| 2416 posts found | |
|---|---|
|
So somebody with a physical authenticator got hacked...
General Discussion « Diablo 3 6/02/12 8:46:39 PM
Other interesting possibilities concerning the case in the op link:
The user is in Taiwan. Do we know if they are using a pirated copy of windows? I'd give even odds that they are, at that point they are absolutely rootkitted. No virus scan will ever detect it. Using a pirated version of windows means you are permanently compromised. Period. If your OS is pirated, you have an undetectable rootkit on your machine. Have fun with that as your box is officially a zombie in a botnet. This could tie in with my first guess, but also be applicable to other forms of compromise on the users end: The attacker could use your machine as a proxy to log into the server. If your authenticator is set to detect your ip and not ask for the token every time, this is a very viable vector for bypassing the authenticator. Blizzards servers would see the login as coming from your machine. In other words, set the authenticator to ask every single time. There are a thousand other possibilities that don't involve compromising Blizzard at all. I wish I could invite all of you that don't understand this stuff over to my house and show you exactly how wrong you are. Haha. |
|
|
So somebody with a physical authenticator got hacked...
General Discussion « Diablo 3 6/02/12 8:28:59 PM
Laughing my ass off at the guy who thinks his Mac is immune to malware.
If you believe that, I've got a .DMG file to sell you. Macs are, in my opinion, MORE vulnerable but LESS targeted. Most Mac users dot run AV software because they think they are invulnerable. Do yourself a favor and get some av and a firewall on that Mac. As far as on-topic discussion. It has been known for some time that there are weaknesses in a two factor authentication like the blizzard authenticator. If your machine is infected with a rootkit or A MITM attack is used (yes there are Mac rootkits please stuff that my Mac is invincible crap right now). Beyond that, wow authenticators have been compromised before, usually because of malware though. The authenticator uses RSA technology which has been compromised before (at the RSA end). Beyond that, an attacker can acquire your token through a simple man in the middle attack. This would require access to the users network (either home, Internet cafe, public network, etc) or through malware. An attacker could intercept the authenticator code and quickly use it themselves. It is not hard to accomplish if the user is already compromised. This is a different attack, but can detail what is possible. This method has worked for years and is still active today: I know of a method to defeat SSL secure logins without compromising the ssl encryption. In a MITM attack all data from the user is intercepted on it's way to or from the server. If you are using a secure ssl login, the attacker would be able to intercept your encrypted login details on the way to the server and pass it on. They would not be able to crack it, however. What they can do is spoof your session certificate. This would throw up red flags for someone that really understands certificates, but most would not understand what was happening. So, you go to the site and log in. I send you a fake certificate that I know the encryption key for, I also receive the real certificate from the server. Your password is encrypted with the fake encryption key which I easily decrypt. I now have your password. I encrypt the password with the real encryption key and send it on to the server. You login fine and everything works, but I was able to steal your password. This all happens almost instantaneously and is automated. It's honestly something your average script kiddie could pull off with ease. It doesn't even take much knowledge. An authenticator is vulnerable to the same attack. It would be a simple matter to accomplish on a compromised system/network. Just to be clear, I have never claimed that the authenticator is an impenetrable security fortress. Two factor authentication is not the be all end all of security. It reduces the likelihood of being the victim of an attack greatly. The problem is that of it is not used in tandem with other good security practices it is possible to compromise. The authenticator itself is not a weak security tool, it is actually quite strong, but it's effectiveness can and has been compromised through indirect means. An attack on the authenticator is likely not a direct attack on RSA secureid security, but an end-around attack that reveals the data from the authenticator. Also, the smartphone versions are, theoretically, vulnerable to software attacks on the phone itself. Software authenticators do contain files that can compromise the security of the token. |
|
|
ALL NEWS ARTICLES SHOULD STAY ON THE FRONT PAGE AT ALL TIMES FOREVER.
WAKE UP SHEEPLE |
|
|
This is now kinda leaving a bad taste in my mouth, but hmm... *SPOILERS*
General Discussion « Diablo 3 6/02/12 4:56:22 PM
I just want to address the tyrael thing.
Laws do not always equal justice. In this case Tyrael decided that the laws were unjust |
|
|
Anybody else afraid to buy this game, since it's releasing in the shadow of SWToR?
General Discussion « The Secret World 6/02/12 8:38:53 AM
@simplyawful
Oh my, the old bad food analogy. So tired of seeing those around here. Ah screw it, let's continue with that analogy. I'll clean it up for you a bit so that it's more relevant. This game isnt giving you a sandwich, it's giving you all of the ingredients to make a sandwich how you want. It's giving you bread, ham, roast beef, turkey, salami, lettuce, mayo, mustard, tomatoes, American cheese, Swiss, cheddar, etc. I get to choose what goes on my favorite sandwich, and you get to choose your own. They will likely be different with 500 toppings. I might like different sandwiches at different times, that doesn't mean there is no customization. Your position is strange to me. You are arguingthatthere is no customization in a game that doesn't restrict what you can choose to use on your character and arguably gives you many more choices for that character than any class based system. I don't understand how everyone having access to all weapons and abilities = no customization. It doesn't make any sense to me. You and I may both make tanks. There are a ton of tanking abities in the skill wheel. My tank could work entirely differently then yours but both are viable. Same with any of the roles. You say there is no customization because anyone can switch to anything at any time. Im saying that even though that is true different people can go about it entirely differently. There are plenty of different ways to make a healer or a dps or a tank in this game. You know what? As soon as a conversation on this site devolves into terrible food analogies, I give up. Why is it always food? It's fine if you don't see or believe there will be customization in this game. I don't see how you could miss it, but whatever. Maybe we just aren't thinking of the same definition of customization I guess. To me this is far more customizable than say a game with skill trees. This system is similar to D3's skill system In a way, only with far more skills. I know I have experienced a lot of customization of my character in that game. I have used builds/gear that drastically alter my play style many times over again. To me, TSW has the d3 system on steroids. I'm guessing you see customization as some permanent thing that locks your character into a specific build? That or maybe you are thinking of a class system? Classes prevent peoplefrom getting all skills lime you are arguing against, but to me it seems far less customizable. Anyway, I give up. This is pointless, as neither of us is going to change our minds. I'm going to enjoy the game regardless, so it doesn't really matter to me. |
|
|
Are you a bit scared of creating believers?
General Discussion « The Secret World 6/02/12 6:04:40 AM
[mod edit] |
|
|
Anybody else afraid to buy this game, since it's releasing in the shadow of SWToR?
General Discussion « The Secret World 6/02/12 6:03:03 AM
Originally posted by simplyawful I understand all of this stuff.
I'm not saying people won't use more than one build. I'm saying that they won't use ALL builds. This is how their character will be different than others. Between the builds they are comfortable with, and the gear they have, they will only be proficient with a certain number of builds.
I'm also not saying that everyone will specialize in one role. I'm saying that there are things that they will like to do and things that they don't like to do.
Your last paragraph is making my point for me actually. Remember we are talking about differentiating your character from other characters (or at least I was). The skills/builds/gear you use will determine how your character is different from others, that's all I was saying.
It's not as simple as saying that every person will have access to every skill. What makes them different is what skills they choose to use, as I have said all along |
|
|
Anybody else afraid to buy this game, since it's releasing in the shadow of SWToR?
General Discussion « The Secret World 6/02/12 2:56:20 AM
Originally posted by simplyawful That may be their intent, but I still have doubt that everyone will go through the effort required to do it. Just because quests are repeatable doesn't mean that people are going to run around doing every quest over and over to get every skill. The more casual players most certainly won't in my opinion.
Let's throw that argument out though, and assume you are right. Every single person who plays the game will get every skill unlocked at some point. Or at least the vast majority will. That's fine, I can go along with that.
The real point of my argument, however, is that even if your average player has every skill available to them, the vast majority will go unused by any given player. Most people are simply not going to have enough builds rattling around in their heads that can utilize all 500 skills. There are people out there who absolutely refuse to heal, for example. In lots of class based games there are classes capable of being healers or dps. SWTOR is a good recent example of this. Your average sith inquisitor was not a healer. I knew many that had zero interest in healing, they just wanted to zap stuff with lightning. Those people aren't going to be out there using every build possible. Even within healers there are several different ways to make a healing build between the different weapons with healing. Not to mention the passives. The same could be said for any role. People aren't going to use every dps spec out there just because they can. They will use what they like
I get your point. Yes people will be able to swap between roles at will, noone is locked into any one thing, but will they? That is the question that matters. Like I said, just because you can make a tanking build, doesn't mean you are a good tank. |
|
|
Anybody else afraid to buy this game, since it's releasing in the shadow of SWToR?
General Discussion « The Secret World 6/02/12 2:11:10 AM
@simplyawful
Well first of all, decks are the premade builds are they not? You don't even have to use them. Second, just because you can use all skills doesn't mean everyone will be good a every build. Someone doesn't become a good tank or healer simply because they spec for it. And really there are plenty of people that don't want to do that. Most people just want to dps. There are a large variety of dps builds in this game for everyone. Assuming decent balance then people won't have to run around with the same build. Third, I don't believe the premise that everyone will have all skills. I do believe that it will take a decent time investment to acquire everything. Skills come slower later in the game from what I have heard and I expect a significant amount of grinding to get everything. Most players are not going to attempt to unlock everything for a long time, and those that do will still have a few things they like. Noone is going to use every build possible all the time. Thats crazy. This isn't even taking gear into account. I may have a good hammer and shotgun set, but have no gear for elemental/rifles. I'm not going to run around usin ele/rifle allthe time because the guy with gear will be better at it, or whatever. Anyways, if you don't believe this game has customization, then that's fine. I honestly don't know what it will be like either when the game comes out. You seem to think everyone will have every skill and everyone will want to use every build, switching between them all the time. I think that is incorrect but we shall see. |
|
|
Anybody else afraid to buy this game, since it's releasing in the shadow of SWToR?
General Discussion « The Secret World 6/02/12 2:01:47 AM
@DannyGlover
Yep. I couldn't be happier about that side of things. I'm a raid/guild leader and I love to be presented with a challenge like that. I love the logistics of making sure we have everything we need and making decisions on the fly and having to adapt to some unperceived problem we come accross. Having this system around is going to be quite challenging to coordinate, and I honestly think it is going to require input from the entire group when these situations pop up. People are going to have to speak up and say "hey guys we wiped on this three times, I think I can tweak my build here and do this thing that will help us" while leaders are going to have a lot to keep track of as far as how people can spec and what skills they unlocked etc. It sure beats "ok we have a warrior, a priest, some melée dps, and some ranged dps" that means we have the right group for this. Or "oh crap we don't have that one class on that we really need for this content we are screwed." Instead you can say "hey Billy Bob, we're really hurting on heals in this fight, could you change your build to blood magic and give us some off heals because you have those skills unlocked? Even though you are using a melée dps weapon right now?" The possibilities are looking pretty awesome and I can't wait to try some of the really hard stuff out. |
|
|
Anybody else afraid to buy this game, since it's releasing in the shadow of SWToR?
General Discussion « The Secret World 6/02/12 1:39:38 AM
@simplyawful
Even if everyone unlocks all abilities (and that's a big if) the difference comes from the fact that you can only use 7 active and 7 passive at the same time. It's not like you can run around with hotbars with 515 slots on them and use all abilities at all times. The customization comes from peoples builds. While I wouldn't go as far as saying that every character will be a special and unique snowflake, there is absolutely a lot of room for customization and differentiating yourself from others. |
|
|
Are you a bit scared of creating believers?
General Discussion « The Secret World 6/02/12 1:32:12 AM
Anyone who becomes a "believer" because of this game was already a "believer."
No skeptic is suddenly going to believe in Bigfoot because of this game. There are plenty of video games, books, tv shows and movies that cover this same type of material. No, the people that believe in this stuff are going to believe it anyway. If they are somehow convinced by this game, then they are dumb and easily manipulated. Something else would have got them eventually. Personally, Being quite the skeptic is the reason this setting is so interesting to me. It's like a view into what the world would actually be like if all of the "believers" were right, and it's quite a different place than we are familiar with. |
|
|
The monk ability that places a dot on mobs and causes them to explode with the rune that causes it to be fire that spreads to other mobs and causes them to explode is pretty m rated.
They freaking spray blood everywhere and leave a huge splatter of blood on the ground in place of their body. Then it spreads and all sorts of demons and crap exploding are all over the place. Couple that with the unicorns and Teddy bears in the secret level and you have a pretty disturbing sight. |
|
|
Why mist this be TSW bs GW 2?
The game's are very very different. I mean it's one thing to compare the two systems and decide which one you like better, but to say that one is wrong and one is right is pretty closed minded. TSW is a different game for many reasons. There may be some crossover in the audiences, but TSW appeals to people for entirely different reasons than GW 2. We get it, you love GW 2 combat. That's great. You have a game that provides what you want. For many of us TSW provides things that we want which cant be easily found elsewhere. Some people (like myself) are so sick of high fantasy that we barely give it a chance. Some people want skill (skills you use not your own player skill) based progression. Would TSW benefit from gw2 or Tera style combat? Possibly. Im all for action combat, in fact I greatly prefer Fps combat to rpg combat. That doesn't mean that GW or Tera are suddenly able to overcome my dislikes about the game. I know, it's hard to understand, but TSW really does appeal to a certain audience of players. It may not have the mass market appeal of GW2, but there is an audience for this game. Just because you don't like it doesn't mean it's "wrong." it's not "right" for everyone but this game strikes a chord with many of us for reasons that I don't think some of you will ever understand. Here's a tip: if this game doesn't have what you want out of an mmo, then don't buy it. Simple as that. You don't have to waste another second thinking about it. Play what you like and what is appealing to you. That's what those of us who choose (and stay with) TSW will be doing. I can honestly say that there is not another rpg on the market that offers everything TSW does in one package. |
|
|
Wizardry Online: To Be Unveiled as SOE Title at E3
News & Features Discussion « General Discussion 6/01/12 8:33:47 PM
Love or hate SOE, you gotta give them this:
They are trying to break the mold. They definitely are trying to advance the genre in lots of ways. Sandbox MMOs, Mmofps, kids MMOs, free to play, action based combat, their in house engine, etc. They definitely aren't churning out your average eq/wow clone over and over. Well, EQ3 might be the exception to that, but we really don't know. |
|
|
They would then have to give up all the server side data that they are protecting. Not going to happen.
What you guys still fail to understand is that this is not DRM in the traditional sense of the word. It may have one similar effect to drm, however it is a different beast altogether. This game is structured like an mmo from the ground up. Do you think they will be patching the same "DRM" out of WoW any time soon? Haha. It's a laughable idea when you think of it likethat. The answer is no. |
|
Originally posted by AvatarBlade There has been a ton of info on the game. I can't think of another game dev that has released as much info as this Planetside 2 team has this early in development.
Seriously, they have pretty much given us everything there is to know about the game at this point, and it's still in alpha! |
|
|
Quick Message to all Female Planetside 2 players
General Discussion « PlanetSide 2 6/01/12 6:30:09 AM
Same as planetside 1.
Would be pretty ridiculous to have Tera style character models in this game... |
|
|
Didt have time to watch it all right now, but damn there is a lot of stuff in that cert tree. That is awesome.
|
|
|
Hey I appreciate Funcom's games as much as the next guy, but let's not kid ourselves here, their reputation is well earned.
It's not just rocky launches we are talking about here, it's entire features missing for long periods of time, bugs going unfixed for long periods of time, and other issues that aren't strictly launch related. That being said, I'm all in for the TSW launch. I preordered it. I love the game from what I have played. But I'm also not in imaginary land. There will be launch problems. The game is good enough that I'm not too worried about it. I can tolerate quite a bit when it comes to bad launches or issues, but most can't. I believe tha TSW is going to be awesome, but you can't really blame people for being apprehensive. |
|