Authenticator fails, removed from account without user's permission

Reader Comments (Page 1 of 1)

7-24-2008 @ 2:57PM

Trimble Epic said...

I think most of the commenters in this thread are missing the point.

The hacker didn't HAVE the CD key. or most of the information about the account. They called Blizzard, and convinced the human at the other end of the phone line to remove the key, using whatever trickery, lies, or deceit they could come up with.

Maybe they said someone else added the key to their account without permission.

Maybe they said the key was broken or not working.

Maybe they successfully guessed the answer to whatever questions they had to answer.

Maybe they said they were late for a raid, and had to hurry, and had lost the key and needed to get in right away.

Who knows. The point is that unless a hack has been found to remove the keys from accounts, Blizzard has failed to uphold the security of the key.

7-24-2008 @ 3:04PM

Quickshiv said...

Yay Trimble read the article it took 2 pages of conspiracy and fools before we got to someone that actually read the article.

You can employ the best security in the world but if there is a person that has the ability to override the security at will you will never have a secure system. Obviously the CSR had the ability to remove the authenticator without entering in the required information.

7-24-2008 @ 3:14PM

K2 said...

Exactly; because no matter what was going on inside her computer, or in her house, or on the freaking moon, there was an authenticator that was tied to that account that is no longer tied to that account, without the permission of the account holder. That should not happen under any circumstance.

7-24-2008 @ 7:04PM

Michael said...

Oh? I read it again, and no evidence is cited that this is Blizzard's fault.

Add your comments

Your comments:

Remember me

E-Mail me when someone replies to this comment

Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.

When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.

To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br /> tags.