14/2006 (12:49 am)
I've played...way too many mmos from start to end, botted in a few after getting some guys up to max manually. And to note, I play pvp servers almost exclusively.

If you think there aren't botters in pvp servers then you are kinda delusional. One of the largest servers still running in AC is a pvp server and as I said earlier, most people use a system called ElTank that can automate EVERYTHING about AC and can even support complex communication in regards to player transaction and live combat between it and a player.

I will say I have never used a bot to help me in combat in any way, not even for healing others. i rely purely on my own skills to do such things, otherwise it's unfair.

And the whole capping out desired materials seems to me to have more to do with design flaw than the bots because even if the bots were being played by the people instead they would still be overmined and overkilled and many people would still complain about it, just for a different reason.

Developers need to expand and allow more varying endgame, it's only partially the botters fault for the problems you seem to disfavor.

And rarely have I seen people arbitrarily be niceand help one another out endgame unless you are in the same guild as them. That's just the way of actual pvp servers, WoW pvp not included because that is not actual pvp.

At any rate, yes there are botters, yes they do screw the economy, yes they do screw pvp up even, but they are only part of the problem but they are the stressed point due to easily pointing fingers.

I know in WoW I was accused of botting when I thusfar have never used a bot because someone thought my player name looked chinese...he tried asking me stuff and I had no clue what he was saying, then a gm started talking to me, hour later I finally managed to explain it was just the individual being an idiot for lack of a better word.

My point here is that while bots are a problem it is only because they are taking up what few things the developers have given the players to do with their time. More variability would give more room to avoid botters and actually have fun.

That's my opinion at least.
#34
11/17/2006 (6:56 am)
I don't think that is the only reason, hate to keep pointing at lineage 2 but it's a good example, I bought that game as soon as it came out, and there were botters on day 1 they were mostly Koreans who were part of those botting shops that make all their money selling the gold/items they aquire botting. So in order to get a good head start they start botting right away to get the first gold for sale with new games. And that has nothing to do with lack of content.
But what's interesting is how does botting and having a program do everything in a game help you enjoy it more if you ran out of things to do? that would seem to make it a lot more boring to me.
Page«First 1 2 Next»