I wasn't sure where to put this, but I wanted to broadly warn as many as possible those that may be impacted and figured this may be the best place to do so. My apologies in advance if the location of this post is inappropriate.
Apparently Blizzcon this year is requiring use of a phone to enter and access checkpoints. There's an app they're requiring for that function and...
Well, it's not pretty.
Since no one seems to be going to the link and actually reading the cause for concern, for your convenience:
Took a glance at the AXS App permissions... It's... Bad. Spyware level bad.
Contacts
read your contacts
Location
approximate location (network-based)
precise location (GPS and network-based)
Camera
take pictures and videos
Wi-Fi connection information
view Wi-Fi connections
Other
receive data from Internet
view network connections
pair with Bluetooth devices
full network access
prevent device from sleeping
view network connections
read battery statistics
pair with Bluetooth devices
access Bluetooth settings
full network access
run at startup
control vibration
prevent device from sleeping
modify system settings
Wow. So the bluetooth permissions are going to be used to track you as you walk around the event. There will be bluetooth beacons hidden in places and your phone will detect them and the app will know where in the venue you are located even if your GPS is off. The same goes for Wifi Connections at key locations at the Venue. This is fairly common for medium and large venues. It gives the venue information on what was popular, how long people stayed in various areas, etc. But just because it is common doesn't mean this type of tracking is "ok", especially when that information is given out to companies that are not hosting the even. Most people have no idea this happens or how common it is.
The "Adjust System Settings" permission allows it to do things like... Turn on your GPS, turn on your wifi, turn on your bluetooth. Run at startup ensures it's background services will be up and running at all times, which can be used for tracking. Full network Access allows the app to send all of the tracking information out to the internet, including a list of every one of your contacts, your location history since the app was installed, the history of what wifi networks were in range since the app was installed, and your history of all of the bluetooth beacons placed around the event that you walked in range of.
Edit 1: The Full Network Access Permission is listed twice, which is odd. Additionally, you don't need "receive data from the internet" when you have "Full Network Access".
Edit 2: Blizzard... seriously what's going on here? Of all the ticket apps you choose the worst one with the most tracking?
Edit 3: Blue Post here says you can use the "Solutions Desk" if something is preventing you from using the App. I suggest using the Solutions Desk!
Edit 4: Final edit for today, I'm going to bed. I did some searching around and found numerous articles about what the app takes, and who it sends it to. In short, the most thorough write-up I found in about 30 minutes of searching states that the app scrapes of ton of data from your phone, including your first and last name, precise location (as determined by GPS, WiFi, and other means), how often the app is used, what content is viewed using the app, which ads are clicked, what purchases are made (and not made), a user’s personal advertising identifier, IP address, operating system, device make and model, billing address, credit card number, security code, mailing address, phone number, and email address. It doesn't say that it also takes your contacts but it would be trivial to do so. AXS's privacy statement says that they share/sell the information with a LOT of other companies (more details in the article I linked).
Edit 5: /u/Raytraced421 posted an excerpt of the Privacy Policy. Take a look at his post to read the whole section of what is taken and who it is sent to. The Privacy Policy mirrors what is stated in the article I linked in Edit 4. They disguise their intentions as being useful to the user, example: Show you discounts in a food court at your venue, but if you look past the PR they say that they are tracking your every move and share that with third parties, including personal identifying information. They also state that they save a profile on you and add to it as you use the app.
DO NOT INSTALL THE APP, GO TO THE SOLUTIONS DESK.
Apparently Blizzcon this year is requiring use of a phone to enter and access checkpoints. There's an app they're requiring for that function and...
Well, it's not pretty.
Since no one seems to be going to the link and actually reading the cause for concern, for your convenience:
Took a glance at the AXS App permissions... It's... Bad. Spyware level bad.
Contacts
read your contacts
Location
approximate location (network-based)
precise location (GPS and network-based)
Camera
take pictures and videos
Wi-Fi connection information
view Wi-Fi connections
Other
receive data from Internet
view network connections
pair with Bluetooth devices
full network access
prevent device from sleeping
view network connections
read battery statistics
pair with Bluetooth devices
access Bluetooth settings
full network access
run at startup
control vibration
prevent device from sleeping
modify system settings
Wow. So the bluetooth permissions are going to be used to track you as you walk around the event. There will be bluetooth beacons hidden in places and your phone will detect them and the app will know where in the venue you are located even if your GPS is off. The same goes for Wifi Connections at key locations at the Venue. This is fairly common for medium and large venues. It gives the venue information on what was popular, how long people stayed in various areas, etc. But just because it is common doesn't mean this type of tracking is "ok", especially when that information is given out to companies that are not hosting the even. Most people have no idea this happens or how common it is.
The "Adjust System Settings" permission allows it to do things like... Turn on your GPS, turn on your wifi, turn on your bluetooth. Run at startup ensures it's background services will be up and running at all times, which can be used for tracking. Full network Access allows the app to send all of the tracking information out to the internet, including a list of every one of your contacts, your location history since the app was installed, the history of what wifi networks were in range since the app was installed, and your history of all of the bluetooth beacons placed around the event that you walked in range of.
Edit 1: The Full Network Access Permission is listed twice, which is odd. Additionally, you don't need "receive data from the internet" when you have "Full Network Access".
Edit 2: Blizzard... seriously what's going on here? Of all the ticket apps you choose the worst one with the most tracking?
Edit 3: Blue Post here says you can use the "Solutions Desk" if something is preventing you from using the App. I suggest using the Solutions Desk!
Edit 4: Final edit for today, I'm going to bed. I did some searching around and found numerous articles about what the app takes, and who it sends it to. In short, the most thorough write-up I found in about 30 minutes of searching states that the app scrapes of ton of data from your phone, including your first and last name, precise location (as determined by GPS, WiFi, and other means), how often the app is used, what content is viewed using the app, which ads are clicked, what purchases are made (and not made), a user’s personal advertising identifier, IP address, operating system, device make and model, billing address, credit card number, security code, mailing address, phone number, and email address. It doesn't say that it also takes your contacts but it would be trivial to do so. AXS's privacy statement says that they share/sell the information with a LOT of other companies (more details in the article I linked).
Edit 5: /u/Raytraced421 posted an excerpt of the Privacy Policy. Take a look at his post to read the whole section of what is taken and who it is sent to. The Privacy Policy mirrors what is stated in the article I linked in Edit 4. They disguise their intentions as being useful to the user, example: Show you discounts in a food court at your venue, but if you look past the PR they say that they are tracking your every move and share that with third parties, including personal identifying information. They also state that they save a profile on you and add to it as you use the app.
DO NOT INSTALL THE APP, GO TO THE SOLUTIONS DESK.
Last edited: