Azeroth Security Advisor: WoW is watching you, part 1

Every week, computer security expert Jon Eldridge is your Azeroth Security Advisor. He will delve into the darkest reaches of computer security rumor and bring the facts back home even if they're wriggling at the end of a pike. His goal is to provide useful information to gamers who don't think about security much and flame fodder for those self appointed experts who need to rationalize the cost of their expensive certifications. Like any good security force he's a mercenary at heart and is happy to take subject requests from the user community that he serves. So feel free to leave a comment below or just sit back and enjoy the show.
If you play World of Warcraft you agreed to the Terms of Use Agreement and End User License Agreement even if you don't know it. If you're like most gamers you "agreed" with all the forethought and consideration of a lab rat agreeing to run a maze in exchange for a yummy pellet of rat chow. Scurry, scurry, click, click... yum! Let's face it, when you're just two clicks away from playing the hottest MMORPG on the planet those screens usually go by just as fast as they appear. But what else besides deep fat fried MMO goodness is contained within the WoW client you're running?
One of things you agreed to while merrily clearing those pesky EULA and Terms of Use screens after every patch is that Blizzard "MAY" monitor your PC's RAM and CPU processes for "unauthorized" 3rd party programs that by Blizzard's "sole determination" may or may not be deemed naughty. Naughty in this case includes but is not limited to teleporting, data mining, exploiting bugs, facilitating bots and generally doing an end run around the game mechanics for fun and profit. In reality the WoW.exe DOES monitor your system, silently, thoroughly, and every 15 seconds.
Some of you know about the hype and controversy that occurred in 2005 around the claim that Blizzard had bundled spyware within the WoW client. I didn't until a few days ago when I decided to investigate the rumor. After digesting hundreds of chat/flame posts, reading up on Blizzard's legal activity and even managing to uncover a fact or two I'm here to uphold the three pillars of online journalism, stimulate, educate, and aggravate.
Blizzard keeps track of the hardware and software running on your PC in three ways that I could find. The first is a periodic system survey. You may occasionally notice a spooky little message like "Sending non-identifiable personal information" during the handshake process while logging in. Blizzard assures the user community that this is a hardware survey that helps their development team optimize patches and "future games". The survey logs information about your CPU, RAM, OS, video, audio, HD/CD/DVD and internet connection.
Some users consider this invasive and others wish they had been better informed as the message itself is less than confidence inspiring. Should you be concerned about the system survey? For most players including myself I would have to say no. Blizzard has done a fantastic job getting WoW to run on older systems and if this is the mechanism they use to ensure that fact more power to them. It sure beats manual surveys. I would love to see Blizzard publish the results of this 10 million plus system survey broken down by each category. Who wouldn't want to know how their rig measures up to the competition like Valve does and use that data to rationalize more hardware upgrades?
The second item Blizzard employs to safeguard your online experience by sniffing around on your system is the Launcher.exe program. The Launcher is the default start mechanism for World of Warcraft. According to Blizzard the Launcher distributes news, protects against viruses, and upholds the Terms of Use by scanning for cheat programs in use prior to logging in.
Overall the Launcher is a benefit to the user community. For folks who do not frequent the World of Warcraft website the news supplied via the Launcher can provide critical information about game play, events, and easy access to technical support. The courtesy virus scan is certainly a bonus. But potentially far more valuable than anything else Blizzard provides is the pre login cheating scan that attempts to prevent an unnecessary ban of your account. If the Launcher decides that you are running a cheat program it will notify you and give you a chance to disable the program prior to logging into the game. Once logged in any cheat software detected on your computer puts you at risk of getting suspended or banned from the game permanently.
Blizzard recognizes that not everybody has full control over the computer they play on or is fully aware of all the programs running on their computer so they built in a safeguard. "We've often found that players whose account information had been compromised by a Trojan program or whose World of Warcraft accounts were banned for using a third-party cheat program while playing were unaware that these programs existed on the computer they used to play the game." Blizzard has banned thousands of players from WoW for various reasons since launch. Any attempt to minimize the collateral damage caused by the constant cat and mouse security game going on behind the scenes should be applauded. Use of the launcher is not compulsory though and you can access the main login screen directly via WoW.exe located in the World of Warcraft program folder.
So far so good but Blizzard didn't get this far without a (m)ace up their sleeve. Tune in next week for all the trauma and drama caused by the discovery of Blizzard's ultimate boss mob... the Warden. Cue thunderclap and scary music.
Filed under: Analysis / Opinion, Blizzard, Rumors, Account Security, Azeroth Security Advisor






Reader Comments (Page 1 of 2)
deviationer May 13th 2008 9:08AM
sooooo how many times is this going to be covered?
if you don't like it, don't play.
LiQiuD May 13th 2008 9:29AM
If you already knew, don't read the article.
deviationer May 13th 2008 1:30PM
http://www.wowinsider.com/2007/11/15/blizzards-new-warden-and-our-privacy/
http://www.wowinsider.com/2005/11/27/blizzard-player-i-am-watching-you/
Zeplar May 13th 2008 9:17AM
I trust Blizzard with it, since they have so much to lose if they're caught doing something naughty, but it's disturbing that any game or program could secretly monitor my computer, legally, and that my spyware programs wouldn't pick it up. I wonder how Blizzard stops anti-spyware from deleting their launcher?
bbrasky May 13th 2008 9:56AM
They don't need to. It would have to be added to an anti-spyware program's database in order for the program to know to remove it. The folks that make (quality) anti-malware software do their research before adding a detection rule to their software's database, so that they're not just blindly removing harmless applications.
This is why it's so important to keep your anti-malware and antivirus software up to date at all times - when new malware/viruses are added, you need to update your software in order for it to be able to detect and repair the problem.
Liquid May 14th 2008 7:23AM
Do you ever thing that your being monitored while working on your work's network? When you start work each day, and fire up your computer at your desk. Your place of business is already watching what your doing. By running traffic monitoring software, setting up routers to log when people go in and out of the network to the outside world, what web sites you visit, how long you were on the internet. They do it all legally as well not only to make sure you're a productive worker, but to make sure that their network(s) are safe from internet dangers such as viruses, etc... Blizzard is just doing the same thing to make sure that their network(s) are safe from people who feel that it's ok to run 3rd party programs (not going to mention any but most would know of a couple) that could potentially harm the game, and the network. They do it legally by adding that into the terms of service, and the EULA. Alot of people think that it's a pretty crappy deal that they are being watched while playing a game, but next time you start surfing the network at work just remember there is some tech or a server out there that is logging all your activities across the network. As far as the anti-virus, and spy-ware is concerned if you use McAfee you add that to the list of programs that you deem ok, and are safe to run after it pop's up that little box and goes "Are you sure you want to run this game???". After that McAfee doesn't even bother to look at that program anymore, because you told it that it was ok to run.
Tenchan May 13th 2008 9:17AM
I didn't know the launcher runs a virus scan, and I also wasn't sure what exactly the personal information message means. Thanks for the info.
Dan May 14th 2008 1:44AM
The launcher also tries to detect any keyloggers that are running AFAIK, but I don't know if it's any good at it.
Buckshot May 13th 2008 9:30AM
Question, how many people here actually use the launcher? I did at first, but it seemed excessive to two-step in the game.
Nati May 13th 2008 9:47AM
I do. Why not? With all the mouse clicks in a WoW session, I don't think one extra will hurt me~
meringue May 13th 2008 9:47AM
I started when they began to use the launcher to pre-download patch data.
RanWitScissorz May 13th 2008 10:07AM
Same, it also has the portal to the test realm on there.
inexodus May 13th 2008 10:31AM
I started using the launcher to preload patches but I agree that I never actually want to see it. You can launch the game through Launcher.exe, and once you're at the actual logon screen there's a checkbox right next to the "remember username" box which will let you disable showing the launcher (I think it says "Show Launcher" or something). It still runs and does its thing, but you don't see it anymore.
dotorion May 13th 2008 9:49AM
I'd rather have Blizz monitor my PC than having some idiots that screw around with WoW ruin my gaming experience, tbh.
Liel May 13th 2008 10:04AM
Uh this article is pretty much devoid of anything technical? It says he monitored something but fails to mention "how" he monitored it, but just linked to existing posts from other people? Just curious.
Eternalpayn May 13th 2008 4:40PM
If WoW is like any other software, it checks your processes for cheat engines.
Harmun May 13th 2008 10:06AM
"If you're like most gamers you "agreed" with all the forethought and consideration of a lab rat agreeing to run a maze in exchange for a yummy pellet of rat chow. Scurry, scurry, click, click... yum!"
I don't like the tone of this Jon- it's not that players act like lab rats and click on the agree button because they always have, it's because your ridiculous laws in America allow companies to deny a paying customer their software if they refuse.
I agree with "forethought and consideration" every single time, and detest that I'm being forced to "sign" contracts to play. In fact, that's one of the justifications I use when I have to defend my rampant video game piracy to friends.
Liel May 13th 2008 10:13AM
Using that to justify piracy just reeks of stupidity instead just be honest and say you steal games because you can and nothing beats free. If you detest it you stay away from it, thats like saying "Ford uses slave labor so I am stealing cars instead of buying them". Stealing the game only reinforces the idea that the game is worth something to you except the price.
But wrapping it in "fight the power" ideology sounds better I guess.
Harmun May 13th 2008 10:23AM
What's ridiculous is forcing someone to sign away their rights after paying for a product.
Frostybolts May 13th 2008 11:57AM
Well, I don't think EULAs have ever held up in court, for what it's worth
I agree with you though, they're fucking stupid