and the privacy disaster continues…

wow.com has the details but in short, if you’re in the US and reported the Actizard RealID issue to the ESRB they decided to share your email address with everyone else who reported it.

Classy move, I call this a first class cockup, nothing more, nothing less.

It’s also why using tagged email addresses is still a good thing 15 years on from when I first started using them to work out which companies were being too free with my information.

More on the real ID fiasco when I finish writing it up, I decided to keep the 1000 or so words which I’d written already and somehow seem to have doubled it since the announcement of the climb down.  I’ll see if I can get it finished and out this week.

[Edit: 2010/07/14 – ESRB have apologised, stupid mistake but they have accepted responsibility without the normal “we apologise to anyone who might have been affected” weaselling.]

Real ID & forums, a news site roundup

Firstly an interesting article which might give some insight into one of the drivers for this change
http://watchingthewatchers.org/indepth/1365085/korean-law-driving-policy-blizzard

Now, here is the news

BBC News – World of Warcraft maker to end anonymous forum logins
http://news.bbc.co.uk/1/hi/technology/10543100.stm

USA Today – ‘WoW’ studio Blizzard to require real names on forums
http://content.usatoday.com/communities/gamehunters/post/2010/07/wow-studio-blizzard-to-require-real-names-on-forums/1

Associated Press & Affiliates – Bye-Bye Trolls? Blizzard Forums to Use Real Names
http://www.google.com/hostednews/ap/article/ALeqM5jV7ybK7aZ_ZS-5ejE4v6tRWYpp9gD9GQCO5G0
ABC News – http://abcnews.go.com/Entertainment/wireStory?id=11108240
ABC News – http://abcnews.go.com/Technology/wireStory?id=11109291
Yahoo! News – http://news.yahoo.com/s/ap/20100707/ap_on_en_ot/us_tec_blizzard_real_name
MSN Entertainment – http://entertainment.msn.com/news/article.aspx?news=509481&affid=100055&silentchk=1&

CVG – Fans rage over Blizzard forum plans
http://www.computerandvideogames.com/article.php?id=254846

PCGamer (UK) – Why Blizzard’s new forum plan is an epic fail
http://www.pcgamer.com/2010/07/07/why-blizzard%E2%80%99s-new-forum-plan-is-an-epic-fail/

The Register – Blizzard exposes real names on WoW forums
http://www.reghardware.com/2010/07/07/wow_forums/

About.com – WoW Real ID: A Really Bad Idea
http://antivirus.about.com/b/2010/06/22/wow-real-id-a-really-bad-idea.htm

Ars Technica – Blizzard: post about StarCraft 2? Use your real name
http://arstechnica.com/gaming/news/2010/07/blizzard-post-about-starcraft-2-use-your-real-name.ars

Gamespy – Blizzard to Require Real Names on Official Forums
http://uk.pc.gamespy.com/articles/110/1104456p1.html

Kotaku – Blizzard Forums Will Soon Display Your Real Name
http://kotaku.com/5580585/blizzard-forums-will-soon-display-your-real-name
Kotaku – Blizzard’s Real Name Forum Policy Has Fans In An Uproar
http://kotaku.com/5581209/blizzards-real-name-forum-policy-has-fans-in-an-uproar

Joystiq – Your real name to appear on Blizzard’s official forums
http://www.joystiq.com/2010/07/06/your-real-name-to-appear-on-blizzards-official-forums/

Inc Gamers – Blizzard Going Too Far With Real ID?
http://www.incgamers.com/Columns/94/blizzard-going-too-far-with-real-id

MTV Multiplayer – Blizzard Cracks Down On Anonymity In Official Forums
http://multiplayerblog.mtv.com/2010/07/07/blizzard-cracks-down-on-anonymity-in-official-forums/

TechEYE.net – Blizzard forces users to show real names: Internet security they have heard of it
http://www.techeye.net/security/blizzard-forces-users-to-show-real-names

Product Reviews News – WoW Real ID System: Security Flaw Found
http://www.product-reviews.net/2010/07/07/wow-real-id-system-security-flaw-found/

ITWorld – Blizzard to share your name with angry video game nerds
http://www.itworld.com/personal-tech/113202/blizzard-share-your-name-angry-video-game-nerds

Voodoo Extreme – Is Blizzard’s Real ID Safe, Or A Playground For Sexual Deviants?
http://ve3d.ign.com/articles/news/55728/Is-Blizzards-Real-ID-Safe-Or-A-Playground-For-Sexual-Deviants
Voodoo Extreme – Blizzard Forums To Require Use Of Real Name, Rage Ensues
http://ve3d.ign.com/articles/news/55910/Blizzard-Forums-To-Require-Use-Of-Real-Name-Rage-Ensues

Examiner National – World of Warcraft Players WoWed by Blizzard’s REALID announcement
http://www.examiner.com/x-48234-Santa-Ana-Internet-Examiner~y2010m7d7-World-of-Warcraft-Players-WoWed-by-Blizzards-REALID-announcement

EuroGamer – Blizzard forums to require real names
http://www.eurogamer.net/articles/blizzard-forums-to-require-real-names

GameFocus – Blizzard To Kill Anonymity On Forums
http://www.gamefocus.ca/?nav=new&nid=10091

Strategy Informer – Battle.net removes “veil of anonymity” on forums, real names used
http://www.strategyinformer.com/news/8551/battlenet-removes-veil-of-anonymity-on-forums-real-names-used

HuskyStarcraft – Blizzard Forums: First and Last Names [VIDEO]
[url=”http://www.youtube.com/watch?v=FBwTpHNZDpQ“]YouTube- Blizzard Forums: First and Last Names

AusGamers – Blizzard Switching Forums to Real ID System
http://www.ausgamers.com/news/read/2926798

Australian Gamer – Blizzard decide to give out subscribers’ real names
http://www.australiangamer.com/news/3239_blizzard_decide_to_give_out_subscribers_real_names.html

Zeroday – Is Korean Law Driving Policy at Blizzard?
http://blogs.law.harvard.edu/zeroday/2010/07/07/is-korean-law-driving-policy-at-blizzard/

Hell Mode – Why Real ID is a Really Bad Idea
http://hellmode.com/2010/07/06/why-real-id-is-a-really-bad-idea/#more-390

Tank Spot – RealID — Unethical and Dangerous
http://www.tankspot.com/showthread.php?68744-RealID-Unethical-and-Dangerous

Real ID & forums, a cataclysmic failure

Thanks to Matticus for shoving this on the radar, though given the noise it’s creating (118 pages on EU and 882 on US the last time I checked).

So firstly what are they doing and what are they not doing.

  • New forums will be opened for Starcraft II & Cataclysm
  • The new forums will be using Real ID, and will be showing your real name on the posts
  • The old forums will not be changed
  • The old forums will be closed once the new ones are open
  • There is an explicit opt-in on the new forums making it clear that your name will be made public
  • The parental controls have been updated so minors can be blocked from the forums

So, where’s the problem, surely having your name on the net has happened a lot of times already.

True but I’ve controlled, as far as possible what my name is associated with on the net, having come online around 15 years ago when the mantra was “never give out your real name”, usenet was a brutal place and keeping some security and privacy was a critical lesson to learn and learn quickly.  As was having to deal with the trolls.

What Blizz appear to have forgotten is that data should only be released where there is a clear benefit, and where it cannot be achieved through other means.  In this case a fixed alias for each battlenet account would do the same trick of cleaning up the forums, it stops the creation of level 1 alts, it allows a mapping of one account -> one identifier (not necessarily one person though) and without having to release additional information and the associated meta information, think of all the players who if they want to use the forums will expose their gender, their ethnic origin etc etc.  There are plenty of morons out there who will latch onto that information, some in the antipication of trolling and others (white knights) in the vain hope they might get laid.

What about the players in gay friendly (or gay only) guilds, if they have decided to keep their sexuality private outside of WoW then can no longer post to the forums.

As things stand (and we need more information) there is also the breaking of the namespace.  At the moment we know that each ‘name’ is unique as it’s <alt name>+<realm>+<region>, we know that has to be unique because of the way the system is built.  How is that going to be managed when there are 200 John Smith’s posting to the forum.  There is no realm tie in, so there is scope for trolling on a grand scale with confusion over who is responding to who.

Security

Releasing more meta information is bad where it’s not needed, at the moment there are a few people who know my real name within WoW, I think it’s about 13 people, with another 10 who might be able to make the right connections.   Pushing my identity out into the wider world in connection to WoW gives a scammer another hook to try and catch me, why not guess at the email address I use normally?  Scammers aren’t afraid of spamming the world in the hop of a 0.01% return rate, this would allow better targetting of their attempts.

Follow the Money

The change isn’t happening in isolation to clean up the forums, there’s a bigger game afoot, social networking and the piles of money corporate execs see in it.  So Blizzard/Activision are teaming with Facebook, that highly respected paragon of good data security and practice.

Is this the final act?

Not a hope in hell, I personally believe these are opening moves, what was once optional (realid in game) has become “optional but we’re going to freeze you out of part of the service” and I’m sure will become “optional, unless you want to log into the game“.  One thought which has surfaced already would be embedding realID information into tooltips / in-game nameplates etc etc.

I’m not sure where they’re going to go, but as I said above look for the money trails, look for where they can make the extra cash off their database.  This is what the world is about at the moment, all the large companies are looking to do something with their databases, the suits see them as money in potentia and want to convert it into big piles of the folding stuff as quickly as possible before the current bubble bursts.

The last word

I’ll leave the last word on this to Ctrl-Alt-Delete

Link Farm

iOS4

On balance it appears to be a decent upgrade, though there’s some issues on my iPhone 3g.

The good

  • Google calendar integration
  • Notes > gmail storage
  • Changes to the mail interface & threading

The bad

  • I’m sure it’s more sluggish than before, slower on the response after shifting apps.  I suspect there is more checking back with the net / google / apple going on in the background.
  • Google / Apple, how about a decent todo / tasklist tool?

The evil league of evil rumour mill

  • iAds has been enabled for targetted adverts.  It is possible to opt out http://oo.apple.com/
  • However it appears that the location tracking being logged back to Apple Central{tm} and passed on to their “partners” can’t be opted out of.
  • It’s possible that this isn’t as evil as it sounds but there’s nothing in the formal statements / documented agreement which completely clears their name either, It’s something I’ll be watching for and commenting on as news grows on this.