Yikes! Data Breach Notification!

Posted by Daeity On Friday, January 14, 2011

In an older post, I stressed that Blizzard was not required by any law to notify users of internal data breaches. Many misinformed players, Blizzard employees and fans used this false information as the logical reasoning and proof as to why Blizzard's internal databases "have never been broken into" or account information stolen.

To be clear: Blizzard (nor any other gaming company) is not required by law to notify anyone of anything.

Here's a little excerpt I wrote at the time:

Now, if something very bad were to happen, then yes - a large announcement would be made.
Well, it just happened with Runes of Magic. =]

Here's a link to the news article.

Basically, a hacker obtained login/personal data from their account database and is now holding the information "hostage" until Frogster/RoM Team changes the "forum communication practices and technical aspects of Runes of Magic operation".

The only reason that the company is releasing this information NOW is because it's been made public and they're being "held hostage." The data breach actually occurred back in 2007 by the way. They sat on this data breach information for 4 years before telling anyone and probably would have continued to do so until the hostage situation was made public.

Still think this hasn't happened anywhere else? It's actually more common then you think, and I'm not just talking video games.

Psychological Copy Protection

Posted by Daeity On Thursday, January 13, 2011

It's sad to see the constant scrambling to fight crackers and improve copy protection measures. The battle has been going on for decades and yet businesses have yet to learn that you can't stop illegal copying. With next-generation copy protection measures come next-generation cracking tools. It's a useless cycle and they're just wasting money trying to find "the next big thing." *cough* StarForce *cough*

Copy protection methods have always used the some old approaches: memory checksums, data/hardware checks, decrypting data after activation, dongles, obfuscated code, activation codes (serial/registration), etc.

But the problem with those approaches is that they're too obvious and right out in the open. Simply put, it's like hitting a brick wall - it's right in front of you, crackers know where it is, and they can start to work away at it. When debugging code, programmers need to know when a process occurs so that they can trace it. They're not going to trace the entire gaming code, it would simply take too much time.

But what if they (or the user) didn't know that there was any copy protection in place? Or when copy protection algorithms were "activated"?

I've always been interested in the more entertaining and creative forms of copy protection out there.

One of my favorites was MOTHER 2 / EarthBound. It had some standard stuff (e.g. data checksums, piracy warnings) of course, but the "pirated ROM" would allow players to play for several hours without the user ever knowing that copy protection schemes were actually still in place. =]

There were so many ROMs out there too, it was hard to tell if you had the "real" cracked version or not. The only way to tell is to play through the game and look for certain signs (if you knew what to look for) or wait for special events to occur during the game (at critical points, generic crash/freezes are caused and all saved games are deleted.)

That's just awesome. =]

This approach is a good example of what you want to take advantage of, but without the piracy warnings (as they stick out) and other obvious "signs" that exist during the beginning of the game. You don't want the cracker or player to know that there's copy protection in place, or what version they're even using.

Recently, Ubisoft incorporated an "amazing new copy protection approach" into the NDS version of "Michael Jackson: The Experience". Illegal copies would show no notes played, the game would freeze when paused, and vuvuzela's would be blasting over the music.

This is actually an old copy protection method, in fact, and it's just another "brick wall" that prevents you from playing right away, and thus making it easier for crackers to detect, trace and disable the copy protection measures.

In that same Wired article about Ubisoft's novel approach, there's a quote by Nintendo President Satoru Iwata: Battling pirates “has been like a game of cat-and-mouse"

If you want to seriously fix this problem, stop being the predictable mouse and stop trying to be the cat.

What you should be is a fucking ninja/pirate hybrid and engage in subtlety, confusion, obscurity, dirty tricks, and deception. Is this really a battle, or just a game?

So, here's my recommendation for developers/publishers (using a RPG as an example):

Part 1

- Announce that the game will not have an annoying DRM, no activation will be required, that it doesn't need to be online all the time to play, etc. There's no need to make a big deal about this either.
- Alteratively, you could put standard copy protection in place, announce that there's copy protection but ensure that you don't pay too much for it as it's really just a red herring so that crackers bypass it and release their pirated version. Going the copy protection route will come in handy later actually however, but this will make more sense in Part 3.
- You want players to be on your side, not supporting pirates.
- Realize that there's no point in DRM - it will just be broken on the first day. Instead, focus on making a great game since that's where the majority of your revenue will come from.
- Keep the retail cost of the game low.
- Talk to people who do pirate your game, work with them to make your game better, get them involved in your game and future games. If they're involved in the project, they'll support you and probably buy all of your future games. Especially if they know you personally.

Part 2

- Over half the battle is controlling information and perception.
- Release several different versions of the "pirated version" on torrent websites (and P2P/FTP/etc) under various real, independent or anonymous group names. Use a private VPN, get randomized source IPs going.
- Those pirated versions should be crippled out right, or simply stop functioning early in the game (freezing/crashes). These would be special pre-fabricated versions of the game (ie, not the full game.)
- Spread false information on forums/websites that you've heard reports of these pirated versions containing a new type of virus, can damage your PC, have keyloggers that target MMORPG's, etc. (Game publishers already send out these types of warnings for pirated games in general already anyways.)
- Keep in mind that most players who pirate aren't technically savvy, and they'll just download the first game/MP3 they see (or download multiple copies if they're not sure.) Help them waste their bandwidth, would be nice too if they're capped on a monthly basis.
- Fill up torrents and forum posts with so much misinformation (even good old "it's being tracked by the FBI"), that you'll discourage users from downloading the game or they'll want to wait.
- If the game is amazing and highly sought after, many will just go out and buy the game rather than taking the risk of downloading the "dangerous pirated copy" or wasting more bandwidth.
- Since you'll have a lot of time to prepare, your outsourced employees (ie, plants) can build up a trusted name for themselves on various forums or release websites.

Part 3

Okay, this is where things get interesting.

- The real game will be investigated/cracked by various groups, they will test play it (not a FULL play through mind you), and then release it quickly (they might be in competition with other cracking groups, sometimes the programmers are lazy, they believe that it was cracked successfully, etc.)
- You don't want your hidden DRM measures to take effect early in the game. Instead, wait until the player is nice and comfortable first before you hit them with it. When it happens, it won't be obvious either. (Much like EarthBound, players didn't even know that they were using the "bait" pirated ROM until it was too late.)
- After an hour or two of playing (or longer/keep it random), reward the player with an epic item drop for example, and then "crash" the game shortly afterwords. Save games should get corrupted in the process too.
- You don't want the player to be angry at your game or the developer, you want to instead redirect their rage to someone else. The game should be rewarding the player, but when things go wrong - blame the pirated copy.
- When the game crashes, it should be a standard Windows error page casting blame on "RZR1911.DLL" or "CRACK.DLL". That's an excellent way to convince players that the crack was responsible for the crash and their loss of time.. it wasn't poor coding in the game.
- Also incorporate other random crashes with unique error codes, so that when they (Google) search the message they're brought to a forum that explains that only pirated versions cause those crashes and that they don't occur with retail versions. Also explain the dangers to their PC from using this specific pirated game.
- You want to start causing doubt in the user's mind and these pirated copies should be scaring players.. "is this really safe to run on my PC?" Random exception faults, fake freezes, BSOD's, driver failures, corrupted save files, reinstalls required - this is all because by the cracking groups.. it can't possibly be something that's built into the software as a form of copy protection. =]
- Of course, cracking groups will start releasing "updates" to fix the issue. But you should be doing the same. Also, since they don't know where the copy protection begins and ends, they will be releasing crack-fix upon crack-fix upon crack-fix once they are discovered.
- There's going to be so much misinformation out there, players won't be able to tell whether they have the real version or not. The anticipation alone of having to play for 3 hours, then having a random crash (and lost saved games) is not worth the amount of stress. You want players to mistrust the pirate community, not the game developer. (Yes - I understand the irony of it all. But this is war, irony be damned.)
- These groups might also start making news announcements about this type of copy protection - but the damage will have been already done. Most of the downloaders rarely read these news items on their official pages anyways. As the game developer you can simply state that their "band aid solutions" and "poor skills" are responsible for the current state of the game and that it's ruining the experience for players (and hence should buy the real game and avoid the inferior or possible infected pirated versions). =]
- At later stages of the game (ie, points where it's been patched by cracking groups), you could start taking different approaches - like checks, changes to difficulty, invisible changes to player stats, random boss cheats (e.g sudden smack down), etc.

Basically, stop making it easy for crackers - make them seriously work for it using means that they're not used to. They've been spoiled for far too long.

While they're hard at work creating countermeasures, you'll be gathering more "converts".

And instead of trying to find the next "best" form of DRM, just start using a little conditioned response, some psychology, control of information, red herrings and confusion (keep the crackers busy), and putting your DRM out in the open. No one should even know if there's any copy protection in place. Let players get into the game after a couple hours first (consider it a demo) as that's where it will hurt them the most. But, make sure they blame someone else and not the game.

Just a thought.

* UPDATE (02/15/2011):

So, someone on Reddit just discovered those clever copy protection methods in EarthBound, which brought up a little conversation on other games doing the same.

I didn't even know about these, but they were pretty cool to read and confirmed just how effective this kind of DRM is.

Here's an interesting article on Spyro the Dragon 3. Get this: it took 2 months to crack fully. =]

The Spyro copy protection methods took place after playing for long periods of time, and the crackers kept assuming that they removed the DRM each time. However, the glitches and piracy warnings were made obvious to the user - so the crackers knew WHEN (well.. where) to remove the DRM. Imagine if they never knew when/where to remove the DRM though? (Like what I've been talking about.) =]

The trick is to make random and undetectable copy protection, and play with their heads a little bit.

Another cool (more recent) one is Batman: Arkham Asylum. When the main copy protection was removed, there was still a small tweak made - pirated copies would not allow Batman to fly/glide, making the game impossible to progress.

I'm surprised developers don't do this more often.

From The Dirty Tricks Dept.™ - Find Out a WoW Player's Alt Names

Posted by Daeity On Wednesday, January 12, 2011

There are lots of ways to do this.. these approaches can take a lot of time of course and some strategies will require that you level characters to approximately their same level. On the flip side, if you want to avoid detection - pay attention to these methods so that you don't accidentally reveal your own alt's names.

Currently, there aren't any WoW Addons that can automatically search names and find alt character names. However, it is a very logical process and there's no reason why an addon couldn't be created that does this (census scripts practically do this already). The reason that there is no "Alt-Tracking addon" is for obvious reasons: there's little need for it and it could be used for nefarious purposes.

Note: I'm going to assume that the reason you're reading this post is because you don't know who they are, you're not actual friends with them, you can't interact with them in the real world, and you don't want them knowing that you're trying to find their alt names.

Starting Out

You'll be using "Add Friend" A LOT starting with their main character (or known alts).

As you build up a list of possible suspects, you'll be tracking their logon/logoff activities until you're 100% certain. Get a pad of paper too.

Keep in mind that a player can have 2-3 characters logged in simultaneously (it's a way to throw off players tracking you) on the same account simply by launching multiple WoW instances. However, there's an approx. 20-30 second delay before the last account gets disconnected. (You may already be aware of this technique for self-buffing your own characters.)

If you know you're being tracked, you can actually keep 2 of your characters "logged in" indefinitely by switching back-and-forth between two WoW.exe instances and logging into your 2 characters every 20 seconds or so. It's very annoying and difficult to tell if they're actually monitoring you though. =]

Real ID

The easiest method, but it's very difficult if you don't want them knowing anything about you. If you can befriend them, and they have Real ID enabled (voluntary activity) then you will have access to their "real name", email address, and all alt character names. Problem is, they'll have full access to your information as well.

If you have a fake WoW account setup, and become really good friends with them, you might be able to convince them to enable Real ID (describe the benefits) to get access to their account details.

Their Character Name

Look for common trends in their name, and use it as a search pattern for other character names once they log off.

Add the possible suspects into your friends lists and see if they logoff/login at the same intervals.

If they have a character named Sinbank, for example, chances are they have an alt with "Sin" in the name.

All of their character names might be 2, 3 or 4 characters long in length for example.

They might favor a certain alt-code in their character name.

All of their characters might have the same subtext: tbone, dogbone, bonesdude, boneym, etc.

All of their characters might be references to the same TV series, movie or novel (Harry Potter or Lord of the Rings references).

All of their character names might have another common trend - like Guild Names (if they created multiple guilds for bank slots), they might be verbs (e.g. jump, shoot, destroy), they might all be related to ego (e.g. godly, godlike, amazing, beautiful, awesome), etc.

Trade Chat

If they have an ego and they're active trade chat users, they can't help but compliment themselves. Watch trade chat (after they log off) and see if someone else continues the conversation or agrees with "that last poster."

If they're in competition with another player, they'll log into an alt and insult the prices of their competitor. "There are better prices on AH." - Meaning their alt or main.

If you know what products they're selling on the AH and they're the lowest sellers, wait about 20 seconds after they logoff and starting posting competitive pricing on Trade Chat (use your disposable toon called ___bank). You might be able to lure them into responding or insulting your prices - or they might even try to buy them from you using their alt. Either way, ignore everyone - but add their names and track them later.

The Battle.net Forums

This is similar to Trade Chat conversations. Use wowarmory.com to find all of their forum posts, and see if any other characters respond to their posts in a positive light. Sometimes players will respond to their own posts under an alt's name to defend themselves. Also, sometimes they forget to change their posting character and will accidentally *BUMP* their own posts.

Their Guild

Use WoWArmory to find out character names that are in their guild. It's very difficult to go through each name to find a likely suspect (unless they have similar character names), it's easier just to find someone in the guild that can invite you and work your way into the guild.

Private message them with your disposable or alt character and join the guild. Hopefully, they won't have strict recruiting policies. Alternatively, you can become friends with their recruiters. There are many techniques to get into a guild, but I'm sure there are plenty of other sources out there. It will take a while to write them all up.

Monitor character names that login/logout based on your target's login/logout trends. If they have any alts in that same guild, you'll immediately discover their names.

If they don't have any alts in the guild, make friends with various players (e.g. help them with professions, farming, providing mats/gold/crafting services, power level their alts, etc.)

After a couple days, start asking questions during periods when you know the player is offline. Ask, "Didn't x have an alt with enchanting? I need a bunch of stuff done and they needed to level it I think". Or, "I'm trying to get a hold of x, does he have any alts online?" etc etc. Get creative. =] Usually someone in the guild will know some of their alt names.

Who They Party With

Monitor who they party with and which dungeons they frequent. Chances are that the same group of players will bring in their alt characters for leveling or farming.

Like I said, your list of friends is going to get really big. You will want to know WHO they frequently associate with, and monitor their activities as well. =]

You might see their level 85 best friend care-bearing a level 55 (with maxed professions) through dungeons or quests. That's a very good suspect.

What They're Wearing

If you get a confirmed list of alt-character names (or best friends), inspect their gear and see if any of the items were crafted by other players. Then, add those players to your Friends List and start the process of elimination again. Players with multiple toons that craft will make their own gear for their own characters and friends, especially if they're trying to save money (e.g. active AH users.)

This is one highly effective method to getting their alt names. Their main, however, will probably be equipped in dungeon-drops, which doesn't help you.

Bait Their Alts/Main Into PVP

It's pretty easy to locate players if you're on the same faction, so use this to your advantage to kill their alts over-and-over. Eventually, they'll login with other toons (or their main) to camp you.

Obviously, this works best with stealth classes since you can safely watch their corpses while hidden (until their other toons show up.)

Since you're not on the same faction (and probably don't want to spend the time logging in and out to see what they're up to), you can still create a macro to determine whether they're logged in or not.

Simply use /invite *enemy player name*

It will either say 'You can't invite them' (meaning they're online) or 'Player Cannot Be Found' (meaning they're offline.)

While We're On That Note: AH PVP

If you're a big AH user and want to eliminate the competition (or simply make life difficult for them), create yourself a high-leveled toon from the opposite faction. A rogue works well.

After you log off, and they log back in to undercut your prices - kill the Auctioneers with your character and vanish. Rinse and repeat whichever Auction House your competitor visits too.

It's also nice if they've just hearthed back to town (you'll know their schedule by now) and they're still flagged for PVP. They'll be so busy with Auction Profit Master running that they won't notice you killing them. They're very easy targets.. not only will you feel better, but while they're corpse-running or waiting for their auctioneers to respawn - that just means more sales for you. =]

Watch the Auction House

Watch all items on the Auction House that their main and known alts post. Find out who crafted them. (They might craft items, but have one single account as the AH poster for example. It's an easy way to find out alt names.)

If they're posting PVP sets that were crafted by other player names, chances are that those are his/her alts.

Watch what they buy/sell on the Auction House, find out as much about their professions as possible. If they're constantly buying out herbs, but they don't have an associated profession, chances are that they have an alt who is a Scribe or Alchemist.

(If they're only buying Azshara and Heartblossom herbs, chances are that they have a 80+ toon who is an Alchemist/Enchanter.)

Once you know the type of mat/item they're primarily interested in, my favorite activity is to post bait items (ie, a honey pot) on the Auction House right after they log out. Wait about 20 minutes to see if someone else quickly snags them up. If their main logs back in, remove the items from auction. And then repeat after they log off again. =]

The other option is to post competing items (undercut) right after the log off for a MUCH better price (you need the user to buy them all out rather than just undercut you). This works really well with Inscription, especially since you'll make a little profit if his/her alts buy them all out. Once again, pull the items when the main logs back in.

Sell Them Services

Once you've established the types of mats they need to buy (e.g. herbs for inks, leather/minerals for crafting, enchants, etc.) offer to be a regular provider for their needs. Create a level 1 character named "Funbank" or "xyzbank", and whisper them saying "Hey you bought a bunch of my herbs the other day.. if you want, I can keep getting them for you and COD them." Establish a fixed rate, and then ask if you should mail directly to them or one of their alts (that does the milling process for example.)

You don't even need to get them anything, just delete your throw-away toon if you wanted.

Or, you could sell them mats that you buy off the AH for cheaper prices, to gain their trust over time. It's also a good icebreaker conversation to get introduced to them, and then at a later date you can start getting more information about them and their other alts.

For example, joining their guild through them, or asking if they have any crafters to help you out (e.g. "Thanks for buying my stuff! Do you have any enchanters that need to level up btw? I have a bunch of (soulbound) gear that needs enchants." or "Can you craft this item?" then when you get the item, you'll see who crafted it.) There are a lot of ways to get them to log into their alts to help you out with something, if it's worth their while.

Creatures of Habit

This works surprisingly well depending on their professions. All players are creatures of habit, and whatever they do on one toon they'll repeat on all of their others.

They might frequent the same spot in Orgrimmar for example, hang out with the same people, frequent the same vendor or Inn. You have to follow them and visually monitor what they do to get an idea of their patterns. They might even login/logoff in the same area with their main and alts. If you see one character logoff next to a mailbox and another one log in - add them as a friend. =]

If you know they have a crafting profession on another toon, hang out next to the trainer / goods vendor / blacksmith / etc and see if a character logs in (or travels to the area) as soon as the main player logs off.

My other favorite process is to watch Jessica Sellers (Ink Trader) in Dalaran. There are hardly any people in Dalaran, and when a player (who posts Glyphs/Cards) logs off and I see a new player login just outside the Scribe shop - there's a 99.9% probability it's their alt. I've caught TONS of players this way and made some amazing discoveries from my competitors. =]

* Update: Relevant training video attached.

Daeity Blog FAQ's

Posted by Daeity On

When I'm not really researching anything, I'll check Google search history of incoming visitors to get a better idea of the type of stuff people are interested in (but can't find answers anywhere else.)

Mainstream news and information webpages all post the same old regurgitated garbage (plus it's hard to trust some of their information or reviews since the news website's parent company owns a stake in the game developers/publishers that they're writing about ). I like the idea of a small blog on the fringe that archives obscure or hard-to-find information. =]

Anyhow..

Here's a list of search criteria and responses. I'll keep adding to this page whenever I get the chance too.

--------------------------------------------------------------------------------------------------

Q: "how does WoW count active accounts for its number"

A: Here is Blizzard's official statement:

World of Warcraft’s Subscriber Definition

World of Warcraft® subscribers include individuals who have paid a subscription fee or have an active prepaid card to play World of Warcraft, as well as those who have purchased the game and are within their free month of access. Internet Game Room players who have accessed the game over the last thirty days are also counted as subscribers. The above definition excludes all players under free promotional subscriptions, expired or cancelled subscriptions, and expired prepaid cards. Subscribers in licensees’ territories are defined along the same rules.
So, it's based on any account that has a paid subscription fee, a first month's subscription, have an active prepaid card, or Game Room players who have accessed the game over the past 30 days.

- A paid subscription fee would include subscriptions that stay active until the end of the month (whether they are being played or not), at which point they become expired or cancelled. If your account gets banned and you purchase a new account during the same month, you had already paid for that first account's month, so it counts as two active subscriptions. (Note: it's estimated that at least 100,000 accounts per month are banned.)
- A first month's subscription is very common, Blizzard even revealed that only 30% of new WoW players make it past level 10. You can also imagine that many of the "first month subscription" accounts are farming/gold trading accounts that are banned (and subsequently recreated) quite frequently.
- "Active Pre-Paid Cards" are very tricky. Pre-paid cards purchased in North America and Europe never expire. You can purchase a card as a gift, and it can sit idle for an entire year without ever being used. Blizzard shouldn't count those as active prepaid cards, though, they would only be considered "active" once the user registers the code online.
- When they say "expired prepaid cards", they mean cards where the time on them has been used up already. (Since the cards don't have a time limit / future expiry date.)
- Pre-paid cards in China also never expire, and you can keep adding time to the card. Many Chinese WOW players have multiple accounts and prepaid cards since the game is free, and it's inexpensive to pay the hourly fees.
- The largest WoW subscriber base is in China (more than NA/Europe combined), and when you consider the massive number of unused pre-paid cards, the number of pre-paid cards per user, and the number of WoW accounts per user, it can completely skew what you define as the total number of worldwide subscribers. It's all about the definition. Blizzard's definition of "active subscribers" is 12 million, but if your definition means "real players", that number might be closer to 4-6 million for example.

--------------------------------------------------------------------------------------------------

Q: "will blizzard ban you for cross faction transferring gold"

A: Nope, feel free to do as much Cross-Faction trading as you want. But watch out for Neutral Auction House "snipers". Some users have bots monitoring the Neutral AH scanning expensive items and quickly buying them.

Install Auctioneer and make sure to enable the Quick Buyout feature. As soon as you post the item, just buy it out quickly on the second account. If you do it within 3 seconds, you won't have to worry about being sniped.

Sniping is perfectly legitimate, but botting is not. Test them out using bait items (ie, gems) and see if it's an automated activity (ie, sniping over several hours) and report them.

--------------------------------------------------------------------------------------------------

Q: "wow ban whole account or char"

A: The entire account gets banned.. it might be temporary or permanent (Blizzard will send you an email to identify which). If it gets perma-banned, feel free to create a new account with the same IP address, computer, and billing information.. Blizzard doesn't care.

If you're using multiple accounts for botting/exploitation, however, you'll want to keep information unique on each account.

--------------------------------------------------------------------------------------------------

Q: "finding out if a player has alts on wow"

A: I've created a new post about that activity: link.

--------------------------------------------------------------------------------------------------

Q: "if i bu the digital cata do i have to install classic"

A: Yes. You need all of the previous expansion packs to play Cataclysm. The Digital Cataclysm download is actually just the 4.0 patch, so you would already have it installed if you had TBC and WOTLK. You really just need the buy the expansion pack to unlock new content/features for your account.

--------------------------------------------------------------------------------------------------

Q: "when do we know when new realms are coming up in World of Warcraft"

A: New realms as part of "Cataclysm growth" would include the months up to around May 2011. When WOTLK was released in November 2008, new realms were created in January and March of the following year. If there are no new realms by Feb/Mar, it's a strong sign of declining subscriptions.

--------------------------------------------------------------------------------------------------

Q: "when you buy cataclysm do you get game time"

A: No. You have to purchase the expansion pack and purchase additional game time to continue.

--------------------------------------------------------------------------------------------------

Q: "does the digital upgrade to burning crusade include a month subscription?"

A: Nope, same with Cataclysm. The expansion packs never included a free month's subscription unfortunately.

--------------------------------------------------------------------------------------------------

Q: "where's my free month with cataclysm?"

A: Sorry, you don't get a free month with Cataclysm. =[

--------------------------------------------------------------------------------------------------

Q: "death knight overpowered cataclysm"

A: Yup, but they'll be nerfed within a few months after Christmas. Blizzard did the same thing with WOTLK after Christmas/New Years sales dwindled.

--------------------------------------------------------------------------------------------------

Q: "why hasn't free wow servers upgraded to the new patch?"

A: Cataclysm is still very new - it launched just last month. Have patience.. it might take another few months (there are very few programmers developing those private servers). Even regular content updates can have a 2-4 month lag.

--------------------------------------------------------------------------------------------------

Q: "does blizzard look at your ip when gold buying?"

A: They can see your IP, but they really don't care. If you get banned, just create a new account from the same IP address. Gold selling/buying in WoW is actually pretty safe - it's when people REPORT you (or associated accounts) that accounts get banned.

If you're transferring gold with a gold farming account, you might get banned by association if someone has reported them for exploitation, botting, or farming.

Blizzard's wants to provide a pleasant customer service experience, so most of their activities are in response to complaints (not proactive monitoring and policing). They don't go out looking for trouble, unless it's affecting someone's game-play experience.

The only other thing they have is place is automated software detection (Warden) and server side metrics. Reporting is far more effective however.

--------------------------------------------------------------------------------------------------

Q: "do first day sales include preorders?"

A: Yes, Blizzard incorporated preorders into their last Expansion Pack sales figures as well. Cataclysm "first day sales" also included Digital Downloads and the first 3 days of sales in NA/Europe/Asia/etc.

--------------------------------------------------------------------------------------------------

Q: "what happens if blizzard catches you botting?"

A: You might get a temporary or permanent ban. Botting is pretty safe as long as no one catches and reports you. If you're botting, you should always be sitting near the computer to monitor (ie, whispers, other players in the area).

--------------------------------------------------------------------------------------------------

Q: "what happens to my characters if i get banned wow"

A: If it's a permanent ban, they're all gone for good. You can create a new account though with the same billing information, Blizzard just banned that one account. You can appeal the decision (low probability) - mmowned.com has some strategies on getting accounts unbanned. It really just depends on who you talk to though.

--------------------------------------------------------------------------------------------------

Q: "why doesnt blizzard ban botters"

A: Blizzard does ban botters quite frequently, but you have to REPORT THEM. Blizzard doesn't pro-actively police WoW (they don't have enough resources available) and they rely on players reporting the activity.

Once you create a support ticket, it will typically take 2-4 days before anyone even READS the ticket. Once they read the ticket, it gets sent into another queue. It might take a week or two before they even investigate the account. They will monitor the player for a short amount of time (as there are MANY other accounts that need investigation), and come back to them later if they don't see any botting/exploitation.

Keep in mind that there are a lot of FALSE botting reports too. Invisible node theft, for example, might just be a normal player in a different phase.

Blizzard can tell right away if a player is botting/cheating though (player statistics for example reveal a lot), but they need to be caught red-handed when botting (sometimes they make mistakes though, but it's rare). Once that happens, Blizzard's judgement is swift and decisive.

It's just like racial epithets in Trade Chat - it's completely against policy and Blizzard WILL ban players for this type of activity, but it HAS TO BE REPORTED!

--------------------------------------------------------------------------------------------------

Q: "alchemy specializations 4.0.1 removed"

A: The icon's were removed in 4.0.1, but the specializations still existed. (I can confirm that transmutations still worked back then, even though "Transmutation Specialist" wasn't in my spell book anymore.)

In the latest patch, though, your alchemy specialization should be fully visible in your Professions tab.

--------------------------------------------------------------------------------------------------

Q: "percentage of WOW player races"

A: You can find that kind of census information for NA/EU on Warcraftrealms.com.

--------------------------------------------------------------------------------------------------

Q: "starcraft 2 13 million digital sales"

A: SC2 sold 1.8 million copies on the first day (excluding Korea). Figures include both Pre-Sales, Retail, and Digital Purchases.

--------------------------------------------------------------------------------------------------

Q: "is there a way to keep your real id friends from knowing your on"

A: Unfortunately, no. Simply remove them as Real ID friends and give them a really good excuse so that they're not offended.

--------------------------------------------------------------------------------------------------

Q: "world of warcraft player figures inaccurate"

A: Yeah, no kidding. Look at my earlier posts of actual WoW subs.

--------------------------------------------------------------------------------------------------

Q: "world of warcraft retention rate"

A: Blizzard stated that only 30% of new World of Warcraft players make it past level 10.

--------------------------------------------------------------------------------------------------

Q: "will blizzard ban for sending large amounts of gold"

A: Depends on the amount, but it has been known to happen. For example, purchasing a 150,000G item on the Auction House can result in a ban. It depends on the investigator and sometimes it's just for large "unusual" purchases that are outside of norms. Other times, it's for purchasing an item from an account linked to gold farming/selling (but it's impossible for you to know this.) I wouldn't recommend transferring more than 50k gold at a time if it's for a friend.

--------------------------------------------------------------------------------------------------

Q: "I bought cataclysm from blizzard can I install it in 2nd pc"

A: Yes, you can install it on multiple PCs and login with your account on any one of them. You can also login to your WoW account from a friend's PC (or an internet cafe), since they'll all be running the same updated version. (Be wary of key-loggers on the PCs that you use however.)

After you install World of Warcraft, all of the Expansion Packs, and the latest patches, you can should make a backup of the entire WOW Install Folder. You can make WOW portable, and even copy this folder to anywhere you want and run it. You never need to reinstall WOW and you can save yourself hours of work.

You can also copy the WOW folder to a USB Portable Harddrive, and run WOW from the harddrive (full resolution, no issues). That way, your WOW install (and all plugins/interface configurations) can be "on the go" with you wherever you go.