A couple of years ago, when I signed up to online banking, my bank recommended I install something called Trusteer Rapport as extra security - I did, not because I think it'll make everything secure, but because if I ever have a problem with online banking, I can show I did everything they wanted. Since then, it's given me weekly reports of it's activities, and almost every week, usually several times, there's one thing it picks up on. To quote the latest of it's reports :
The following processes tried to capture an image of a protected website. Trusteer Endpoint Protection blocked these screen capture attempts. These processes are not necessarily malicious. Some applications may take screen shots as part of their regular operation. There is no action you need to take. Trusteer Endpoint Protection will continue blocking screen capturing attempts as long as sensitive information is presented.
- Jun 07 2014 18:09: client.exe is permanently blocked from capturing sensitive data.
- Jun 07 2014 09:17: client.exe is permanently blocked from capturing sensitive data.
I have only one file called 'client.exe' on my system - guess what it is...... I did ask EA a while ago why this kept being flagged up, but they never replied.
When UO was moved over to the account management system that also housed Warhammer Online and Dark Age of Camelot, UO subscribers were required to agree to a series of new legal agreements that were updated several times over the first year or two we used that system. One of those agreements was a new Privacy Policy.
I remember a few years ago noticing that there was new language in the Privacy Policy regarding EA's possible collection of data to combating cheating and fraud.
The current Privacy Policy at
http://www.ea.com/privacy-policy includes this language in Section IV.6:
"6. Anti-Cheat and Fraud Prevention Technologies
"EA strives to provide a safe and fair gaming environment to all players of its games. To prevent fraudulent activities and behaviors that may negatively affect the experiences of a player, EA is authorized to use "anti-cheating" software, or applications for the prevention of fraud for our internet presence, during the use of our online products and/or services (including online games), and mobile platforms.
"At login to EA online products and/or services, during the setup of an Origin account, and/or at the point of sale, EA may collect data about your device in order to create a hash of machine components. Information collected for this purpose shall not be stored in retrievable form. EA uses the collected information for the prevention of fraud, and for authentication purposes. EA may consolidate the machine hash created for this purpose with your Origin account; data consolidated this way will not be shared with any other third party, and will be used exclusively for security, fraud prevention and authentication purposes by EA."
And the first paragraph of Section IV.4 reads as follows:
"4. Analytic Metrics Tools and Other Technologies
"EA also uses its own proprietary analytic metrics tool and other third party analytics technologies to collect information when you use our online products and services and/or play our games on your PC, game system and/or mobile device. These tools and technologies use server log files, web beacons, cookies, tracking pixels and other technologies to collect and analyze certain types of information, including cookies, IP addresses (including for purposes of determining your approximate geographic location), mobile or other hardware device ID or other device identifiers, browser types, browser language, information passed from your browser (if any), referring and exit pages, and URLs, platform type, click information, information about your media, peripheral hardware, software and/or applications installed on your machine and/or device, domain names and types, landing pages, pages viewed and the order of those pages, advertising conversion rates, the date and amount of time spent on particular pages, other Internet and website usage information, game state and the date and time of activity on our websites or games, information about how your game is used, including game metrics and statistics, feature usage and purchase history, as well as unique hardware identifiers such as MAC Address, mobile unique device ID (if applicable) and other similar information. "
While it is indeed very disturbing to think that screen shots are being taken while we have the client running, I really wonder if EA would just fall back on these sections of their Privacy Policy if someone really wanted to get pushy about it.
Aurelius, does the program which you're using which has provided these notifications about the client.exe file's activities give you any other details of what information is being viewed and/or captured?