Article View: dal.general
Article #863Re: blizzards unacceptable behaviour
From: Martin Harper
Date: Wed, 02 Dec 1998 00:00
Date: Wed, 02 Dec 1998 00:00
114 lines
5828 bytes
5828 bytes
DoonMan wrote: > This is true it's not a joke ! > ----------------------------------------------------------- > > I am writing to inform ya and the rest of the world about blizzards > unacceptable > behaviour. This was first spoted by Beowulf of rzr and I give him full > credit, I > am so disturbed about his discovery that I feel I have to let people > know.So far > no one seems to care with Starcraft players being to preoccupied in > their games.... > > Apparently Starcraft being a program running on your pc is privliged by > the os to > access the registry of win95 and illegaly extract sensitive information > about ya, > like name and e-mail address. Any program in windows has full access to your machine. This is part of the joys of not having to worry about setUID and permissions and groups and all that lot. There's no special 'privilege' to StarCraft. What's illegal?? When you install a program on your hard disk, you click an "I agree" button. If you don't agree with this invasion, then click the "I don't agree" button, and return it forthwith to the store. By the way, I'm not sure that you can classify your name or e-mail as sensitive information. Or else "Hi, what's your name?" would generate a whole lot more slaps. > According to beowulf this are the keys beign accessed > HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info\DefName > HKEY_CURRENT_USER\Software\Microsoft\Internet Mail and News\Mail\Sender > Name > HKEY_CURRENT_USER\Software\Netscape Navigator\User\User_Name > HKEY_CURRENT_USER\Software\Microsoft\Internet Mail and News\Mail\Sender > EMail > HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User\User_Addr > HKEY_CURRENT_USER\Software\Kali\Kali95\User Info\email > > I did a registry check and it contained my real name. > If u try to connect to battlenet without a valid key either cause u have > the warez > version or you made a mistake,your information is logged onto their > system. I believe they extract this information for 'tracking purposes' i.e.: to find out how much time people spend on battle.net on average, and other similar statistics. There was an article in a newspaper on this concept, related to a web site which stole e-mail addresses. (I think: this is not 100% reliable info) Incidentally, If you do use the wrong CD key, and Blizzard try and sue you, you have a great defence. Anyone can modify the registry. Anyone could pretend to be you. TCP/IP addresses can be faked, and are generally dynamic anyway. Since your details are being sent across the ultra secure web, anyone can intercept them. Just feign total innocence, and then postulate your random hacker theory. > I feel that this practice is unacceptable and If we dont make a stand > against it > now,every company and every individual can start to violate our privacy > for his own > personal reasons. Hey, heard of junk mail? Data protection acts? Corporate Databases? Loyalty cards? Give it up. You already have no privacy. Read magazines: a private detective, and a bit of cash will find you almost any information you want on a person. The war against privacy has already been fought and won. All that's changed is that companies are being a bit more blatant about it. > Note that the registry contains passwords and every > concernign > u and ur pc..and even though the passwords are encoded, I am sure there > will be a > way to crack them. > Looking at mine: Netscape and ICQ encrypt passwords. All my cookies are safe, except www.playsite.com. Tweak UI's auto login is unencrypted. I believe that the level of encryption is fairly low... > > Finally I enclose the proof, as presented again by beowulf which I thank > for his > discovery. I feel I can never trust my pc anymore,and how cna we know > that microsoft hasnt > been doing that for years. Well, they haven't to me, cos I only just got on the web. :-) Well, apart from the registration form I filled in. And that foolish attempt to contact their helpdesk. I suspect people like you would have complained loudly if it had happened earlier. I'm more concerned about Caledos Wallpaper Changer than Windows, as it is a smaller freeware program, less widely used, and less extensively checked for security flaws. > BigBadWolf > > I have since verified this for myself..and it is true.. > they even extracted my local settings i.e country etc... > this is sooo lame and i am soo pissed off please make sure the word is > out on how > lame they are..if they dont get a response they will jsut keep on doing > it As noted above, if they get a response they will keep going anyway. Regardless: I'm not sure I care about Blizzard invading my privacy. If they've got enough time on there hands to start snooping around on my hard disk looking for blackmailable material then they've got too much times on their hands, and should use it to release Brood War early. :-) MyRedDice
Technical Details
Message-ID:
<3664B5DA.51A4D0B5@cam.ac.uk>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<366498A8.DEEE7E70@stmarys.ca>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10acdc,87676a16e27f8075 X-Google-Attributes: gid10acdc,public X-Google-Thread: 101711,87676a16e27f8075 X-Google-Attributes: gid101711,public X-Google-Thread: 105b91,87676a16e27f8075 X-Google-Attributes: gid105b91,public X-Google-Thread: f9e73,87676a16e27f8075 X-Google-Attributes: gidf9e73,public From: Martin Harper <mcnh2@cam.ac.uk> Subject: Re: blizzards unacceptable behaviour Date: 1998/12/02 Message-ID: <3664B5DA.51A4D0B5@cam.ac.uk> X-Deja-AN: 417712590 Content-Transfer-Encoding: 7bit References: <366498A8.DEEE7E70@stmarys.ca> X-Accept-Language: en Content-Type: text/plain; charset=us-ascii Organization: Cambridge Uni Mime-Version: 1.0 Newsgroups: dal.general,alt.games.starcraft,alt.games.warcraft,alt.games.warcraft.draenor