FR EN ES
Browse forums 
Ankama Trackers

Redshell

By Oamoka#9480 June 11, 2018, 08:38:40
I was just informed that there is a spyware called redshell that appears in a lot of games. Krosmaga turns out to be one of those games. This program apparently records details about your computer settings, and the data does not have to be encrypted before being sent anywhere.
I don't know about anyone else, but I'm not happy about Ankama putting spyware on my computer. I'm also fairly certain they never told us about it, because there are no hits for it on the forums (well, one hit in English, but it didn't show me what that hit was).

Please, Ankama, talk to us about this. Tell us why you've done this, why it's only in Krosmaga, and why you didn't actually tell us about it.

You can find evidence of redshell under \YourUserName\AppData\Local\Ankama\Krosmaga\game\Krosmaga_Data\Managed and the file is called RedShellSDK.dll, at least on my computer.
References:
Ref 1, Ref 2, Ref 3
5 0
First Ankama intervention
Hello everyone.

Sorry for taking so long to answer your questions. And at the same time, thank you for your feedback on this issue which, I gather, is really important to you.


I think the first question to answer would be “why use Redshell in the first place”?

Redshell was a convenient way for us to gather a specific type of data for our acquisition program. Despite popular belief, yes, we do advertise Krosmaga on various supports, and Redshell helped us to gather data to check if these campaigns were successful. Redhsell was only used for the Steam version of the launcher, and was never used in the stand-alone PC/Mac version, nor with the mobile version. 

What data was gathered for us? Only a relevant few:
  • Your Steam ID (not your login or password, only your ID number);
  • When the game was first installed on your computer;
  • If you have completed the tutorial of the game;
  • If you have made any in-game purchase.


We’d like also to reassure you that Redshell isn’t a virus or malware that we had no control of. It was activated only as you launched the game, if we asked it to do so (which was only during certain campaigns), and shut down afterwards; we didn’t use it to run on the background of your computer for data retrieval or keylogging purposes. This was never our intention.

However, we understand your concerns about data privacy and the use of Redshell in general, and we apologize for this situation. We appreciate that you were honest in your feedback about it, and we thank you for this.


As for concrete actions, Redshell will be removed from Krosmaga during our next patch (scheduled in early July). In the meantime, if you desire to play Krosmaga but avoid any connection to the program, you can still use the stand-alone client, which doesn’t use Redshell.

Thank you for your understanding. 
See message in context
Reactions 19
Score : 3266
Why though?
1 0
Score : 2995
I'm still looking into the issue, but here's what redshell has to say for itself, at least:
https://redshell.io/gamers

For the record, if you have been saying that krosmaga needs to work on their advertising, that's what redshell is for, spyware or no.
It tracks effectiveness of different forms of advertising by monitoring behavior, and linking your game IDs to your IP address.
It IS tracking you, but it is not running malicious code on your computer itself, at least, not while you aren't playing krosmaga. It records details about your computer and your userID while you are running the game and uses them to make inferences about your behavior when combined with your IP address.

That's all I know at the moment.
2 0
Score : 195
every ankama game upload "bugreports" and startup statistic(same like webbrowser) to amazon cloud
its usual statistic for games

and yes- you can use somethink like "wine"(in linux), or Virtual box(or any other virtualization), or "individual PC just for games"
its isolate "game program"
1 -2
Score : 57
If Ankama need to work on their advertising, this is not the right way to do it. Putting spywares in their game that share it with third parties is not acceptable to me. Just because we live in a world of increasing violation of privacy does and data theft does not mean we should just resign to it.

 I would also like to hear from Ankama about it, please tell us. What are exactly the data collected, how is it used, how can you even make sure it is not shared/sell to others since it is not send to them. And most importantly, if they plan to remove or not. Thanks.
3 -1
Score : 195
visiting google.com you webbrowser send absolutly same data to google

if this is spyware- then you browser also
1 -2
Score : 109
Guys, you know... I've read terms and conditions of.. you know like agreement between ank and user and found this paragraph:Ankama may have recourse to third-party service providers who collect your personal data in Ankama's name and on behalf of Ankama, or with whom Ankama will share your data, in a secure manner, notably with the aim of ensuring the completion of the tasks necessary to execute your order, deliver products, process your payments, ensure management of customer relations, provide a chat messaging service, fight payment fraud, provide advertising services, send you text messages (notably to recover your login information), or even propose surveys.

Actually, if u confirm this, u r informed that "Ankama may have recourse to 3-party service providers who collect your personal data in ... share ur data WITH AIM OF ENSURING ... (to) PROVIDE advertising services." 

in fact, this can be named like selling info for some payment, so the're clear at this point.
normally, from a side of morale they're not. But, lets not judge them, just because the decided to make money on us (actually, im f-knly surprised).

P.s. even if there is no virus code, third-party programm is installed on our devices without agreement with us. Yep, today there is no virus. And tomorrow.. maybe. But who knows mb some hackers will make fake update and after that it will download u secret cia material or make ur device to mine bitcoins. Who knows. Sooo, u got it.. 

thats just a minus to their 'carma', we all should make right conclusions, that effect on them in future.
1 0
Score : 195
Terms of Sony and Ubisoft (that I read) tell you that "they can do anythink with you data(full HDD, not just game) include uploading all data to their servers" someone even care?
1 -2
Score : 57
 
S48GSII|2018-06-15 01:49:18
visiting google.com you webbrowser send absolutly same data to google

if this is spyware- then you browser also

My browser doesn't install spyware on my computer without my knowledge and offers me several option to protect my privacy. Funny you mention google.com, the largest company dedicated to collection of data, absolutely not en example to follow in terms of protection of privacy. And I mention specifically that because rogue data collection becomes the norm doesn't mean we should just accept it.
1 0
Score : 195
cool story bro
1 -1
Score : 109
 
S48GSII|2018-06-14 14:51:37
Terms of Sony and Ubisoft (that I read) tell you that "they can do anythink with you data(full HDD, not just game) include uploading all data to their servers" someone even care?


Ubisoft collects and processes your personal information at different times when you interact with OUR (not any of device) Services. Generally, personal information is collected when:
  • (a) you use a Service,
  • (b) you create an Account,
  • (c) you make a purchase within our Services,
  • (d) you create user generated content,
  • (e) you watch advertisements within our Services,
  • (f) you sign up for a newsletter,
  • (g) you contact Ubisoft customer service and during technical support sessions,
  • (h) you enter into a contest or sweepstakes,
  • (i) you chat with other users of the Services,
  • (j) you participate in a beta or otherwise download a patch or a demo, or
  • (k) you share or otherwise contribute to our social media channels or other community websites.

https://legal.ubi.com/privacypolicy/en-GB linkYour privacy is very important to us and we WILL NOT reveal your personal data to third parties except when expressly authorised BY YOU to do so or in special circumstances.For further information concerning our use of personal data, please read our Privacy Policy carefully. Our Privacy Policy forms a part of these Terms and so may be revised as set out in Article 17. You may at any time consult our Privacy Policy on legal.ubi.com

https://legal.ubi.com/termsofuse/en-INTL link

they also provide ads services - you can say. but they provide their own products, dont 'share' with3-party guys. That's a big difference.And Sony. Yep, Sony shares info with 3-party. 

Third party providers of products or services that you subscribe to or access through our Services. For example, publishers of a game played on a network connected console may be provided your Account details (such as your PSN Online ID, country gender, age and "Friends" and block list) so they can operate their game; Third parties with whom we are jointly delivering services or features, such as sweepstakes, contests, promotions, or advertising. Third parties, who may contact you about products, services or other offerings that may be of interest to you.

https://www.playstation.com/en-us/network/legal/privacy-policy/ link

this info is for those, with whom they provide services. That's a big difference, if look at spy programm,  which is installed without informing us. The spy programm, we don't know about, like where this info will go, and.. what we'll get for this (ads, spam or servises that may be interested).

I'm not sure about, but seems u 've read only slightly and then said that 'crimson is red'. 
Plus, its at least indictment, started with author of the post. It's about (~) week, but we don't see any reaction. Atm, 'facts say for themselves'.

That' NOT indictment of Ankama. I didn't have the idea to troll/injure anyone here or everywhere


 
1 0
Score : 106
Guys, I think we need first see Ankama's comment about this situation
1 0
Score : 29
Kinda ironic how redshell gathers data on what's the best way to market your game while pushing away players at the same time. Anyway, uninstalled.
2 0
Score : 195
do you uninstall Windows also? include google webbrowser, and Android phone, and all MS products? do you?
1 -3
Score : 16
So, Ankama, where u? Where is your comment about this? A week passed u 100% have seen this topic. We need your comment.
1 0
Hello everyone.

Sorry for taking so long to answer your questions. And at the same time, thank you for your feedback on this issue which, I gather, is really important to you.


I think the first question to answer would be “why use Redshell in the first place”?

Redshell was a convenient way for us to gather a specific type of data for our acquisition program. Despite popular belief, yes, we do advertise Krosmaga on various supports, and Redshell helped us to gather data to check if these campaigns were successful. Redhsell was only used for the Steam version of the launcher, and was never used in the stand-alone PC/Mac version, nor with the mobile version. 

What data was gathered for us? Only a relevant few:
  • Your Steam ID (not your login or password, only your ID number);
  • When the game was first installed on your computer;
  • If you have completed the tutorial of the game;
  • If you have made any in-game purchase.


We’d like also to reassure you that Redshell isn’t a virus or malware that we had no control of. It was activated only as you launched the game, if we asked it to do so (which was only during certain campaigns), and shut down afterwards; we didn’t use it to run on the background of your computer for data retrieval or keylogging purposes. This was never our intention.

However, we understand your concerns about data privacy and the use of Redshell in general, and we apologize for this situation. We appreciate that you were honest in your feedback about it, and we thank you for this.


As for concrete actions, Redshell will be removed from Krosmaga during our next patch (scheduled in early July). In the meantime, if you desire to play Krosmaga but avoid any connection to the program, you can still use the stand-alone client, which doesn’t use Redshell.

Thank you for your understanding. 
Score : 3266
0 0
Score : -12
I like games, if you do too check this article out , it is just amazing to read. https://knowablemagazine.org/article/mind/2019/video-games-educational-benefits
0 -1
Respond to this thread