rootkit.com — I am releasing a program called 'The Governor'. The Governor is very simple - it watches the activities of World of Warcraft, and clearly reports which data is being read from other processes... The Governor exists for one reason, to tell you the truth.
Oct 19, 2005 View in Crawl 4
drjonesOct 19, 2005
Comes with a free tin-hat!!!Sad thing is there are tons of jackasses trying to steal your data. So who are we focusing on? A company that already has your credit card number and real name! Why the f**k would they care that yer watching grannyspank.mov?And yes, installing shady code from who knows where to 'check up' on a widely used well-scrutinized app is like sticking your dick in a bowl of piranhas to keep the flies off it.cripes.
steve693Oct 19, 2005
Don't like that Blizzard scans your running process looking for viruses? Then don't play WoW and shut your mouth. This isn't an issue of civil rights, you're well informed exactly what theWoW.exe is doing in the EULA and you voluntarily agree to it.The Governer = Keylogger
supadawgOct 19, 2005
Dont complain, Serves you right for playing this horrible game.
droodOct 19, 2005
Dcarpenter: You prove that, with evidence, and I'll give you $50.Never ceases to amaze me the way people go on about tin hats etc... It's a slippery slope folks. If you can't see this, I feel sorry for you. You let them do this, where does it end? Where does your personal sense of moral outrage say "Enough!" Perhaps downloading documents from your drive? After all, the docs could be detailing how to hack the game.Paranoia? Perhaps. But then 10 years ago, if someone said about software that installs itself without you knowing, and takes over your machine, you'd probably say the same thing.Hell, the old joke was always internet n00bs saying about getting a virus via email. "That can't happen"... Until OH WAIT! Yes it can.We'll see how you feel in ten years time when you have no privacy left at all. All you people throwing around comments like "tin hats" etc... Will be the first bitches to complain.
synsurgeonOct 19, 2005
Greg Hoglund is actually a well known and respected author from rootkit.com. He was one of the first people to shed light on Windows rootkits, and has recently co-authored a book which exposes how rootkits work and provides an avenue for people to guard themselves against them.
taintedloveOct 21, 2005
Let people find out for themselves what Blizzard's prog knows and then they can decide whether they care or not. Geez.
lunchb0xOct 23, 2005
BTW the author and the site are well known and respected by true (read: hardcore) techheads, security and privacy buffs and peoples rights grps. (eff members) It was released with full source code and very nice documentation. Its not a keylogger, if you don't believe it have one of your friends whos actually a tech look it over for you. Theres nothing wrong with watching a process thats watching you.
anadarOct 23, 2005
Well, in my opinion, I think it's not so much of a deal what the process sees and sends to blizzard, it's how well that information is encrypted.
spittOct 25, 2005
Ah, I love the misinformation, sent by the ignorant or maybe it's from Blizzard's employees?. It's a trojan (talking about govenor) - it's not. Blizzard doesn't send the information back... it does. Sure it encrypts the data, but it still opens all your processes and reads all the information within it. Here's what it does basically at the moment (subject to change depending on how bold Blizzard is). It reads all the processes running on your computer, macro tools, PGP, your open windows. If it finds something it doesn't like, it then opens the program and searches thru it, looking for matches. At the moment, they only check for a hash, which may be identical to a known exploit/hack, but again that is for now. They then encrypt all the data and send it back. OK, so now we know, they search your processes, they read the info, they send it back. Doesn't scare you yet? How much does it take to change the code, in 6 months? a year? They can wait till all the hooplah is over, then change the code and really spy on you. Paranoia? Yes. I wonder where or even if it will stop. The government of the USA, takes away your freedoms, one small step at a time. It's the same as Blizzard is doing. This small step, is just that, only a small step, nothing really.Does it help you to know that the people who are using the cheats, can uninstall their programs, and bypass the warden, so that warden will never know it is installed? And when the search is over, it reinstalls itself. Knowing this, Blizzard will soon have to change the way they go after the cheaters. One of the biggest macro programs out there, called wow!sharp, recently went open source. Effectively, people can now change the information within the program, change the names of the program and even the processes. So where will Blizzard go from there?Did you know that people use autoit, to macro programs on their computers. They can use it to click one icon, instead of clicking multiple icons constantly. They can make their own windows tasks. We beleive AutoIt is on the ban list.We know BWH is on the Ban List. BWH is for all intents and purposes a cheat tool specifically for WoW. But guess what, it is also open source. So with a little knowledge, people can rename the program to anything they want, and then avoid a ban... and now, with the wow!hider code being open source, and the BWH code being open source, look for a new tool soon for cheaters.In the end none of this really matters, except to remember that as Warden evolves, so do the cheats. The only way that Blizzard will soon be able to stop cheaters will be to evolve Warden, more and more. When they evolve Warden, they will infringe more and more upon your rights. Something else to consider, Blizzard is now playing a waiting game. They have stopped banning users temporarily. Thats not to say they aren't stopping for good. In fact, recently, 7000 acounts were banned in Korea. They are doing it slowly. Probably to make people think they aren't using the information, or perhaps because they want to verify the information, or make sure people are using it by giving them a 3 strike rule.One last thing to think on, people who use broadband have noticed performance hits. Some have even measured it. The performance hit is on their upload and download. 4.7mb chunks get uploaded to Blizzard, taking a hit of 80% on their performance. Was that part of the TOS?BWH can be found here - <a class="user" href="http://rpg-exploiters.shoq.net/forums">http://rpg-exploiters.shoq.net/forums</a>WoW!Sharp can be found here - <a class="user" href="http://www.wowsharp.net/forums">http://www.wowsharp.net/forums</a>Information about Govenor, Warden, and bypassing or even current infomation about Warden can be found on <a class="user" href="http://rpg-exploiters.shoq.net/forums">http://rpg-exploiters.shoq.net/forums</a>