Originally posted by slickbizzle

Originally posted by thekid1

Eurogamer writer gets his Diablo 3 account stolen.

This Diablo 3 soap is even better then Age of Conan and WAR right after release.

 

http://www.eurogamer.net/articles/2012-05-21-diablo-3-accounts-hacked-gold-and-items-stolen

I'm seeing a pattern.

 

If it is EA (or any other company): "Phail company is Phail! They should be shut down for their crappy security! They have lost my trust and business for life!"

 

If it is Blizzard: "Everyone knows that when accounts get stolen 99.9% of the time it is the users own fault. "

 

 

 

I, too, have been noticing the 'blizz can do no wrong' phenomenon going on in this thread.  There also seems to be a great deal of ignorance about this topic as well since people with authenticators have been reporting the vert same problem as well.

I definitely feel for all those D3 players out there, this has been one heck of a launch.

One more notch making me happy I decided to passed on this game despite how much I wanted to try and like it.

My D3 account got hacked as well. It happened this past Sunday around 12pm-2pm EST. As if he new when Im gonna be off. But he didnt get much since Im playing all 5 classes simultaneously. So I managed to finish 1st act with 3 classes and started with 4th class (Barbarian). All chars lvl 10-17. I never joined public game but I noticed he made my Barbarian join public game advanced  few quests and stole 1 legendary lvl 15 armor and yellow stuff of my Barbarian and stash plus 43k gold lol.  My recent "friends"  list shows AlufGolnedbe who was probably involved with my account hacking. Scary part is he can probably see me as well and my progressing even thou I "blocked communications".

I did report to blizzard and got response that they can restore my account but I lost patience after 2hr waiting and canceled ticket. I dont have authenticator but I have ordered one. I dont open suspicious links or sites, have antivirus , few different semi hard passwords etc. Of all mmo and online games Ive played I only got hacked in 2 games WoW and now D3.

Im not playing much now (waiting for authenticator) but if I get hacked with authenticator again than I guess Ill be done with Blizzard.

Originally posted by dubyahite
The reason that guy was joining games was that he was thecharacter they were dumping everything to.

The 60 in that case was already compromised and under the control of the hackers at the time.

Avoiding public games is not going to protect you. At all.

Originally posted by slickbizzle

Originally posted by thekid1

Eurogamer writer gets his Diablo 3 account stolen.

This Diablo 3 soap is even better then Age of Conan and WAR right after release.

 

http://www.eurogamer.net/articles/2012-05-21-diablo-3-accounts-hacked-gold-and-items-stolen

I'm seeing a pattern.

 

If it is EA (or any other company): "Phail company is Phail! They should be shut down for their crappy security! They have lost my trust and business for life!"

 

If it is Blizzard: "Everyone knows that when accounts get stolen 99.9% of the time it is the users own fault. "

Bloody hell, I'm learning multi-quoting, but you guys need to show me the tricks. I'm replying first to dubyahite, then to thekid1.

You're right there, the guy posted a movie on youtube, though it does not prove anything concrete at all, except that the accounts of some people are compromised. Nothing more then that. Here is the video for those curious: http://www.youtube.com/watch?v=f7aO-azPTjo

Anyway, the whole "sessionID"-thing sounds solid on paper, but people need more then just the sessionID to take over a session. What also boggles my mind, is that people find it completly plausible that all kinds of information can be read the moment someone joins a public game. As far as I know, you're connected with a server from Blizzard. I don't think that Blizzard connects you with a player that functions as a host, like you see in other games. If I'm incorrect on this, please point it out.

To thekid1, if you look at the Diablo 3 forums, it are mostly posts blaming Blizzard. In this thread a few posters, me included, try to point out it's mostly the players own fault. This is also the case with other games. For exampe, I've a lot of games listed on my Steam account. Therefor I use Steam Guard. Not many people I know use it though. Same goes for my Google Services. I use the two-way-authentication system they made available a while ago. I can't say I like it, but it's a lot more secure that way.

A problem is that it's easier to just blame the company in question, then to look what tools there're available to make your information secure in case that you get compromised. No one is perfect, hell, I've been compromised. Some fun spam got send from my Gmail a while back and I call myself knowledgable on this subject. I can admit it though and the fault was entirely on my side. A lot of players dare not to look at themselves, because then there's the problem of what else can be compromised and that's not really a pleasant thought. If you look at that Diablo 3 thread to which I posted the link earlier, multiple people make claims that their gaming system is brand new and they only used it for gaming. Someone, I believe the OP of that thread, mentioned that it was a MacBook, of one month old, only used for gaming. Sorry, but I find that hard to believe. That's one of the main reason I rather believe Blizzard in this case, then some random dude on the forums.

Everyone and thing with a D3 account even attached is open basically - this is solely Blizzards' fault.

Originally posted by Cavod

Originally posted by slickbizzle

Originally posted by thekid1

Eurogamer writer gets his Diablo 3 account stolen.

This Diablo 3 soap is even better then Age of Conan and WAR right after release.

 

http://www.eurogamer.net/articles/2012-05-21-diablo-3-accounts-hacked-gold-and-items-stolen

I'm seeing a pattern.

 

If it is EA (or any other company): "Phail company is Phail! They should be shut down for their crappy security! They have lost my trust and business for life!"

 

If it is Blizzard: "Everyone knows that when accounts get stolen 99.9% of the time it is the users own fault. "

 

 

 

I, too, have been noticing the 'blizz can do no wrong' phenomenon going on in this thread.  There also seems to be a great deal of ignorance about this topic as well since people with authenticators have been reporting the vert same problem as well.

 

I definitely feel for all those D3 players out there, this has been one heck of a launch.

 

One more notch making me happy I decided to passed on this game despite how much I wanted to try and like it.

Its the leniency of people nowadays to bend over and take it up the ass by any sort of authority and ask for seconds in the process.

Originally posted by Sidad

My D3 account got hacked as well. It happened this past Sunday around 12pm-2pm EST. As if he new when Im gonna be off. But he didnt get much since Im playing all 5 classes simultaneously. So I managed to finish 1st act with 3 classes and started with 4th class (Barbarian). All chars lvl 10-17. I never joined public game but I noticed he made my Barbarian join public game advanced  few quests and stole 1 legendary lvl 15 armor and yellow stuff of my Barbarian and stash plus 43k gold lol.  My recent "friends"  list shows AlufGolnedbe who was probably involved with my account hacking. Scary part is he can probably see me as well and my progressing even thou I "blocked communications".

 

I did report to blizzard and got response that they can restore my account but I lost patience after 2hr waiting and canceled ticket. I dont have authenticator but I have ordered one. I dont open suspicious links or sites, have antivirus , few different semi hard passwords etc. Of all mmo and online games Ive played I only got hacked in 2 games WoW and now D3.

 

Im not playing much now (waiting for authenticator) but if I get hacked with authenticator again than I guess Ill be done with Blizzard.

Sorry to hear that your account got compromised, but you suggested that your WoW account had been compromised earlier (at least, that's how I interpreted). If you've been infected with malicious software once, then just having an antivirus running is not really enough. Antivirus software is not the be-all-end-all solution to all problems. There's enough malware floating around that can be almost invisible to most antivirusses. Completly cleaning your system can be hard, completly wiping your system is sometimes the best solution. At least you're getting an authenticator, which is a good thing. I've suspicions that if your WoW account was compromised in the past, that the malware that caused it is still somewhere active on your system.

Wow hacking happened years ago and I changed 2 PCs in meantime. On top of that wow account was inactive for at least a year (on my side at least) when hacking happened.

Originally posted by Sidad

Wow hacking happened years ago and I changed 2 PCs in meantime. On top of that wow account was inactive for at least a year (on my side at least) when hacking happened.

 

I have said it before, so I will say it again! It doesn't even have to be your own PC.

If you have accounts on public forums / fansites and use the same password there, it is highly possible one of those sites have been comprimised.

As Battle.net and a lot of other account systems these days unfortunately use your email address as account name, they basically only need to get hold of your password.

That's why I am using authenticators on these account sites as extra layer of security.

If you don't want to pay for one, you can instead use the free software based authenticator.

Cheers

Originally posted by Cavod

I, too, have been noticing the 'blizz can do no wrong' phenomenon going on in this thread.  There also seems to be a great deal of ignorance about this topic as well since people with authenticators have been reporting the vert same problem as well.

 

I definitely feel for all those D3 players out there, this has been one heck of a launch.

 

One more notch making me happy I decided to passed on this game despite how much I wanted to try and like it.

I don't really put the blame with anyone myself. Because frankly, I don't know who is at fault. Very well could be a bit of both - an issue on Blizzard's end and some just making mistakes that end up getting their account hacked.

I'm certainly not going to mock or insult those that have been hacked because I think it can happen to anyone. I've been fortunate but you never know...and I would rather not tempt a bitch slap from karma

Originally posted by Sidad

Wow hacking happened years ago and I changed 2 PCs in meantime. On top of that wow account was inactive for at least a year (on my side at least) when hacking happened.

 

The "inactive" part does not say much though, with the Scroll of Resurrection (I believe it's called) people could just get you back for a few days. I can't really assist you in any way though, because I don't know your habits concerning browsing, gaming, etc. Nor do I have the time to do that, let alone through the internet

You already got the authenticator, which is in this case the best thing you can do.

Originally posted by Wickedjelly

Originally posted by Cavod

I, too, have been noticing the 'blizz can do no wrong' phenomenon going on in this thread.  There also seems to be a great deal of ignorance about this topic as well since people with authenticators have been reporting the vert same problem as well.

 

I definitely feel for all those D3 players out there, this has been one heck of a launch.

 

One more notch making me happy I decided to passed on this game despite how much I wanted to try and like it.

I don't really put the blame with anyone myself. Because frankly, I don't know who is at fault. Very well could be a bit of both - an issue on Blizzard's end and some just making mistakes that end up getting their account hacked.

I'm certainly not going to mock or insult those that have been hacked because I think it can happen to anyone. I've been fortunate but you never know...and I would rather not tempt a bitch slap from karma

But you shouldn't.

Its not your fault.

Whoever thinks otherwise is a complete idiot.

There are SO many arguments in this thread about whose fault it is that your account gets hacked...

Which is kind of sad because I think they COMPLETELY miss the point.

Why do you guys think D3 accounts getting hacked is "news?"  Battle.NET accounts get hacked ALL THE TIME.  You're not going to see all this discussion because someone's WoW account got hacked...trust me.  It's like a daily occurence.

The D3 account hacks are "news" because if you were just playing D1 or D2 single player, your account could NEVER be hacked.  You simply weren't exposed to it at all.

But with D3, you are forced to be exposed to all the annoying things that go along with being an MMO.  Lag, account hacks, disconnects, inability to play offline, server outages, etc. etc.

So the news of these account hacks is just another reminder that you are forced to deal with this crap in D3 even if you want to play single player.  Discussing who is at fault for the hacking is pointless, that's not what this is really about.  This is really about being forced to play single player online and being exposed to hackers that would have never been a problem before.

Originally posted by JeroKane

Originally posted by Sidad

Wow hacking happened years ago and I changed 2 PCs in meantime. On top of that wow account was inactive for at least a year (on my side at least) when hacking happened.

 

I have said it before, so I will say it again! It doesn't even have to be your own PC.

If you have accounts on public forums / fansites and use the same password there, it is highly possible one of those sites have been comprimised.

As Battle.net and a lot of other account systems these days unfortunately use your email address as account name, they basically only need to get hold of your password.

That's why I am using authenticators on these account sites as extra layer of security.

If you don't want to pay for one, you can instead use the free software based authenticator.

Cheers

Im sorry dude but i dont have same account on public forums/fan sites etc I only make account where I have to. Even ppl with authenticators are reporting being hacked. I dont have authenticator yet but mine is on the way and if i get hacked again, with authenticator, than Im done with Blizzard.

The way hacking is done tells me that whoever is behind it is very well oorganized very methodical and knows exactly when ppl log off cause thats when they attack.

If hacking persists and Blizzard does nothing D3 will die.

Originally posted by Creslin321

There are SO many arguments in this thread about whose fault it is that your account gets hacked...

Which is kind of sad because I think they COMPLETELY miss the point.

Why do you guys think D3 accounts getting hacked is "news?"  Battle.NET accounts get hacked ALL THE TIME.  You're not going to see all this discussion because someone's WoW account got hacked...trust me.  It's like a daily occurence.

The D3 account hacks are "news" because if you were just playing D1 or D2 single player, your account could NEVER be hacked.  You simply weren't exposed to it at all.

But with D3, you are forced to be exposed to all the annoying things that go along with being an MMO.  Lag, account hacks, disconnects, inability to play offline, server outages, etc. etc.

So the news of these account hacks is just another reminder that you are forced to deal with this crap in D3 even if you want to play single player.  Discussing who is at fault for the hacking is pointless, that's not what this is really about.  This is really about being forced to play single player online and being exposed to hackers that would have never been a problem before.

No it's not, so get of your soapbox preaching about how the good old days with offline singe player were so much better. You started of good, with saying that it's about Battle.net accounts being compromised. Then you lost it again, because Diablo 1 and 2 weren't any better in that respect. If you played offline single player then your account was safe from this. But that's not what this thread is all about. Not everyone is like you and only plays it solo. Not everyone wants to. It's like you're saying that if there was a seperate single and multiplayer, this issue wouldn't matter at all, because people could just play the single player offline and risk free.

Well, I guess it's true for the small vocal minority that wants offline single player. Their accounts are at risk, if they don't pay any mind to their own security. That's their own responsibility though. However, if it matters that much, people shouldn't have bought the game at all, just out of sheer principle.

Originally posted by Creslin321

There are SO many arguments in this thread about whose fault it is that your account gets hacked...

Which is kind of sad because I think they COMPLETELY miss the point.

Why do you guys think D3 accounts getting hacked is "news?"  Battle.NET accounts get hacked ALL THE TIME.  You're not going to see all this discussion because someone's WoW account got hacked...trust me.  It's like a daily occurence.

The D3 account hacks are "news" because if you were just playing D1 or D2 single player, your account could NEVER be hacked.  You simply weren't exposed to it at all.

But with D3, you are forced to be exposed to all the annoying things that go along with being an MMO.  Lag, account hacks, disconnects, inability to play offline, server outages, etc. etc.

So the news of these account hacks is just another reminder that you are forced to deal with this crap in D3 even if you want to play single player.  Discussing who is at fault for the hacking is pointless, that's not what this is really about.  This is really about being forced to play single player online and being exposed to hackers that would have never been a problem before.

You miss one point as well thou. Blizzard would rather have us (players) paying for game and getting hacked (online version only) than us (players) hacking game and playing for free (off line version).

Originally posted by Sidad

Originally posted by JeroKane

Originally posted by Sidad

Wow hacking happened years ago and I changed 2 PCs in meantime. On top of that wow account was inactive for at least a year (on my side at least) when hacking happened.

 

I have said it before, so I will say it again! It doesn't even have to be your own PC.

If you have accounts on public forums / fansites and use the same password there, it is highly possible one of those sites have been comprimised.

As Battle.net and a lot of other account systems these days unfortunately use your email address as account name, they basically only need to get hold of your password.

That's why I am using authenticators on these account sites as extra layer of security.

If you don't want to pay for one, you can instead use the free software based authenticator.

Cheers

Im sorry dude but i dont have same account on public forums/fan sites etc I only make account where I have to. Even ppl with authenticators are reporting being hacked. I dont have authenticator yet but mine is on the way and if i get hacked again, with authenticator, than Im done with Blizzard.

 

The way hacking is done tells me that whoever is behind it is very well oorganized very methodical and knows exactly when ppl log off cause thats when they attack.

If hacking persists and Blizzard does nothing D3 will die.

Please, people claim all kinds of crap. I can also say this:

I just installed Diablo 3 on a PC I put together an hour ago, maximum secured, jsut for playing Diablo 3. I logged in, made a barbarian and suddenly I got kicked off! I logged back in and noticed that my freshly made barbarian had no more weapons equipped! Bloody hackers! I even have an authenticator!

I can say this, but it doesn't make my story true. Mosts posts are like this. It's never the fault of the one whos account got compromised, of course not. It's the evil company that made the game! Like I said, people can make claims all day long, but suprisingly almost no one backs it up with proof. Even the Youtube video floating around proofs nothing more that accounts got compromised and looted till they're empty. The same thing that happens in almost every MMO out there.

Originally posted by Sidad

Originally posted by Creslin321

There are SO many arguments in this thread about whose fault it is that your account gets hacked...

Which is kind of sad because I think they COMPLETELY miss the point.

Why do you guys think D3 accounts getting hacked is "news?"  Battle.NET accounts get hacked ALL THE TIME.  You're not going to see all this discussion because someone's WoW account got hacked...trust me.  It's like a daily occurence.

The D3 account hacks are "news" because if you were just playing D1 or D2 single player, your account could NEVER be hacked.  You simply weren't exposed to it at all.

But with D3, you are forced to be exposed to all the annoying things that go along with being an MMO.  Lag, account hacks, disconnects, inability to play offline, server outages, etc. etc.

So the news of these account hacks is just another reminder that you are forced to deal with this crap in D3 even if you want to play single player.  Discussing who is at fault for the hacking is pointless, that's not what this is really about.  This is really about being forced to play single player online and being exposed to hackers that would have never been a problem before.

You miss one point as well thou. Blizzard would rather have us (players) paying for game and getting hacked (online version only) than us (players) hacking game and playing for free (off line version).

 Yeah because pirating just destroyed Diablo II right?  The game was in the Guiness book world of records as the fastest selling computer game EVER when it came out, and it sold over four MILLION copies, and that was back in 2000 when the gaming market is not nearly as big as it is now.

Look, I don't condone piracy, but I think we need to stop acting like it's destroying the industry because there is really no evidence to back that up.  I am all for DRM like Steam that really isn't ultra-intrusive (of course, opinions may vary), but I have to draw the line at a non-MMO game that requires a server connection 100% of the time to play.

It's just draconion and unnecessary.  And TBH, I'm pretty sure piracy isn't the main driver for this always online thing.  That would probably be the RMAH.

I'll say it again for the mentally challenged:

The hole is related to battle net accounts with Diablo3 on them - Battletags I'd assume, it's insecure.

Yes, every ad network out there is tainted with some trojan or another - even the ones on this site, but this isn't the cause in this case.

THIS IS SOMETHING ON THEIR END OF THE NETWORK

Originally posted by MikkelB

Originally posted by Creslin321

There are SO many arguments in this thread about whose fault it is that your account gets hacked...

Which is kind of sad because I think they COMPLETELY miss the point.

Why do you guys think D3 accounts getting hacked is "news?"  Battle.NET accounts get hacked ALL THE TIME.  You're not going to see all this discussion because someone's WoW account got hacked...trust me.  It's like a daily occurence.

The D3 account hacks are "news" because if you were just playing D1 or D2 single player, your account could NEVER be hacked.  You simply weren't exposed to it at all.

But with D3, you are forced to be exposed to all the annoying things that go along with being an MMO.  Lag, account hacks, disconnects, inability to play offline, server outages, etc. etc.

So the news of these account hacks is just another reminder that you are forced to deal with this crap in D3 even if you want to play single player.  Discussing who is at fault for the hacking is pointless, that's not what this is really about.  This is really about being forced to play single player online and being exposed to hackers that would have never been a problem before.

No it's not, so get of your soapbox preaching about how the good old days with offline singe player were so much better. You started of good, with saying that it's about Battle.net accounts being compromised. Then you lost it again, because Diablo 1 and 2 weren't any better in that respect. If you played offline single player then your account was safe from this. But that's not what this thread is all about. Not everyone is like you and only plays it solo. Not everyone wants to. It's like you're saying that if there was a seperate single and multiplayer, this issue wouldn't matter at all, because people could just play the single player offline and risk free.

Well, I guess it's true for the small vocal minority that wants offline single player. Their accounts are at risk, if they don't pay any mind to their own security. That's their own responsibility though. However, if it matters that much, people shouldn't have bought the game at all, just out of sheer principle.

 Why do you think people who only played the Diablo games single player are a vocal minority?  Is it because you never saw them in any of your multiplayer games ;).  I also don't play solo all the time, but I like the option, as do many other people.

Anyway, I really like D3, I'm having a blast with it.  But that doesn't mean that I'm just going to overlook something that I feel is wrong with the game.  It is possible to like one part of a game and dislike another.  It doesn't always have to be black or white.

Originally posted by MikkelB

Originally posted by Sidad

Originally posted by JeroKane

Originally posted by Sidad

Wow hacking happened years ago and I changed 2 PCs in meantime. On top of that wow account was inactive for at least a year (on my side at least) when hacking happened.

 

I have said it before, so I will say it again! It doesn't even have to be your own PC.

If you have accounts on public forums / fansites and use the same password there, it is highly possible one of those sites have been comprimised.

As Battle.net and a lot of other account systems these days unfortunately use your email address as account name, they basically only need to get hold of your password.

That's why I am using authenticators on these account sites as extra layer of security.

If you don't want to pay for one, you can instead use the free software based authenticator.

Cheers

Im sorry dude but i dont have same account on public forums/fan sites etc I only make account where I have to. Even ppl with authenticators are reporting being hacked. I dont have authenticator yet but mine is on the way and if i get hacked again, with authenticator, than Im done with Blizzard.

 

The way hacking is done tells me that whoever is behind it is very well oorganized very methodical and knows exactly when ppl log off cause thats when they attack.

If hacking persists and Blizzard does nothing D3 will die.

Please, people claim all kinds of crap. I can also say this:

I just installed Diablo 3 on a PC I put together an hour ago, maximum secured, jsut for playing Diablo 3. I logged in, made a barbarian and suddenly I got kicked off! I logged back in and noticed that my freshly made barbarian had no more weapons equipped! Bloody hackers! I even have an authenticator!

I can say this, but it doesn't make my story true. Mosts posts are like this. It's never the fault of the one whos account got compromised, of course not. It's the evil company that made the game! Like I said, people can make claims all day long, but suprisingly almost no one backs it up with proof. Even the Youtube video floating around proofs nothing more that accounts got compromised and looted till they're empty. The same thing that happens in almost every MMO out there.

All Im trying to say is that someone well organized is behind this hacking wave. So much (hacked) info you have to go through, so many ppl hacked so fast etc...

 Blizzard acknowledged ppl being hacked and say nothing appears wrong on their side. Fine.

I just hope you are right when you said ppl are probably lying about being hacked with authenticator. Authenticator is my last hope.