Here we go again.....http://www.zdnet.com/blizzard-hacked-warns-users-to-change-passwords-7000002425/ (http://www.zdnet.com/blizzard-hacked-warns-users-to-change-passwords-7000002425/)
Sort of a weird spot to put this thread, but anyway I also saw this news. Even the authenticators may have be compromised.
Quote from: Bison on August 10, 2012, 12:34:45 AM
Sort of a weird spot to put this thread, but anyway I also saw this news. Even the authenticators may have be compromised.
My finger must have slipped when I started this thread ::) It's moved. And yeah, bad news for their customer base. Interestingly enough, accounts in China apparently weren't hacked except for email information. Hmmm....
QuoteThe company has stated that the mobile authenticator information has the potential to undermine the company's two-factor authentication scheme. Mobile authenticator works as a software-based two-factor authentication token, displaying a time-based code that players must enter during log-in, if they have opted into the additional security.
Yeah.. so much for the nonsense about extra security from the authenticators these companies sell as additional merchandise. ::)
We may as well just count on some of our logins being hacked - it's inevitable. Hell, after changing two or three in the last couple years, I'll eventually get around to changing my Diablo 3 p/w. AFAIK there could be more break-ins after I change it. *shrug*
edit:
QuoteSo far, Blizzard has not seen any evidence that the stolen information has been shared or abused in the wild, however, it recommends all users continue to monitor their accounts and be wary of phishing attempts due to email addresses being exposed.
And that right there is the easy stuff the hackers look for - working e-mails that have been registered at sites people use. For phishing purposes. And Blizzard-registered email phishing is one of the most popular. So be wary of anything saying it's from Blizz in the future, or even from other online companies/beta test offers/etc that seem to come out of the blue.
So...
all the hassles I had to go through to create a dummy Windows account just to play the damn game were for nothing.
I'm not pissed off so much as I see this as some kind of karmic justice. When you punish paying customers with buggy authentication problems (that existed in previous versions of the same game) and then this happens, somehow it just seems a bit deserved.
It would be bad enough if this hack only pertained to World of WarCraft, but now hacks affect Blizzard's single-player games as well.
Quote from: Greybriar on August 10, 2012, 11:49:19 AM
It would be bad enough if this hack only pertained to World of WarCraft, but now hacks affect Blizzard's single-player games as well.
Even more reasons for people to complain about their online-only marketing scheme. The reasons just keep stacking up.
>:(
Word Of Caution:
The Phishing spammers have been pumping out regular "Your Account Is Under Investigation" emails, with links mentioning blizzard in them, to email addresses that have mentioned "Blizzard" before (thanks for selling marketing keywords to phishers Yahoo, GMail, etc!) so don't take that crap at face value if you see anything similar to that.
I'd suggest only using the Account link from the Diablo 3 updater or game menu (wherever it is) if you're in doubt. NEVER use an email link for it.
So for the first time in a few months I tried to boot Diablo last night and it failed to update about a dozen times. Is this because of the security disaster?
Quote from: Gusington on August 17, 2012, 06:58:55 AM
So for the first time in a few months I tried to boot Diablo last night and it failed to update about a dozen times. Is this because of the security disaster?
Shouldn't be, no.
Some of their servers may have been offline for "maintenance" or something.
Now.. if you try to login sometime and it keeps telling you that your password is wrong or some such,
then I'd get worried that you were hijacked. But as I said, the break-in primarily will result in all the fake phishing emails, that falsely say they're from Blizzard, which try to get you to cough up your login details on their fake "Blizzard support" links. DO NOT use links in those emails and NEVER give/enter your password anywhere but your game login screen or the legitimate Blizzard site's Acct Management!
Got it...so not as bad as it could be...but still...irritating.