world of warcraft contains spyware. Who knew?

daniel49

Diamond Member
Jan 8, 2005
4,814
0
71
World of Warcraft == Spyware
Category: Toys, Tools, Tech

Are you one of the four million players of the popular online game World of Warcraft?

Did you know that it is watching you?

According to Greg Hoglund, co-author of ?Exploiting Software, How to Break Code,? this hidden program [installed by WoW] opens every process on a gamerâ??s computer, from email programs to privacy managers, and sniffs email addresses, website URLs open at the time of the scan, and the names of all running programsâ??whether or not those programs, emails, or websites could conceivably have anything to do with hacking.

Hoglund disassembled WoW?s spyware component, called ?The Warden?, and

? watched the warden sniff down the email addresses of people I was communicating with on MSN, the URL of several websites that I had open at the time, and the names of all my running programs, including those that were minimized or in the toolbar. These strings can easily contain social security numbers or credit card numbers, for example, if I have Microsoft Excel or Quickbooks open w/ my personal finances at the time.

Hoglund has made a utility program he calls ?The Governor? available for free download that lets you log the behavior of The Warden.
http://www.rootkit.com/newsread_print.php?newsid=371

Blizzard Entertainment, the makers of the game, does not deny that WoW incorporates this code. Their defense? It?s not illegal.
http://forums.worldofwarcraft.com/threa...blizzard-archive&t=33&p=1&tmp=1#post33

Whether it?s illegal or not, Blizzard should be ashamed of themselves. Lots of other publishers (EA and Valve jump to mind) manage to prevent cheating in their games without resorting to such gross and indiscriminate violations of privacy. There?s no reason why they can?t do the same for WoW.
 
Jun 4, 2005
19,723
1
0
I'm not surprised if this is true. I'm sure they covered their asses somewhere in the terms and agreement and whatever.
 

Vortex22

Diamond Member
Sep 6, 2000
4,976
1
81
This has been discussed forever. It is a program that scans the current processes running, checks their names against a list of known hack programs, and sends a simple YES/NO back to the WoW servers. It doesn't steal any personal information at all. It is mentioned in the TOS, and you agree to use it when you click 'Ok' after installing the game, and after every new patch. It's not spyware.

Even if it did steal your CC infomation (which it doesn't), it's not like Blizzard doesn't have that already if you're paying for a WoW account. Heh.
 

CKent

Diamond Member
Aug 17, 2005
9,020
0
0
Hello and welcome to the internet! We hope you enjoy your stay.
 

smack Down

Diamond Member
Sep 10, 2005
4,507
0
0
Originally posted by: Vortex22
This has been discussed forever. It is a program that scans the current processes running, checks their names against a list of known hack programs, and sends a simple YES/NO back to the WoW servers. It doesn't steal any personal information at all. It is mentioned in the TOS, and you agree to use it when you click 'Ok' after installing the game, and after every new patch. It's not spyware.

Even if it did steal your CC infomation (which it doesn't), it's not like Blizzard doesn't have that already if you're paying for a WoW account. Heh.

If it just checks the process name what is stopping a user from rename hack.exe to be say winamp or any of the million of other free programs.
 

pontifex

Lifer
Dec 5, 2000
43,804
46
91
Originally posted by: daniel49
World of Warcraft == Spyware
Category: Toys, Tools, Tech

Are you one of the four million players of the popular online game World of Warcraft?

Did you know that it is watching you?

According to Greg Hoglund, co-author of ?Exploiting Software, How to Break Code,? this hidden program [installed by WoW] opens every process on a gamerâ??s computer, from email programs to privacy managers, and sniffs email addresses, website URLs open at the time of the scan, and the names of all running programsâ??whether or not those programs, emails, or websites could conceivably have anything to do with hacking.

Hoglund disassembled WoW?s spyware component, called ?The Warden?, and

? watched the warden sniff down the email addresses of people I was communicating with on MSN, the URL of several websites that I had open at the time, and the names of all my running programs, including those that were minimized or in the toolbar. These strings can easily contain social security numbers or credit card numbers, for example, if I have Microsoft Excel or Quickbooks open w/ my personal finances at the time.

Hoglund has made a utility program he calls ?The Governor? available for free download that lets you log the behavior of The Warden.
http://www.rootkit.com/newsread_print.php?newsid=371

Blizzard Entertainment, the makers of the game, does not deny that WoW incorporates this code. Their defense? It?s not illegal.
http://forums.worldofwarcraft.com/threa...blizzard-archive&t=33&p=1&tmp=1#post33

Whether it?s illegal or not, Blizzard should be ashamed of themselves. Lots of other publishers (EA and Valve jump to mind) manage to prevent cheating in their games without resorting to such gross and indiscriminate violations of privacy. There?s no reason why they can?t do the same for WoW.


apparently a lot of people knew. its only been on the official wow forums for the past 4 or 5 months
 

CKent

Diamond Member
Aug 17, 2005
9,020
0
0
Originally posted by: pontifex
Originally posted by: daniel49
World of Warcraft == Spyware
Category: Toys, Tools, Tech

Are you one of the four million players of the popular online game World of Warcraft?

Did you know that it is watching you?

According to Greg Hoglund, co-author of ?Exploiting Software, How to Break Code,? this hidden program [installed by WoW] opens every process on a gamerâ??s computer, from email programs to privacy managers, and sniffs email addresses, website URLs open at the time of the scan, and the names of all running programsâ??whether or not those programs, emails, or websites could conceivably have anything to do with hacking.

Hoglund disassembled WoW?s spyware component, called ?The Warden?, and

? watched the warden sniff down the email addresses of people I was communicating with on MSN, the URL of several websites that I had open at the time, and the names of all my running programs, including those that were minimized or in the toolbar. These strings can easily contain social security numbers or credit card numbers, for example, if I have Microsoft Excel or Quickbooks open w/ my personal finances at the time.

Hoglund has made a utility program he calls ?The Governor? available for free download that lets you log the behavior of The Warden.
http://www.rootkit.com/newsread_print.php?newsid=371

Blizzard Entertainment, the makers of the game, does not deny that WoW incorporates this code. Their defense? It?s not illegal.
http://forums.worldofwarcraft.com/threa...blizzard-archive&t=33&p=1&tmp=1#post33

Whether it?s illegal or not, Blizzard should be ashamed of themselves. Lots of other publishers (EA and Valve jump to mind) manage to prevent cheating in their games without resorting to such gross and indiscriminate violations of privacy. There?s no reason why they can?t do the same for WoW.


apparently a lot of people knew. its only been on the official wow forums for the past 4 or 5 months

Not to mention a post and a few subsequent reposts here, and, if memory serves, in off topic as well.
 

KentState

Diamond Member
Oct 19, 2001
8,397
393
126
I don't know if you can really call it "spyware" since it does a local check for certain strings and then reports back to the server if it finds that particular string. I would only have a problem if the software actually gathered and collected the actual information and transfered it over the internet.