Hacked!

Continuing yesterday’s discussion about RMT, Tobold has a follow-up post up about whether or not illegal RMT hurts the economy. The long and the short of his argument is that with RMT, net new gold is not created, merely shifted around. The problem is that Tobold wishes to completely disregard “Hacking” as one of the unintended consequences of Illegal RMT.

Thus whenever I mention gold farmers, somebody immediately starts shouting about hackers, which is *not* the same. While everybody knows somebody who know someone who has been hacked, few people bother to count that they also know 99 other people who *never* got hacked. Simple back-of-an-envelope calculations of the amount of gold stolen by hackers compared to the amount of gold sold every day in World of Warcraft shows that the large majority of sold gold is produced by farming and botting, not by hacking and stealing.

Well, you can write my name down as one of those people who *DID* get hacked. And no, Tobold, while illegal RMT is *not* the same, it is at least partially supported through account hacking.

No amount of minimization on your part is going to change the fact that without RMT, the account hacking problem would be far less severe.

Getting Hacked!
I don’t know if I’ve written about this on the blog. It happened maybe a year or so before I started blogging and was shortly after the Burning Crusade expansion. The crazy part is that prior to getting Hacked, I always believed that such things only happened to the ignorant, stupid or naïve. Being a very technical saavy person, this was something I was very confident wouldn’t happen to me.

I used a firewall. I used an Anti-Virus program. I regularly kept my OS up-to-date. I had a unique password for Warcraft, which I only used for Warcraft. The password was strong, using alphanumeric keys to form a non-dictionary word. In short, I was doing all the things a security minded professional would tell you to do.

And it didn’t stop me from having both my real-life Bank Account and my World of Warcraft account hacked within about a three hour window of each other. The crazy part about the bank account is that I could see the wire transfer as a debit, but the bank couldn’t reverse it. The even crazier part is that whoever did the hacking didn’t feel that getting real money was enough and stripped every single character (on multiple servers) of every item and gold piece.

The Logic of Everybody
When everybody knows something, it must be true, right? And when everybody doesn’t know something, that means it doesn’t exist?

The logic of "Everbody Knows" is fuzzy logic at best because it’s not really based in anything other than our perception. All Tobold can really do is apply HIS experience with "Everybody Knows" and the number of people HE knows that have been hacked to form this argument.

The result in this case is to seemingly quantify how many people are getting hacked in an effort to say it’s really not a contributor to RMT. A point which, in my opinion, is an invalid one because all it takes is one person on a hacked account who knows how to “dupe” items to create a large amount of gold.

The larger issue, that Hacking occurs BECAUSE OF RMT, is entirely ignored.

Oh, and of course, we have no actual evidence to support his claim that Hacking is far less common than we believe. We only have his logic that because only a few people we know have been hacked, not everyone, then it must be a small group. And yet, it must be a big enough problem for Blizzard to address it as their top concern regarding illegal RMT and for them to have dedicated staff on hand JUST to deal with account hacks.

In short, the "Everybody Knows" argument really only speaks to his own practical experience and not the quantifiable facts he is implying. Is cancer less of a problem because I don’t know anyone who has cancer?

When a Small Number has Big Meaning
I distinctly recall a debate class I had in High School. I don’t remember the exact nature of what was being debated, but much of the arguing was about the magnitude of the issue. Our side was saying the number was much higher, their side was saying it was much lower. No one really appeared to be able to win the point.

Then my partner stepped up and asked, “Isn’t your number a big number too?”

His point being that magnitude is measured by both quantity and intensity. Or in other words, the importance isn’t just measured by how often it happens but by the severity of the impact when it does happen. For example, products are recalled all the time when only a very small percentage of them will cause death or injury.  It's the death and injury part that makes it important enough to recall every unit.

To my way of thinking, that’s the critical flaw in Tobold’s reasoning. Even if we accept that Hacking happens less often than we believe, the impact from Hacking is severe enough that we shouldn’t willingly support anything that contributes to it.

That’s obviously true on a personal level for the person getting hacked, but it’s also true at the a broader level. A Hacked account is a free account – a throwaway – that can be used to do the very worst things that would get a normal player banned. As mentioned above, ‘duping’ is something that has been possible in Warcraft – you are just likely to get caught. But if you don’t care if you are caught, you could create quite a bit of gold out of nothing.

Thus, one hacked account can easily be a very large source of gold for illegal RMT.