lol hacked accounts always make me laugh. I play EVERY game that comes along, and sometimes have as many as 5 accounts at any given time,. and I have NEVER had an account hacked.  And I have NEVER used an authenticator or any other security measure.

In fact I hardly ever even enable virus protection on my computers unless something makes me super suspicious. 

Why don't I get hacked?  Why don't I get viruses?

Because I use my head, I don't go to sites or blogs that don't feel right, I don't open email attachments, I don't download game addons.

I don't go to gold buying, or power leveling websites, and omg I NEVER share my accounts with anyone else.

Originally posted by someforumguy

Originally posted by gaugemew

This is why we need tests before people are allowed to join discussions.  Some people in here clearly have no clue about client side keyloggers and about what a game company can do about them.  I would rather have stupid people get compromised than have blizzard all up in my business telling me I can't visit certain websites, or open certain e-mails.

Interesting example. Shipping authenticators with the box would add an extra layer of security against keyloggers.

Anyone who claims to know how secure his own pc is (provided you use Windows and surf the net),  is naieve. You can pick up a drive by infection quite easily if you are unlucky. Even from trustworthy websites if the wrong ad shows up. A virusscanner isn't 100%, especially not with new threats.

The problem with having to buy an authenticator afterwards has to do with possible shipping costs. If you as company are really concerned about your customer's account security, you should try better. This is why I think it would be better if they were shipped with the box.

 They cost $5 if you don't have a smart phone, and I believe you can even use your home phone if you want.   They aren't free to produce, and at no point was blizzard ever even required to make one in the first place.  In fact, if they never did make one you people wouldn't even be saying they should be required to give them away, let alone have anything outside of blatantly accusing blizzard of lying about security issues.

If you can afford to buy the game, you shouldn't have any trouble affording another $5 for an authenticator.

Not to mention that most of the time you're not getting your Bnet account hacked by a keylogger.  It's people getting emails and passwords from other sites.  To many people still don't understand that the easiest way to prevent your accounts from getting hacked is to not use the same email/ password combo for every website you register on.

I learned my lesson after curse got hacked and email and passwords of registered users stolen.  Shortly after my WoW account was hacked.  Today I use multiple emails and everything has a unique password of random letters, number, and symbols. 

I even had blizz remove the frigging authenticator from my account because I got sick of having to load the damn thing up and rush to type the code in before it changed on me.  I'm lazy, and I found it inconvenient, but since I learned what not to do to protect my crap I haven't had any issues.

If it's your fault it's your fault.  It's ironic that the OP would blame Blizz of placing the blame elsewhere when all I see is a bunch of people who don't grasp the simple concept of responcibility.   It's your PC, learn to protect it and quit placing the blame elsewhere.

Originally posted by Mephster

When it is online only it is Blizzard's responsibility to provide security for the users. I can't believe some would even argue that. Keylogging or not, it is their responsibility to keep it secure like they claimed they would. It is only going to get worse when the RMAH releases soon.

whoa, wait a minute.

If their servers are compromised because the perpetrators are hacking blizzard then "yes" it's their fault.

But if a player loses their password or has their account hacked because their own system is compromised then there is nothing Blizzard can do. I don't necessarily see the need for Blizzard to foot the bill for an authenticator. Especially since, if people are careful, there is never a need for such things.

If you had bank info and investor info on your computer you wouldn't be going to all sorts of unknown websites and downloading who knows what. Treat your game accounts in a similar way.

 Never been hacked. And with the amount of stories from people about howbad security is, why not get an authenticator? Should you have to? Perhaps not ... but the thing is 7 bucks ... I picked one up as soon as it was available ...still havent been hacked. If you plan on or do play very popular Blizzard games that hackers target ... just pick one up FFS. Hell any current popular game that offers one for that matter ......

Can't you use your mobile phone as authenticator anymore?

Originally posted by Fessor111

Can't you use your mobile phone as authenticator anymore?

Yes you can.

Ok thanks

Originally posted by Mephster

When it is online only it is Blizzard's responsibility to provide security for the users. I can't believe some would even argue that. Keylogging or not, it is their responsibility to keep it secure like they claimed they would. It is only going to get worse when the RMAH releases soon.

Keep what secure? Them or you?

Did their server security get breached or did yours?

If you buy a car and leave the keys out in the open, someone takes the keys and drives off with your car, is that the fault of the car maker or you?

Lets say someone registeres to this website. Lets say they use the same email address as in WoW. Lets also say they use the same password.

How can Blizzard protect against that?

They offer the authenticator. If you take it, you better have it require authentication every login attempt too. This is a free service they provide or if you want the physical token you can buy that. So they have, in fact, provided security.

This thread is rife with Blizzard fanboyism.

Honestly with the RMAH Blizzard was obligated to include an authenticator with purchase. Not doing so is going to make them liable down the road should someone lose items/in game currency that is worth a hefty amount of rl currency.

Other game companies have taken big hits over issues like this. Blizzards only way of covering their arses was to include 1 authenticator with purchase this way they get to say they took every concievable pre-caution in protecting other peoples property since it has real life monetary value.

They did not though and are likely relying on a flimsy terms of service that has yet to be effective in keeping other companies from getting hit hard by lawsuits about the above.

Blizzards big mistakes were ..

1) Not including an authenticator to cover their arses.

2) Allowing people to pull cash out of the RMAH system.

Those things combined can lead to a very bad day down the road lol.

Originally posted by Torrmwyre

This thread is rife with Blizzard fanboyism.

Because truth hurts? 

This has nothing to do with Blizzard.  As stupid and/or naive ignorant people getting their accounts hacked in every friggin online game !  This is nothing new.

And as long as these people keep pretending it's NOT their fault, keep sticking their heads in the sand and refuse to acknowledge the error is theirs and don't take action....

...they will continue to be hacked... again.... and again.... and again.

But sure.... if slandering the game studio, in this case Blizzard makes you feel better.... be my guest. In the end tho, it won't help you nor prevent you being hacked again in any online game you might play!

Originally posted by Uhwop

Originally posted by someforumguy

Originally posted by gaugemew

*snip*

*snip*

 Not to mention that most of the time you're not getting your Bnet account hacked by a keylogger.  It's people getting emails and passwords from other sites.  To many people still don't understand that the easiest way to prevent your accounts from getting hacked is to not use the same email/ password combo for every website you register on.

 

If it's your fault it's your fault.  It's ironic that the OP would blame Blizz of placing the blame elsewhere when all I see is a bunch of people who don't grasp the simple concept of responcibility.   It's your PC, learn to protect it and quit placing the blame elsewhere.

 

When I quit WoW I tested it. I changed my password to the one I used for this site.

My WoW account is now banned. (its been restored)

Keylogger? No. Virus? No. Bad practice? Yes.

If you dont want your account "hacked", dont be dumb.

Originally posted by GrayGhost79

Honestly with the RMAH Blizzard was obligated to include an authenticator with purchase. Not doing so is going to make them liable down the road should someone lose items/in game currency that is worth a hefty amount of rl currency.

Other game companies have taken big hits over issues like this. Blizzards only way of covering their arses was to include 1 authenticator with purchase this way they get to say they took every concievable pre-caution in protecting other peoples property since it has real life monetary value.

 

They did not though and are likely relying on a flimsy terms of service that has yet to be effective in keeping other companies from getting hit hard by lawsuits about the above.

 

Blizzards big mistakes were ..

1) Not including an authenticator to cover their arses.

2) Allowing people to pull cash out of the RMAH system.

Those things combined can lead to a very bad day down the road lol.

A hell lot of people who bought Diablo 3, also played previous games and most likely already have an authenticator!  Like me and everyone else I know who play games.

So why would I need another authenticator?  Every time you log into Battle.net you get face smacked regarding secuirty and the authenticator!

Every local gamestore also sells them for just 5 bucks!  Gamestop stores have them hanging in the shelves right next to Blizzard's games.

You must be really blind to miss all this.

A guy a few post up said if the game is online only its the game companys responsibility to stop people from hacking your account. So let's all post our usernames and password to the mmos we play here and we can blame said company with a online only game for not stopping other's from looting us in game. SMH

Originally posted by JeroKane

Originally posted by Torrmwyre

This thread is rife with Blizzard fanboyism.

Because truth hurts? 

This has nothing to do with Blizzard.  As stupid and/or naive ignorant people getting their accounts hacked in every friggin online game !  This is nothing new.

And as long as these people keep pretending it's NOT their fault, keep sticking their heads in the sand and refuse to acknowledge the error is theirs and don't take action....

...they will continue to be hacked... again.... and again.... and again.

But sure.... if slandering the game studio, in this case Blizzard makes you feel better.... be my guest. In the end tho, it won't help you nor prevent you being hacked again in any online game you might play!

No, you're actually completely wrong.

This is a Blizzard problem because it is effecting paying customers. Not because some people got mad that they got stuff stolen or griefed. Are they dumb for clicking on that obviously fake email/ad? Of course, but is Blizzard entitled to more or less say F*** Off behind pretty words? Not really.

Now, I understand that people on this forum are completely 1-sided and seem to never look at something from another person's perspective, but I'm actually Loling at how many of you would change sides if this minor hacking problem turned into a huge issue.

Fact: Blizzard is restoring accounts to a point prior to the problem.

Issue: anyone can come on a forum and claim they are one of the masses to get hacked. Causing fuel for the fire so to speak. Let's see some people who emailed blizzard or called and blizzard told them sol your not getting jack back.

Buy an authenticator or if you have a smart phone (I know you have one) just get the authenticator app. You're other choice is to get smarter when it comes to protecting yourself from keyloggers etc..

Actually I do think they have some amount of responsibility for one major reason and a few minor ones.

The major reason is that they allow repeated logons without locking down the account (from that IP range).  In essence this opens the door to brute forcing passwords.

The minor reasons are that the passwords are not even case sensitive.  This makes the hacking of passwords easier.

The other minor reason is that they use the email address as the login name.  If you are allowed to use a handle (not shown anywhere) as your login then hackers need to guess two things not one.

----

In essence this means that you REALLY have to be careful with your passwords to the battlenet. 

If you use a word or even 2 words as your password -- IE if your password is "redclematis" you are extremely easy to hack under the current system.  That password would be sufficient in a system where you were limited to 5 attempts -- but where infinite attempts are allowed there are only a finite number of words.

Is someone who uses a password like "redclematis" at least partially responsible for being hacked because they didnt take enough care?  Sure.  But not everyone knows to make passwords like "5jd0sxa2pfs"  nor can everyone easily remember such a password -- especially when they have many passwords that they need to remember.

Originally posted by Xzen

Buy an authenticator or if you have a smart phone (I know you have one) just get the authenticator app. You're other choice is to get smarter when it comes to protecting yourself from keyloggers etc..

getting authenticator doesnt help

problem is when you join or create public games these "hackers" can read your real id and exploit/copy it somehow

next time you log into the game seeing your char is naked and have strange names in thier friendlist

thats how few of my friends was "hacked" by joining public games

Originally posted by Torrmwyre

Originally posted by JeroKane

Originally posted by Torrmwyre

This thread is rife with Blizzard fanboyism.

Because truth hurts? 

This has nothing to do with Blizzard.  As stupid and/or naive ignorant people getting their accounts hacked in every friggin online game !  This is nothing new.

And as long as these people keep pretending it's NOT their fault, keep sticking their heads in the sand and refuse to acknowledge the error is theirs and don't take action....

...they will continue to be hacked... again.... and again.... and again.

But sure.... if slandering the game studio, in this case Blizzard makes you feel better.... be my guest. In the end tho, it won't help you nor prevent you being hacked again in any online game you might play!

No, you're actually completely wrong.

This is a Blizzard problem because it is effecting paying customers. Not because some people got mad that they got stuff stolen or griefed. Are they dumb for clicking on that obviously fake email/ad? Of course, but is Blizzard entitled to more or less say F*** Off behind pretty words? Not really.

Now, I understand that people on this forum are completely 1-sided and seem to never look at something from another person's perspective, but I'm actually Loling at how many of you would change sides if this minor hacking problem turned into a huge issue.

So what do you want Blizzard to do?  Lock every account that has not an authenticator attached to it? And so effectivily FORCE everyone to buy an authenticator or use the software based one?

I personally wouldn't mind!  But I can see this is going to piss off a lot of people who refuse to use it or don't feel the need to use it!

Basically, if you are NOT stupid and use different AND strong passwords for different sites, NOT use the same email everywhere and DO NOT click on links within phising emails, nor visit shady websites... keep your PC up to date with Anti Virus and scan regularly.... then technically you actually would not need an authenticator!

But as i am too lazy to remember over a dozen different passwords (already need to in my every day job as IT consultant), I have an authenticator for almost every MMO I play and/or have enhanced security enabled (like with Aion's pincode system).