@fozzyozzy said:
What I'm saying is that the conversation here shouldn't be so much about what could have been done on the user side, but instead pushing Blizzard to think outside of the normal means box for methods to prevent these issues.
The commercial release is barely two weeks old and the developer is already underselling (perhaps not 100% truthfully) the number of cases here. I know there have been methods to hacking for a long time, is it "venting" to wonder if maybe there's something server side being exploited?
I think the appropriate analogy is identity theft. Now maybe the victim didn't shred every single piece of junkmail, but then there are people who casually leave their belongings out in the open. My point is, the only conversations should be between whoever the victim is and the people who can aid. No room for armchair defenders and security experts.
I'm not seeing Blizzard underselling how many have been compromised - looking at their forums, there are at least a dozen posts from Community Managers on the subject. They are just saying that no reported cases have shown that there has been an active authenticator (not dialin/SMS) on the account on the time of the account - even in the cases where people HAVE claimed there was an active authenticator.
Further, I'm not sure what you mean about how Blizzard should think outside the box? As far as I am aware, they provide the most security options for their users than any other game developer. Even Steam only has a few of the features (SteamGuard) that Blizzard use to keep your account safe. And you can't really put it on their side if your account is compromised because you fell for a phishing scam (hey, you're only human, mistakes happen) or used the same password as on a site that had their user databases stolen in the last few years. Or wound up with a keylogger because of some shady ad-banner, or some other crazy shit that's going around.
You seem to have some idea of what they should have done, as you are saying that they should've done more. What have they missed? What more can they do, except force everyone to use authenticators?
(And yes, I realize that there are ways to get around authenticators. It's significantly harder than just getting past a static password, though.)
@RedRavN: If you have an Android device or iPhone (or iPad, I suppose), you could just download the free mobile authenticator. It's as safe as your phone/device is.
Direct links:
https://play.google.com/store/apps/details?id=com.blizzard.bma
http://itunes.apple.com/en/app/battle.net-mobile-authenticator/id306862897?mt=8
You then need to connect it to your battle.net account. And you should write down the recovery information, etc, in the app. Of course, if you don't have such a device, the keychain gadget is the only way to go.
edit: for good measure, here's Blizzard's "Help! I got hacked!" page to get you started recovering your account: http://us.battle.net/en/security/help
Log in to comment