The Lawbringer: Privacy talk, rockets, and auction houses

Hello, friends. While I brainstorm for this week's Lawbringer, I am frantically packing for a little weekend shindig and will need to look my best. Suits and ties, how I've missed you.
When I asked for Lawbringer questions, you guys and girls delivered. I talk about how much I love questions all the time, but it's true. The more questions I get, the more diverse topics get covered. This week, we've got a great question about privacy and the armory, as well as an automation question relating to the terms of service.
Armory and privacy
Our first email comes from Russ, who wants to know about the armory and privacy. I've truncated his email a bit, but be sure that I read everything!
Hello Mr. McCurley,
Thank you for your article in the recent Lawbringer column.
Your timing was perfect for a discussion about player's and their privacy. I've had a question about privacy that was tumbling around in my head after a visit to the new WoW Community site on 12/1/2010.
The newly designed Armory page has the regular items of the current Armory page plus, extra info is now going to be accessible.
All of your points made give us reason for discussion and examination of the topic of privacy in our recreational activity, and living with the internet today.
"What gives Blizzard the right to display our in game activities?"
We are paying Blizzard to have the privilege to play their MMO, and their bills associated with the maintenance of the services they provide.
I understand that a lot of game information about what players are doing in their playtime is analyzed by Blizzard, and is used to help make World of Warcraft a better MMO. Product analysis, it's good for business. It is mentioned being done in the Terms of Service, somewhere, I read it ...... once.
But why is what we do in the game, why is that information, allowed to put out on the internet?
The amusement park analogy seems the best fit to paint a picture for the question.
I go Disney World and pay to get in and get to do all there is to do. If you are in the park and we meet we can talk about what we've seen where we ate, what rides we've waited for, etc. etc. etc.. Then maybe even hang out and visit a few attractions together.
Would you go into Disney World, if, at the gates and in the park, were monitors that posted your name, and the name of each person in the park, and kept a real time listing of what you were doing during your visit? That listed what you ate (most beverage consumed), what rides you rode (Dungeons), when you rode them (Day Completed), and who was in your group ( Guild & Roster ), and more. For everyone in the park, and outside the park to see.
If I am in-game and someone on my server walks up to my character, they can compare achievements (which is a feature that invades privacy too), but they are in the game paying to be there and can talk with me about what I've done if they have a question, if I decide to talk to them.
Personally, I would like to be able to turn of the Armory Display of my WoW Account Characters. It currently is not an option.
I'd like to hear back on the "legality" of our game play being put on the internet, in relation to what is currently being done by Blizzard.
Thank you very much for your time and any insight you can provide.
Sincerely,
Russ
Thanks for the email, Russ. There are a surprising number of games these days that display achievements in a public fashion. Services like Xbox Live show your Gamerscore and achievements, and others even display what you're playing, like Steam. Most of these services or games have ways around displaying this information, while the WoW armory does not have a way to stop the flow of information.
Here's the big wrench that I see being thrown in the privacy argument over the armory: While the armory data is public, the associated real-life information is not. You can know my user name, Battle.net ID, or the server that I play on, but there is no searchable way to figure out which characters are mine without my telling you. You cannot type "Mat McCurley" into the armory and get a list of all of my characters.
Blizzard owns the data that it collects from the game and can do what it wants with it. According to the Blizzard privacy policy, your personal information is only used internally for demographic purposes, sending you updates and emails, and to add third-party information to those updates.
The Disneyland comparison does not really work in this case because Blizzard isn't displaying your real name or personal information on the armory. Your character's personal information is being displayed. Now, we have to ask what rights you have regarding your avatars. Your first step is to read the venerable Raph Koster's manifesto from 2000 on avatar rights to get a feel for where avatar rights as a concept materialized. Do avatars have rights? Should we start expecting a modicum of avatar rights as more and more business is transacted in a virtual world? Actually, that's a Lawbringer in and of itself ...
According to the terms of use, you don't own anything about your characters, since you're paying for a license to use a service and have no ownership rights.
The whole reason the "real name" Real ID issue was attacked so vehemently by the community was because of the needed disconnect between the player's characters and their real names. Without personal knowledge of a person, it is not easy to figure out what characters they play, unless they do not block out their character names from screenshots or they outright tell you who they are.
All of the privacy arguments break down, however, when law enforcement is involved. Blizzard has made it clear that it will provide account information and character data when served with a subpoena to do so. Blizzard has even been responsible for catching criminals by finding out where they were logging into the game from. There are provisions in the terms of use that stipulate that Blizzard may provide this personal information to law enforcement.
As for the armory, a player's privacy comes down to what type of privacy you are upset over. Your personal privacy, including your name, Battle.net ID, credit card information, and all associated account information, are all protected and do not show up anywhere on the armory. However, your character data, much like your items, gold, inventory, and everything in between, are all part of the service that you pay to play. While it might be a nice gesture to allow the ability to turn off the Armory feed, the things your character does in game might not actually fall under any kind of personal privacy because, in terms of being in-game, you're in the game's definition of public.

Mat,There are two types of auction house automation that we can examine. First, there's the automation of gathering price data and addons that suggest prices for you to use to sell and undercut your wares on the open market. Second, there is the automation of placing items on the auction house for you at preplanned costs.
This is kind of a side question from the gold selling, and botting issues that have come up lately.
If it's against the Terms of Service to run a program to automate herb gathering, mining or such (archeology being the most recent offender) -- and also against the TOS to sell gold -- then why is it acceptable to automate auction house processes?
That just bakes my noodle. I would imagine that automated auction house programs would impact the community as much, if not more, automating those other actions in game.
So, in short, what sets auction house automation apart from those other aspects of the game which will get folks the ban hammer?
Thanks,
Don
The second type of auctioneering has been removed from the game and from addons completely. You can only make multiple auctions at a time with the in-game stacks/auctions tool and its associated addon mechanics. Without the help of a third-party program to click buttons for you, putting up auctions or bidding on auctions is impossible to do. The Warden is also most likely watching for automation programs, and those types of programs are already against the terms of service. Bots get banned, and that's basically the only way to fully automate that procedure.
The first type of auctioneering, however, is just simple math. I say "simple" because the addon is acting as a calculator, looking at numbers on the auction house and, based on a set of parameters, giving you number recommendations. That kind of automation isn't doing anything physical for you; rather, doing the math is an extension of the information already available. At least that is how I see the delineation. I could do these math problems with the in-game data if I wanted to with or without an addon, but I couldn't automate my auctions by myself without some external help.
Rocketman
Hi there Lawbringer,
I have kind of an oddball question. I've recently been noticing a huge increase of spamming in trade chat with people wanting to sell the X-53 Touring Rocket. Now since this is the recruit-a-friend gift mount, it's obvious they're trying to sell a recruit-a-friend. Is this against the ToS? I'd imagine it is since in effect their trading in game gold for a virtual item. It almost to me seems to all under the selling of an account, but I'll fully admit I have no clue.
Thank you,
ParadoxF
I don't believe that we've had an official word from Blizzard about the Recruit-A-Friend rocket specifically, but this whole transaction most likely falls under selling game time for gold. When you pay for two months of service to earn the X-53 rocket, you are granted a free month of service in addition to the rocket, which is most likely where the issue comes up. However, this transaction looks less like the cut-and-dry, real money transactions that occur in gold selling. Personally, I would love to see Blizzard comment on this if it hasn't already.
The real concern, however, is where all of these game time cards and copies of the game are coming from. I would be cautious of purchasing one of these rockets from the trade chat because the game time cards could very well be stolen from a game shop, which is not cool!
See you all next week.
Filed under: Analysis / Opinion, The Lawbringer






Reader Comments (Page 1 of 1)
Drakkenfyre Apr 1st 2011 7:33PM
Some of the rockets are flat-out scams. I have seen the same level 1 selling them over and over.
Names Apr 1st 2011 7:32PM
I believe this blue post answers the question about the recruit a friend mount, although the discussion was originally about the Collectors Edition key/pet: http://us.battle.net/wow/en/forum/topic/2325683599?page=2#22
Keith Apr 1st 2011 7:33PM
The rocket spammers are actually laundering stolen credit cards.
You give them gold. They make an account with a stolen CC. They then sell the gold and have cash.
Often, what happens is the stolen CC gets a chargeback, the RAF account gets banned/cancelled, and you get your rocket mount removed and your account retroactively charged for the free gametime you got for the referral.
Also, my iPhone tried to autocorrect gametime to handguns. This feels appropriate.
Keith Apr 1st 2011 7:38PM
THAT SAID, if a friend of yours thinks signing up for a new wow account for 3 months and incurring all of the related costs, in return for you giving them 10,000 gold is a good idea, I don't actually see any legal or liscense issue there. The only transactions actually taking place are a purchase of a new account from blizzard, directly, by an individual, and a one way transfer of gold from you to an individual. There's no actual exchange of gold for currency - or gor that matter for anything other than having them type your email address in a form.
It might violate the spirit of the rule, but it's basically impossible for it to violate the letter.
Just don't deal with the guys in /2.
AltairAntares Apr 2nd 2011 6:42PM
What keith said. I was curious awhile back and asked a gm. He said that it wasn't technically illegal, but it was highly risky, and I was on my own for any problems that occurred to me afterwards.
Aley Apr 1st 2011 7:49PM
With regards to Don's question, it's not the action which matters. It's the way it's done. Basically, nearly everything you can do using either the default UI or addons is allowed, anything which can't be done that way isn't. Blizzard's recent AH changes merely made the sell / buy action require a hardware event, therefore practically disabling any easy ways of AH botting. Any automatic AH buying / selling code now requires either an external program to simulate key presses, or a program to inject your 'old' AH addon as trusted code, thereby bypassing the hardware event restriction. Both methods are theoretically detectably by Warden, and therefore less popular.
To sum it up, using 'any unauthorized third-party software designed to modify the World of Warcraft experience' would be illegal, while anything done ingame would be pretty much legal, within limits of common sense. (No exploiting, no abuse of the economy etc etc.)
Lathoria Apr 1st 2011 8:06PM
Buying the RaF features with gold is very much against the ToS and will result in loss of the mount, and possibly a ban.
http://us.battle.net/wow/en/forum/topic/1765534131#10
Twill Apr 1st 2011 8:11PM
If someone stole game time codes, its useless. That cashier has to activate it or else it won't work.
Herman Apr 1st 2011 11:21PM
unless its the cashier doing the stealing.
Ardonis Apr 1st 2011 8:24PM
The way these scumbags state it in trade, you'd think you're just getting a rocket mount, and that wouldn't be a problem with the ToU. Blizzard's stance is pretty clear: in-game currency can buy in-game things within the ToU, but not out of game things. If you were just getting the rocket like a spectral tiger, it wouldn't be a problem. But what's actually happening is you're buying an account.
As Keith pointed out, there's a ton of credit card fraud involved in the RMT industry, so I think that's a pretty likely outcome for most of these people.
Oh, and Mat: didn't you know you can buy game time from the blizzard store? Same with digital copies of the game. That's probably where most of these accounts and gamecards are coming from, though I don't doubt there's probably a ton of theft of games that go on in bigger retail stores.
Scott Clark Apr 1st 2011 8:27PM
Regarding a comparison of your privacy relationship with Blizzard and with Disney:
Blizzard is, at its core, an IT company. When signing up to play WoW, you give Blizzard your name, a valid email address and, perhaps, a credit card number. If I am willing to pay with game cards, I can narrow that down to a valid email address generated only for the purpose of setting up an account. Blizzard have a clear privacy policy and there are laws to prevent them from doing anything with your credit card that you do not authorize. My identity is sufficiently abstracted from my characters' activities. As one of Blizzard's users, I have (hopefully) made an informed decision about the company and the degree to which I am willing to trust them with my privacy and, in the case of an infocalypse, the potential for damage is relatively minor.
Disney is, at its core, a media company. When watching a Pixar movie or reading a Marvel comic, the flow of information is strictly one-way. There is no policy for how they will handle my privacy as it simply isn't relevant.
Until I go to their theme park.
And they take my fingerprints.
I have no existing privacy relationship with Disney. I am not given information about how my fingerprints are being stored, or transmitted, or used. Are my activities in the park being sold to advertisers, either as individual or aggregate records? If Disney is sold, who determines what is done with my data? If there is a breach of Disney's servers, how secure is my identity?
Many forms of ID can be revoked or replaced. Credit cards, SSNs, phone numbers can be changed if they escape into the wild. Fingerprints cannot be revoked. What happens if yours get loose? Is this a relationship you are willing to enter on the grounds of liking someone's movies?
You chose to do business with an information company and, before you released any data to them, were shown an explicit policy on how they would handle your information. If you're nervous about what they might do with that data, just remember: at least you're not dealing with Disney.
Mycroft Apr 1st 2011 8:30PM
To be more clear on the last item, it's definitely not a matter of selling an in-game item for in-game gold. The rocket is BoP, so in order to get it, the 'buyer' would have to generate an out-of-game recruit a friend code and send to someone else.
If the rocket were merely boe, then you could sell them in trade chat or on the AH, no problem.
zainwolf Apr 1st 2011 9:15PM
I also think the touring rocket scam is merely a cheap ploy to identify accounts that presumably have gold in order to target them for hacking.
evemartyn Apr 1st 2011 9:37PM
I never really thought about it that way before, as an invasion of privacy, but I have searched for high level prot pally armory links before so I can see what enchants and gems they use to make my game play better. it is something to think about.....
Sally Bowls Apr 1st 2011 10:13PM
1) re "figure out which characters are mine without my telling you" In an effort to make RealId even more annoying, didn't it default to showing your realid "friends" the toon name when you sign on - hey that banker alt is you?
2) Your AH automation information really only applies to people using the WoW client to post. You can buy/sell up to 200 items via the web. And you can do it on a [virtual] machine that never has had WoW on it so it obviously does not have Warden. I have no idea but my guess is browser tasks could be automated if you really wanted to. Although 200 is a very, very small number of items to trade in a day so perhaps nobody has bothered to do so.
A grey area is something like TUJ.
A third part takes information from a WoW web site and allows someone to see all the auctions that toon X has on realm Y.
http://consortium.stormspire.net/showthread.php?2059-Trouble-with-Guild-over-TUJ
Nopunin10did Apr 2nd 2011 10:34AM
1)
Don't be a Real ID Friend with anyone for whom this would be an issue. If you don't want someone to know all your characters, don't make them your Real ID friend.
Sally Bowls Apr 4th 2011 11:18AM
The latest post
http://wow.joystiq.com/2011/04/04/gold-capped-how-much-should-you-undercut/
even ends with the quote
"but try not to make realID friends with other auctioneers!"
Since you don't really know if they are auctioneers or competent with the AH until after you add them, the best advice is to not realid anyone.
Koleckai Apr 1st 2011 10:15PM
In the answer of auction house automation, you forgot to mention the automation provided through the web service and mobile app. You do not need to be in the game to purchase items, post auctions or receive gold through these services. Granted they cost $3.99 a month or something like that. As a web developer, I don't see it difficult to automate this process through the web interface. Write a bot that loads the pages and parses them. After it gets the information then submit the appropriate forms to process transactions. Same thing is done by sites that pull character information for various purposes.