Your real name is already available in WoW

[Ughmahedhurtz]

http://vnboards.ign.com/world_of_warcraft_general_board/b19789/113354557/p1/?3

http://img10.imageshack.us/img10/6942/ridmover.jpg

/run for i=1,100 do if BNIsSelf(i)then BNSendWhisper(i,"RealID whisper from yourself..");break end end

Apparently, anyone with a bit of addon knowledge can do this. I haven't given much thought to the implications but I suspect this will be an interesting discussion thread (or 100) on the official forums. No opt-out here it would seem. :p

[Shabu42]

Wow, I wonder if this was an intentional hole or w/e you want to call it

[Siaea]

Wow. That's f**ked up. I just did it on myself.

Ok, looks like you can't get someone else's that easy. (edit)

[Hivetyrant]

Yep, there are a few add-on's that do it already (I'm searching for them now) but its kinda scary that they left that hole in the system.

[Iceorbz]

Wonder if our resident addon experts could tell us anything if its possible =p ? Lax ? Jafula ? ;o

[OzPhoenix]

Hmmm. I intend on trying this tomorrow. I honestly don't know whether I can continue to play WoW if it risks divulging my real life identity. I'm going to have to think long and hard about this one. For the moment I'm assuming this could reveal only our account names right? Not our actual true names?

I too would be interested in hearing from Lax or Jafula about this.

[Mercurio]

Wow, that is really scary. :(

[OzPhoenix]

Wow, that is really scary. :(

Seen the now 1,000+ page thread on it in the forums?

I've never made, posted or even thought of uttering the words "I quit if this happens", but my real life identity is far more important to me that WoW is.

[Ughmahedhurtz]

For the moment I'm assuming this could reveal only our account names right? Not our actual true names?Look at the screenshot again. He wrote an addon that dumped the person's RL first/last name just by mousing over them and hitting a key.

[Ellay]

Wow that's crazy stuff. Although I don't mind if anyone knows my name, I'm sure some would like to keep it under wraps.

[Ughmahedhurtz]

Wow that's crazy stuff. Although I don't mind if anyone knows my name, I'm sure some would like to keep it under wraps.

What remains to be seen is the "opt out" choices. Can you opt out of having that displayed in-game eventually? I don't give two shits about it being displayed in the forums but then I think I've posted maybe 5 times ever in the official forums (usually for bug reports).

[Ghallo]

I actually just quit over this.

When WoW first started my real life friends and I banded together and created a guild. The requirement? Someone in the guild had to know you in real life. Period. If you didn't have a RL connection to the guild ... you weren't invited. Kept everyone nice and civil.

Problem? Friends of friends of friends. Suddenly, this guy... Pays for airfare from Alabama to Washington to come out and meet us. To be allowed into the guild.

Yeah.

Suddenly several of the Guild Officers are getting late night phone calls from this guy. His life is falling apart, he lost his job, can we help him?

The guy's story is tragic. He wasn't an "evil" person. But the result of him knowing who I was in real life put a huge strain on me - and that was when I volunteered my personal information.

I don't even want to think about what happens when I multibox through an area and someone decides that (even though I'm minding my own business) I'm botting... and they want to sign me up for 300 gay porn sites.


Nope. I cancelled my accounts today. If they decide not to go through with this I'll be back (I like this game, dammit!) but as others have stated ... my RL trumps a game. Heck... I play the game to ESCAPE real life...



Blizzard - worst decision ever. Want civility on the forums? Make it so that all posts are under 1 alias (you setup an alias for you account and then all posts show up under that alias).

[Siaea]

http://wowriot.gameriot.com/blogs/Americans-are-bad-at-games/Real-Names-on-the-Official-Forums-New-REAL-ID-function?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wowriot+%28Latest+Wowriot+Blo g+Posts+-+Wowriot.Gameriot.com%29

Bashiok (Blizzard Blue) made the mistake of posting his name to show how safe RealID was.

[kadaan]

I don't think that screenshot is showing the names of mouseover. All the API calls to the RealID friends take 'friendIndex' as the parameter. His macro most likely looped through his friend list and displayed their names.

[Svpernova09]

The script posted in the OP doesn't work if you disable Real ID from your account management page.

[Owltoid]

Real ID is disabled by default, right? Or do I need to change that as soon as I get home?

[Svpernova09]

Real ID is disabled by default, right? Or do I need to change that as soon as I get home?

Not sure, I was adding people right away. But honestly, a few of the people I really wanted to use it with have disabled it. So I don't have too much of a reason to keep it on.

[Poyzon]

Real ID is disabled by default, right? Or do I need to change that as soon as I get home?

I never touched my account settings and was able to add someone right from the get go. Sounds more like an opt-out to me.

[zenga]

Real ID is disabled by default, right? Or do I need to change that as soon as I get home?

I never logged in to my account page since real id went live.
I have not even tried adding anyone ingame.
I tried the above script and it displayed my real name.
I just logged in to my bnet account and there is no setting to opt in / opt out. If i was to enable parental control i would have that option it seems. Since i'm not a parent (as far as i know/hope), I have no desire to activate that.

[MiRai]

I never logged in to my account page since real id went live.
I have not even tried adding anyone ingame.
I tried the above script and it displayed my real name.
I just logged in to my bnet account and there is no setting to opt in / opt out. If i was to enable parental control i would have that option it seems. Since i'm not a parent (as far as i know/hope), I have no desire to activate that.
There is a check box somewhere in your Interface Options on whether to use it or not.

[zenga]

There is a check box somewhere in your Interface Options on whether to use it or not.


If you mean the actual game client: those were all enabled by default. Disabled them straight away. I can still execute the script and get my real name to show. Relogged and restarted client multiple times. And as said, I can still get it to display my rl name.

What i get is:

[BN:To][my rl name]: RealID whisper from yourself.
[BN:From][my rl name]: RealID whisper from yourself.

[Dooz]

To tell you the truth, I was ok with REAL ID as long as there was an opt out. I felt safe in knowing I could just turn it off and that would be that. I really thought, how could these people be so pissed over something they could just turn off? However after I read this post I did some searching on different sites including the official WoW forums. Now I'm not so sure even with an opt out that this is a good idea.

I think it has the potential to alienate people instead of bring them together. How many guilds are going to start requiring Real ID to raid? That's not a matter of if... just when. How do you spare a game friends feelings by telling them, "No you can't have my Real ID info." There will be great in game relationships lost over this.

That picture Ugh posted might not be real, and I'm sure there are people who are just plain fear mongering, but can we be sure that it's all BS? After I saw what happened to Drysc a.k.a Micah... I don't think someone knowing my first and last name is such a good idea. I'm not looking to be a Martyr for REAL ID.

I don't know man.... at this point I'm really asking, worrying... debating. I've got kids that play this game.

[Iceorbz]

Im in ur house sharding ur childrenz!

[Svpernova09]

Im in ur house sharding ur childrenz!

rofl win!

[Dooz]

Im in ur house sharding ur childrenz!

Watch out.... their shardz stink.

[Kruschpakx4]

(http://wowriot.gameriot.com/blogs/Americans-are-bad-at-games/Real-Names-on-the-Official-Forums-New-REAL-ID-function?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wowriot+%28Latest+Wowriot+Blo g+Posts+-+Wowriot.Gameriot.com%29&gr_i_ni)http://wowriot.gameriot.com/blogs/Americans-are-bad-at-games/Real-Names-on-the-Official-Forums-New-REAL-ID-function?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+wowriot+%28Latest+Wowriot+Blo g+Posts+-+Wowriot.Gameriot.com%29



hahahaha the comments

[ciscokid454]

According to what Blizzard has stated, you have to accept the RealID invite.
Any names being listed are probably on the RealID friends list

[zenga]

According to what Blizzard has stated, you have to accept the RealID invite.
Any names being listed are probably on the RealID friends list

I'll rephrase:

- have all battle.net settings toggled off (online friends, offline friends, broadcast updates, real id friend requests, conversation notifications, show toast window)
- i have no setting in my battle net account to toggle it on or off (not in the generic section and not under a game account)
- i have never shared or added a real ID from anyone

Still I can execute this script / line from an addon and it shows my real name as a whisper to myself. I can not confirm if an addon can grab this whisper and store its value.

The simple fact that this info is available through my client worries me. It simply shouldn't be.

[Velassra]

I'll rephrase:

- have all battle.net settings toggled off (online friends, offline friends, broadcast updates, real id friend requests, conversation notifications, show toast window)
- i have no setting in my battle net account to toggle it on or off (not in the generic section and not under a game account)
- i have never shared or added a real ID from anyone

Still I can execute this script / line from an addon and it shows my real name as a whisper to myself. I can not confirm if an addon can grab this whisper and store its value.

The simple fact that this info is available through my client worries me. It simply shouldn't be.


Could be intentional because it's a feature for future use. They stated they planned on more for RealID.

Fuck them really. Just because you're paranoid, doesn't mean there isn't someone out to get you.

[Souca]

While it seems that this is currently limited to getting the RealID name of the person who is running the code, it opens up the way for compromising addons to gather information about people. Once an addon has this information, it could send to a channel on the server that a hacker is logging to get a list of Character/Real Name pairs. Until now there has been no information of value to gather from a compromised addon, as they couldn't get any account information beyond the character name.

It's bad enough to have to update addons when they change, but this means you also have to check to see if they have any malware or trojans.

- Souca -

[Vass]

Fuck them really. Just because you're paranoid, doesn't mean there isn't someone out to get you.

Yes it does, I have a pin board of news paper clippings, random objects and arrows to prove it!

That however is beside the point. Back on page, oh 90X on that thread I posted my concern, speaking from the position that I work for a company with a strong policy regarding it's members and how they act online. I've had workmates before had serious disciplinary actions taken against them because they've posted they had a bad day at work on facebook.

I can in all reality be fired from my job if it came to be that someone whom I worked with put in a complaint about something I post on the wow forums and I don't like that, I rather enjoy my job. I'd also hate to think that if I apply for work that a company would then be searching me and find posts from me on the wow forums and I miss out on a job because I've posted on the wow forums. I just think games need to stick to been games where you have an identity you take on to dumb down from the every day.

[Malgor]

Doesn't it seem that not only from just the personal privacy violations of being able to get anyones real name in game that Blizzard will get lawsuit after lawsuit once all the gold farmers start using this information to create new and inventive ways to hack peoples accounts? Not to mention identity thefts.

Also, by google alone you can usually get an email if you have a name. As they said on the forums if you have a name like "John Smith" you have nothing to worry about, but for those of us with unique names, it's simply a matter of type, click, info out.

[SaraiE]

Confirmed, did the /run for i=1,100 do if BNIsSelf(i)then BNSendWhisper(i,"RealID whisper from yourself..");break end end
and sure enough, my real name came up. I put in a petition, but I really dont know if they will do anything....

Scary as heck! I don't think i click to have any of my personal information show up...i went to battle.net and looked at my settings. I do not even have the blizzard magazine option opt-in.

SaraiE

[Malgor]

Confirmed as well and ticket as well. I'll have to cancel my accounts as I've had my identity stolen before and this just seems too easy for a lowlife to get my name and from there where I live, etc.

Who in their right mind thought this was a good idea?

EDIT: GM got back to me within 10 minutes. Basically I got a form on how great RealID is and they didn't answer my security questions. I checked my in box and a copy of it still hasn't arrived. Will post that when I get it.

[MiRai]

Confirmed as well and ticket as well. I'll have to cancel my accounts as I've had my identy stolen before and this just seems too easy for a lowlife to get my name and from there where I live, etc.

Who in their right mind thought this was a good idea?
Wait...
...so how does someone go about getting your information?

Currently:
Posting on the Blizzard forums after RealID is active -> Name Revealed
Adding someone via the RealID friends list -> Name Revealed

If you don't use either of those, how would one obtain your information? Just because a line of code can show you your own name is hardly a reason to cancel your accounts over identity theft. Yes, it's odd that Blizzard has allowed that line of code able to do just that, but I'm sure with the new RealID system in place everyone is now labeled with their actual name internally. Until Blizzard implements some other broken code that lets you see other people's names using this method, why the panic?

Keeping original post. Added more below.

[Iceorbz]

Wait...
...so how does someone go about getting your information?

Currently:
Posting on the Blizzard forums after RealID is active -> Name Revealed
Adding someone via the RealID friends list -> Name Revealed

If you don't use either of those, how would one obtain your information? Just because a line of code can show you your own name is hardly a reason to cancel your accounts over identity theft. Yes, it's odd that Blizzard has allowed that line of code able to do just that, but until Blizzard implements some other broken code that lets you see other people's names using this method, why the panic?


A few people have said (In a really long forum post on the addon place) that its possible to pull that information through *OTHER* scripts, which they are not going to post. Which why i wondered if any of our resident addon experts could verify it or not.

[MiRai]

A few people have said (In a really long forum post on the addon place) that its possible to pull that information through *OTHER* scripts, which they are not going to post. Which why i wondered if any of our resident addon experts could verify it or not.
Yeah just saw that. :) I'm maxed on bandwidth at the moment and editing is unbelievably slow. :)

SORRY GUYS!

[OzPhoenix]

Yeah just saw that. :) I'm maxed on bandwidth at the moment and editing is unbelievably slow. :)

SORRY GUYS!

Also it means if your account did get hacked (and authenticators aren't bulletproof) the hacker has a convenient way of getting your full name as well. Tack on some handy identity theft to the gold loss.

[Malgor]

Well still no email from the GM. I thought they always followed up with an email after an in-game conversation. The ticket I filled out is gone since I clicked on the finished and reply section of it.

Basically the jist of it was that RealID was safe.... and completely up to the player to use or not to use.

I've unchecked the boxes in Interface>Battle.net>Real ID Friend Requests (it is prechecked by default), but not sure if that stops anything other than just blocking automated RealID friend requests.

[Toned]

If you're really worried I'd check all your addons before you use them for REALID references, or stop using addons ><

[Tin]

Customizing and opting out of Real ID (http://www.wow.com/2010/07/08/customizing-and-opting-out-of-real-id/)


http://www.wow.com/2010/07/08/customizing-and-opting-out-of-real-id/

and there is a addon that Block the exploit that allows AddOns from getting your Real Name from the Real ID system.

http://wow.curse.com/downloads/wow-addons/details/blizzbugssuck.aspx

[Ughmahedhurtz]

Customizing and opting out of Real ID (http://www.wow.com/2010/07/08/customizing-and-opting-out-of-real-id/)


http://www.wow.com/2010/07/08/customizing-and-opting-out-of-real-id/

and there is a addon that Block the exploit that allows AddOns from getting your Real Name from the Real ID system.

http://wow.curse.com/downloads/wow-addons/details/blizzbugssuck.aspx

It should be noted that this only fixes the bug that allows addons installed on YOUR computer from getting your real name. Other people can still use addons/LUA to see YOUR real name from their PC.

[kadaan]

It should be noted that this only fixes the bug that allows addons installed on YOUR computer from getting your real name. Other people can still use addons/LUA to see YOUR real name from their PC.

Only if you're Real ID friends with them. (I've seen a few vague claims that you can find it for _anyone_, but I've scoured the wow api and it doesn't appear to be possible.)

[Dooz]

I've seen a few people, in various forums, say they know which addons do this. If somebody has one of these addons please PM me and tell me what server you're on so I can see for myself if this truly works. I'll hop on create a character with dooz in the name... you tell me what my real name is. I don't need to know the addon, or any of the code behind it. I just want to know if it can be done.

[Firstcow]

All my 5 accounts are cancelled. I'm not worried because when I created my accounts I used initials but I just hate Blizzard's guts right now for all this RealID money making scheme. Most of us get very little or no benefit, Blizzard makes a lot of money. And at stake is our true identity.

My address on my account is now "fuck you blizzard for real id". I wish I had the inspiration to use Fuck You as my first and last name, like I've seen some other people did when they created their accounts.

[MiRai]

Only if you're Real ID friends with them. (I've seen a few vague claims that you can find it for _anyone_, but I've scoured the wow api and it doesn't appear to be possible.)
I've been looking for and trying to figure out the acclaimed mouseover macro that shows names, I am coming up dry as well.

[MiRai]

Only if you're Real ID friends with them. (I've seen a few vague claims that you can find it for _anyone_, but I've scoured the wow api and it doesn't appear to be possible.)


I've been looking for and trying to figure out the acclaimed mouseover macro that shows names, I am coming up dry as well.
It would seem that the new Gearscore 3.2 beta that was released on June 5th [I think?] is one of the addons that will reveal names in your tooltip. Whether both people need to have the addon installed I do not know. I obviously cannot confirm this first hand but the beta page on Gearscore's webpage is down. The 3.2 beta has been pulled from all other addon sites. Threads are beginning to pop up on WoW's General Forums with more screenshots. Most of the threads about it are getting deleted or locked. This is not Gearscore's fault as I'm sure the author is fixing the issue. Unfortunately, Blizzard is still to blame.

[Ughmahedhurtz]

It would seem that the new Gearscore 3.2 beta that was released on June 5th [I think?] is one of the addons that will reveal names in your tooltip. Whether both people need to have the addon installed I do not know. I obviously cannot confirm this first hand but the beta page on Gearscore's webpage is down. The 3.2 beta has been pulled from all other addon sites. Threads are beginning to pop up on WoW's General Forums with more screenshots. Most of the threads about it are getting deleted or locked. This is not Gearscore's fault as I'm sure the author is fixing the issue. Unfortunately, Blizzard is still to blame.


Yeah, I've been digging trying to corroborate the screenshot I posted but I'm getting links to dead/deleted/locked threads with lots of bans flying around. I suspect the info was out there and mods everywhere pretty much started nuking those posts from orbit to avoid Blizzard's ire. Ah well, at least it got around enough that Blizzard can't just hopsy-daisy and pretend there aren't issues that they need to be more careful about.

[zenga]

Activision: Glad you could make it, Blizzard.

Blizzard: Watch your tone with me, Bob. You may be the boss, but I'm lining your pockets with money.

Activison: As if I could forget. Listen, Blizzard, there's something about the forums you should know. Oh no. It's too late. These people have all been trolled. They may look fine now, but it's a matter of time before they nerd rage.

Blizzard: What?

Activison: Your entire forums must be purged.

Blizzard: How can you even consider that? There's got to be some other way

Activison: Damn it, Blizzard. As your master, I order you to RealID these forums!

Blizzard: You are not my master, bob. Nor would I obey that command if you were!

Activison: Then I must consider forcing this.

Blizzard: Forcing it? Have you lost your mind, Activison?

Activison: Have I? Lord Blizzard, by my endless resources and sovereignty of my company, I hereby program your forums with RealID.

WoWplayers: Activison, you can't just...

Activison: It's done! Those of you who have the will to make more money, follow me! The rest of you... get out of my sight.

Blizzard: You've just crossed a terrible threshold, Activison.

Activison: Subscribers?

Source: (http://forums.wow-europe.com/thread.html?topicId=13816899969&sid=1)

[MiRai]

WoW.com is reporting otherwise. I have seen numerous screen shots on this though. /shrug

http://www.wow.com/2010/07/08/that-scary-gearscore-real-id-screenshot-is-fake-guys/

[Ughmahedhurtz]

WoW.com is reporting otherwise. I have seen numerous screen shots on this though. /shrug

http://www.wow.com/2010/07/08/that-scary-gearscore-real-id-screenshot-is-fake-guys/


Interesting. Hadn't seen that screenshot.

[SaraiE]

Question:
Why is there no words from Blizzard regarding this script? I can care less about the posting on the forum as i don't go there. Seems strange that there is NOT even one blue posting regarding the script. I saw the Adobe warning as a security issue, but no one post with regards to the script.

Or it is just me that suck at scanning the general forum?

Either way, let me know.

Is it safe to even log on? I am afraid. People said that it is based on addon. If you disable all add-ons, does the script work?
I have harvestor for flowers and nodes and jamba and isboxer as addons. Nothing else.

If the community knows anything else, please update.

Thank you,

SaraiE

[MiRai]

More information about the Gearscore scare from the author himself on page 3.

http://gearscoreaddon.com/forums/showthread.php?tid=552&page=1

[Ughmahedhurtz]

This is apparently easily faked by substituting random names in a script, as Fenril's link explains. If it's a publicity stunt, it's hella effective. :p

-PQtNRKZq04

[Ughmahedhurtz]

On another note:


[1. General] [Gurly]: LFM VOA10 girl group only REALID/female name required

[MiRai]

On another note:
[1. General] [Gurly]: LFM VOA10 girl group only REALID/female name required
Haha nice!

In addition to your video the author of Gearscore just posted this as well giving us a verbal walkthrough on how it's done.

GO5zmuFTLtA

[Malgor]

Okay my mind is fairly clear that this all is a hoax now and that no one can get my real name through just add ons. I watched the video made by the creator of GearScore and he shows how this was easily done (the fake video) and he used presidential names in his video.

I'm sure this isn't the last we've heard from RealID though.

[zenga]

Okay my mind is fairly clear that this all is a hoax now and that no one can get my real name through just add ons. I watched the video made by the creator of GearScore and he shows how this was easily done (the fake video) and he used presidential names in his video.

I'm sure this isn't the last we've heard from RealID though.

Malicious addons CAN snipe your real ID, when you have them installed and don't have a Parent lock activated.

[Ughmahedhurtz]

Some confirmation from the DBM author that debug code in DBM could have shown you some RealID names but I take it that these were only from your own list of friends or something.

http://www.deadlybossmods.com/phpbb3/viewtopic.php?f=2&t=2644

[Iceorbz]

All this guy said was, he doesnt plan on doing it for gear score. No one has said it can't be done, would probably need to check the black ops type websites to see if anything like this is going down.

[Ughmahedhurtz]

Heh, and another post where someone appears to ask one of the original subjects of the tooltip-realid-hack video:

http://img97.imageshack.us/img97/6681/wowscrnshot070810183826.jpg
http://img231.imageshack.us/img231/3961/wowscrnshot070810183832.jpg
http://img193.imageshack.us/img193/921/wowscrnshot070810184512.jpg

[Daeri]

Activision: Glad you could make it, Blizzard.

Blizzard: Watch your tone with me, Bob. You may be the boss, but I'm lining your pockets with money.

Activison: As if I could forget. Listen, Blizzard, there's something about the forums you should know. Oh no. It's too late. These people have all been trolled. They may look fine now, but it's a matter of time before they nerd rage.

Blizzard: What?

Activison: Your entire forums must be purged.

Blizzard: How can you even consider that? There's got to be some other way

Activison: Damn it, Blizzard. As your master, I order you to RealID these forums!

Blizzard: You are not my master, bob. Nor would I obey that command if you were!

Activison: Then I must consider forcing this.

Blizzard: Forcing it? Have you lost your mind, Activison?

Activison: Have I? Lord Blizzard, by my endless resources and sovereignty of my company, I hereby program your forums with RealID.

WoWplayers: Activison, you can't just...

Activison: It's done! Those of you who have the will to make more money, follow me! The rest of you... get out of my sight.

Blizzard: You've just crossed a terrible threshold, Activison.

Activison: Subscribers?

Source: (http://forums.wow-europe.com/thread.html?topicId=13816899969&sid=1)


http://img806.imageshack.us/img806/2236/1278597083146.jpg :P

[Jafula]

http://img806.imageshack.us/img806/2236/1278597083146.jpg :P

Win :)

[raylion]

There appears to be an opt out for RealId by setting Parental Controls on Battle.net. Cut and Paste from WoW EU forums:

'The way you seem to be able to turn this of, is to enable Parental Control. You can enter the same e-mail for the "Child" and "Parent". After logging in though the link in the confirmation mail, you'll be presented with the option to turn Realid off in game. '

Have tested this with my account and I no longer have RealID options or the abiltity to add a RealID friend. Whether or not you can still get the RealID information another way is something that I've yet to test.

[FunkStar]

not sure if anything recently changed but... I havent done anything to my BNET nor ingame options, and if I run the script from first page my nickname comes up (the char im playing at that moment) not my real name. Maybe its fixed?

[MiRai]

not sure if anything recently changed but... I havent done anything to my BNET nor ingame options, and if I run the script from first page my nickname comes up (the char im playing at that moment) not my real name. Maybe its fixed?
Confirmed. Double check again after today's maintenance. :)