Blizzard Secretly Watermarking users

[Olikan]

There's indication that [FONT=inherit !important][FONT=inherit !important]Blizzard[/FONT][/FONT] has been watermarking screenshots captured with World of Warcraft's in-game client application since at least 2008. There's also indication that Digimarc is the company behind the client's watermarking tech. According to reports, these custom marks include user IDs, the time the in-game image was captured, and the IP address of the local World of Warcraft server. Why? Possibly to track down users that are violating Blizzard's Terms of Service like hacking [FONT=inherit !important][FONT=inherit !important]game[/FONT][/FONT] or running a private server.
"A few days ago I noticed some weird artifacts covering the screenshots I captured using the WoW game client application. I sharpened the images and found a repeating pattern secretly embedded inside. I posted this information on the OwnedCore forum and after an amazing three-day cooperation marathon, we managed to prove that all our WoW [FONT=inherit !important][FONT=inherit !important]screenshots[/FONT][/FONT], since at least 2008, contain a custom watermark," reports Sendatsu.
As seen here, there's a list of steps to take for those who want to be able to see the watermark on their screenshots, including finding the ideal spot that doesn't consist of a lot of textures (like snow). Users must also type /console SET screenshotQuality "9", take the shot, and then open the image in an external editor. After that, users must sharpen the image until the watermark appears – it will be a pattern of information, resembling a bar code or QR code.
"Apparently, each character has a different set of these repeatable patterns, which contain account and realm information, and it looks like if they are scanned by software that recognizes them, they can reveal our character's account name/id, the time of the screenshot and the the full information of the realm, including its IP address (think "private servers")," the post reads.
The post also points out that Blizzard's ToS allows it to communicate information about our hard drive, CPU, operating systems, IP addresses, running tasks, account name and current time and date. What it doesn't make clear is that[FONT=inherit !important][FONT=inherit !important]World [/FONT][/FONT][FONT=inherit !important][FONT=inherit !important]of[/FONT] [FONT=inherit !important]Warcraft[/FONT][/FONT] can embed some of that data into every screen captured with the in-game client. Thus, the screens fail to protect users from hackers that could use the IP address to link characters to accounts.
"The contained information can be easily recovered and decrypted by hackers, which compromises the privacy and security of our accounts! For example, someone could use this to identify which account holds which characters and perhaps stalk and annoy its user, or help perpetrators choose their phishing victims with a more targeted approach," the post states.
So far Blizzard hasn't responded to the claims, so stay tuned. To read the full lengthy post – and to see the watermarked shots – head here.

http://www.tomshardware.com/news/watermark-screenshots-World-of-warcraft-digimarc-MMORPG,17522.html

no, it's not a jpg compression problem...there is a pattern

for alot more info here: http://www.ownedcore.com/forums/wor...l/375573-looking-inside-your-screenshots.html

 

[power_hour]

Meh. Unless your buying gold or doing something stupid its a bit of a non issue. Of course playing an online game and expecting to be anonymous is a bit silly. Everything you do online is tracked and archived. EVERYTHING.

 

[SunnyD]

And ya'll wondered how a sold account gets banned so quickly.

 

[Doom 4d]

This was exposed months ago.

 

[Pr0d1gy]

I thought we expressly agreed to this in the EULA, don't you sell your soul for everything online these days? Seriously though, I hope this doesn't become a huge problem for every WoW player in the world because we would all be screwed...lmao

 

[shortylickens]

I hope they all quit and play different games instead.

 

[biostud]

I hope they all quit and play different games instead.

Do you REALLY want that?

At least they're contained in WoW so you can avoid them

 

[Dankk]

Old news.

 

[you2]

Is it legal for a third party to insert pii (ip et all) information into the jpeg without knowledge of the user ?

 

[sygyzy]

I didn't read the linked article but I am curious if they ever developed a reader that could parse the codes. If not, I think it's misleading to state what information (they think) Blizzard is storing.

Edit: I went ahead and read the link and wow, they did manage to decode it and write java and c++ tools. I am super impressed.

 

[Dankk]

Is it legal for a third party to insert pii (ip et all) information into the jpeg without knowledge of the user ?

I'd assume that every WoW player agrees to this in the TOS when they subscribe to the game.

 

[Newbian]

I'd assume that every WoW player agrees to this in the TOS when they subscribe to the game.

That's why you read them or you will be made into a human centipede.

 

[Anteaus]

Is it legal for a third party to insert pii (ip et all) information into the jpeg without knowledge of the user ?

What third party? These JPGs are being produced directly by the client. Third party would be if you took jpgs and processed them through some sort of application which then imbedded something without your knowing. This is first party.

I personally have no problem with the watermarks. All it contains is the account name, timestamp and IP address of server. That's hardly world shattering.

http://www.ownedcore.com/forums/wor...l/375573-looking-inside-your-screenshots.html

 

[cronos]

This was exposed months ago.

Yup.

 

[gorcorps]

Is it legal for a third party to insert pii (ip et all) information into the jpeg without knowledge of the user ?

Reading the articles again I don't see any personal info there. It uses the ip of the SERVER they're playing on but not the individual machine.

 

[kyrax12]

I am glad people are exposing these type of information. Good job!

 

[Olikan]

I'd assume that every WoW player agrees to this in the TOS when they subscribe to the game.

actually no, there is nothing in the TOS.

Read the forum guys, it's an amazing work done by them....

(IMO) actually more interesting than the watermark it self

 

[Pray To Jesus]

dumb ass how is this even dangerous

all they have to do is pair it with a strong encryption algo

and boom

watermark unintelligible unless there is a master key

 

[Pray To Jesus]

Is it legal for a third party to insert pii (ip et all) information into the jpeg without knowledge of the user ?

yes in this case

if you don't believe, sue them and see

 

[Axon]

ITT: Everyone claims to read the TOS thoroughly

 

[Newbian]

Reading the articles again I don't see any personal info there. It uses the ip of the SERVER they're playing on but not the individual machine.

If that's true then who the hell cares other then the people that run illegal servers?

 

[gorcorps]

If that's true then who the hell cares other then the people that run illegal servers?

People are paranoid, I don't know. From what I've been reading there's nothing embedded there that is information that can be used to do anything with unless you're doing something wrong.

 

[shortylickens]

ITT: Everyone claims to read the TOS thoroughly

I read every TOS all the way through.

And at the end I forget it all.
Cuz its like a fucking college course. Brain dump at the end.

 

[diesbudt]

I read every TOS all the way through.

And at the end I forget it all.
Cuz its like a fucking college course. Brain dump at the end.

One tuesday maintence back in wotlk while i was waiting for Ulduar to be released, I did read the entire thing.

I remember nothing in it besides the fact that we hence do not own the account. We are just paying for access to a personal account THEY own.

 

[BladeVenom]

Welcome to 1984.