WARDEN'S OUT TO GET YOU
Thursday, November 15th, 2007I remember when Blizzard Warden first came out. Everyone went insane over the fact that Blizzard dare install a program that scans their system! After all, a program that scans your computer could pick up your credit card information, right? Let's ignore the fact that... It doesn't, didn't and won't. The mere thought of something capable of doing that is worth the freaking-out-itude. Especially when said scanners "call home". Ah, such a powerful phrase. Call home. Anyway, people freak out that Blizzard was listening to their complaints and developed a program that scans for cheatware and keyloggers. (Cheatware: applications used willingly by players to achieve an unearthly amount of automation in an effort to... well... cheat! Keylogger: applications unknowingly installed on your system by poking around in warez or by social engineering that monitors what you type in to your accounts!) Basically, Warden made sure you weren't cheating and made sure you weren't getting taken advantage of. Prevention and protection.
Guess what? It worked. Accounts are banned at an almost alarming rate with a very, very low rating of false positives. Warden works, that much is clear. Eventually, the whining died off. They either canceled their account or they got smart and figured out that less cheaters and spammers in the game was better than whining about what the scanning software COULD be used for, but wasn't. (Honestly, who stores their banking information in plain-text in the first place? Only idiots. There is not a single reason for you to have your credit card information in scannable form on your hard drive.) People whined about the polymorphist nature of Warden, but, uhm. Yeah. If the program didn't change, hackers would learn how to bypass it. So Blizzard changes it a lot to prevent that. It works. Yes, it's the nature of a virus, but it isn't a viral feature.
Well, now Blizzard has strengthened Warden once again. I'm not even sure what the huge deal is. The article just spouted complicated phrases like "random hash algorithms" without actually talking about what they were used for, so I'm going to decipher it as much as I can, based on the general resulting outcry.
Either Warden has been beefed up in its searching (I know it uses a list of known hashes to detect cheating and keylogging applications) or its own checksum has been changed so that it could essentially be impossible to determine if it's really Warden or not. I don't know, but whatever it is, Blizzard can change this algorithm at their will. Apparently, this is given rise to a new batch of whiners who claim that a "rogue Blizzard operative" could use Warden to "harvest bank information" without anyone knowing. (As if the majority of WoW subscribers haven't already given Blizzard their bank and contact information, haha.) Warden is known to scan your registry and active processes and compare what it finds to the hash database it has and then transmit anything it finds to Blizzard. The key here is that it doesn't transmit everything it finds, only the problems it thinks it's found.
I don't even clearly understand HOW or WHY this is a bad thing, but the post I linked to is convinced that this makes it impossible to tell if Warden has been compromised... by someone at Blizzard... who somehow had total unmonitored access to Warden's code... and managed to push the new, malicious Warden out to all 7 million subscribers... and have no other employees notice. Somehow. That's the idea they're going for. That's all they have. Let's forget the fact that Blizzard has not done this and is not doing this and has absolutely no compelling reason to do this in the future. But that 1 in a 1000000 chance is enough to make people go "OH MY GOSH IT'S THE END OF OUR PRIVACY AS WE KNOW IT."
Fine. If that's what you think it is, and you think the chance of an evil Blizzard employee stealing your credit card information (stored in plain text) from your computer and receiving it via Warden is an all too real danger? Stop playing World of Warcraft. It's actually quite simple. You can even tell them WHY you quit. Just say "I quit because I think that Warden is compromising my privacy" and be done with it... Because out of the 10 loudly outspoken people who think this is an issue, there are 6,999,990 people who think Warden is perfectly safe and who think Warden is an essential tool in stopping cheaters and keyloggers and we LIKE IT. Some of us have played other MMOs before that didn't give a hoot about who was cheating. Blizzard cares enough to hunt out these lowlifes and it WORKS. If there were people being banned left and right for false positives, I think they wouldn't hesitate to scream about it. We might get one or two people banned for some weird circumstances, like the guy who macro'd all kinds of moves into a single keyboard key (cheating) or the guy emulating WoW in Linux and Warden wasn't operating correctly. I think 2 out of 7 million in the entire time since it's been released is pretty good odds.
So in the end, yes. We know Warden scans our systems. Thanks, we already know that. Yes, we know it reports anything bad it finds to Blizzard. Thanks, we already know that. Yes, we know that Warden could, in some unimaginable circumstance, be used to harvest personal information. Thanks, we already know that. If it's bothering you that much, feel free to uninstall WoW. If you're not willing to do that, please, for the love of all that is good in this world, STOP TELLING US WHAT WE ALREADY KNOW.