Alrighty folks I just have two things to add here :

1) You can use the playtime schedule to lock down your account. Just access the parental controls and activate it. It defaults to no green slots at all IE no time allowed at all. You won't be able to login to your toons until it has been removed.

It's just a little extra security measure especially because the hacker would need to know what the parents battle.net email address is. It's not completely foolproof - some one could hack your emails and trace it back somehow that way. But then again if your emails hacked content controls for a game is the least of your worries.

But the biggest advantage of the playtime schedule is if that person is logged on your account it should kick them off right away. Haven't had a chance to test but if say one of your guildmates texts you to tell you are being hacked you could activate the playtime schedule block outs to mitigate the damage a hacker does. Would have to be quick as usually the damage is doen withing minutes.

2) Currently the parental controls email itself is rather lax in security. You don't need to be logged into any battle.net account to use it and it doesn't expire for quite some time (mines 12 days old and has yet to expire).

IMHO This is a rather large security loophole - all a kid has to do is get access to your email for 2 mins to either forward the email on or print it out. Doesn't even need your password as the parental controls web page it sends you to can be used if logged in or not. I just used to change my playtime schedule and no i was not logged into my battle.net account.

Make sure you print it out and wipe it from your email if you need to use it. Make sure you clear your history and cookies or use some form of secure browsing to stop the URL being retrieved from the history.

Reply