Account security mythbusting

Reader Comments (Page 1 of 1)

12-31-2008 @ 1:34PM

Paul said...

So my friends account was hacked and he has canceled his WoW account. This happened right after WoW Insider warned against an exploit in IE being used to hack gamer accounts!

Ok. So his fault was trusting MS.

So the kicker is that Blizzard allowed his main to be transfered with all his alts gold to a new server without a verification email sent to him before the transfer! Salt in the wound. WoW charging him $25 for the transfer. Sorry, that's just lame! A verification of the transfer request through his email would have alerted him! Simple yet effective. Blizzard does have a responsibility here too.

Also, authenticator should be standard issue with the purchase of the game or expansions. At the very least a purchase option to be accepted or declined. Sort of a regular option without or the special edition with the authenticator.

Just my 2 cents.

12-31-2008 @ 2:14PM

Envi said...

I have a couple problems with this story. Blizzard allowed it because they don’t assume every transfer is a hack. His credit card was "stolen" as well; they do not allow you to charge the same credit card the billing is on. You need to manually enter the card number and information again. People change servers all the time, taking all the gold with them from alts. The e-mail is also not a fault of blizzard "not sending one". The e-mail was breeched to. E-mail was deleted to cover the transfer. Only takes 30 min or so to transfer a character.

How do I know? Same story happened to me. All of it. I still play. Blizzard worked it out. I have a BlizzCon authenticator I was not using until this mess. Use it now I do. Say what you will about Blizzard, they are not boosting sales here for Authenticators.

12-31-2008 @ 7:55PM

ArtDecoAutomaton said...

Dude, part of stealing an account is changing the email.

Add your comments

Your comments:

Remember me

E-Mail me when someone replies to this comment

Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.

When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.

To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br /> tags.