Hacked then Banned

[Manben]

Bah made a mistake and went to the wrong wowheroes website. One of them has a keylogger attached to it. I tried to log in and they attached an authenticator to my account and basically sucked me dry. I was still a new lvl 80 team so they didnt get much, around 15k in gold and alot of enchanting mats. So I change my password and regain my account and call Blizzard right away (well waiting for a rep for 55 minutes). I get a nice guy named Mike W. he is really cool says he is notating my account and they will investigate it and get all my stuff back. Attached is the email he sent after our conversation.


Hello Jon,

This e-mail information is provided to you as a courtesy from our support staff, to follow up on your request for assistance. Please note that we do not disclose personal information to third parties.

================================

You are receiving this email as you had expressed that the password was changed without your knowledge and/or concern that the account might have been affected in a detrimental way. Below is information that should be useful to assure your computer's security and to assist with any related in-game issues on the account.


COMPUTER AND ACCOUNT SECURITY:

In a case where you believe the account has been accessed by an unauthorized party, we would like to suggest that you review the following pages for various security awareness tips:

- Security Checklist: http://us.battle.net/security/checklist.html (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:http://us.battle.net/security/checklist.html)

- Types of Account Thefts: http://us.battle.net/security/types.html (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:http://us.battle.net/security/types.html)

For additional security tips and information, please visit the following sites:

- Account and Computer Security: http://us.blizzard.com/support/article/30794 (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:http://us.blizzard.com/support/article/30794)

- What to do if the Account Has Been Compromised: http://us.blizzard.com/support/article/30796 (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:http://us.blizzard.com/support/article/30796)

- Account Security and Recovery FAQ: http://us.blizzard.com/support/article/30791 (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:http://us.blizzard.com/support/article/30791)

- Email Address Security: http://us.blizzard.com/support/article/30814 (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:http://us.blizzard.com/support/article/30814)

Add a Battle.net authenticator to the account and receive an exclusive Corehound pet! Information about this security device can be found here: http://us.blizzard.com/support/article/BLIZZARDAUTH (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:http://us.blizzard.com/support/article/BLIZZARDAUTH).


UNAUTHORIZED PAID SERVICES:

If any paid services (for example: Paid Character Transfer, Faction Change, etc.) were performed without your authorization, please visit this page, http://us.blizzard.com/support/article/30808 (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:http://us.blizzard.com/support/article/30808), choose the proper webform, and report the issue.


CHARACTER MISSING OR MISSING ITEMS:

If you login to the game and find that characters are missing items or have been deleted, please submit a ticket to the Game Masters in-game using the following procedure:

1) Log into the game with the affected character. If this is not possible, log into the game with an alternate or new character (preferably on the same realm).

2) Press the "Help request" button. This is the red "?" icon in the toolbar at the bottom of the screen.

3) Click "Talk to a GM"

4) Click "Open a Ticket"

5) Enter a detailed description of the issue. Be sure to include the character and realm name(s).

6) Press the "Submit" button.

Once you have submitted the information, you will see a notification in the top right section of your screen indicating that you have an open ticket. A GM will contact you directly in-game in the order that your ticket was received. If you are not online when a GM responds to your ticket, an email will be sent to the registered email address.


ACCOUNT SUSPENSIONS OR CLOSURE:

If the account has been temporarily suspended, locked, or closed due to the recent compromise, please contact the Account Administration department via the registered email address for further assistance. You can email them at wowaccountadmin@blizzard.com (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:mailto:wowaccountadmin@blizzard.com). Please allow them some time to reply, as all claims are reviewed and processed in the order they are received.

If you have additional questions or concerns, please reply to this email. If you would rather speak with a representative directly, please contact Account and Technical Services. Our contact information can be found by clicking the Customer Support link below.

================================

Regards,

Mike W.
Customer Services
Blizzard Entertainment
www.blizzard.com/support (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000008/!x-usc:http://www.blizzard.com/support)

So I am thinking in a couple days I will get my stuff back.Well today I come home to 3 emails out of the 5.


***Notice of Account Closure***

Account Name: ********

Reason for Closure: Terms of Use Violation -- Exploitative Activity: Abuse of the Economy

This account was closed because one or more characters were identified exchanging, or contributing to the exchange of, in-game property (items or gold) for "real-world" currency. This exchange process negatively impacts the World of Warcraft game environment by detracting from the value of the in-game economy.

Even if this behavior is the result of a third party accessing the account instead of the registered user (for example, a friend, family member, or leveling service) then the account can still be held responsible for the penalty because of the impact it had on the game environment.

We've found the above behavior is many times directly related to groups responsible for compromising World of Warcraft accounts; we take these issues very seriously. To better understand our position against exploitative activity and the risks involved, please review this article: http://www.worldofwarcraft.com/info/basics/antigold.html (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000006/!x-usc:http://www.worldofwarcraft.com/info/basics/antigold.html)

The exploitative activity that took place on this account violates the World of Warcraft Terms of Use. We ask you take a moment to review these terms at http://www.worldofwarcraft.com/legal/termsofuse.html (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000006/!x-usc:http://www.worldofwarcraft.com/legal/termsofuse.html). Any recurring subscriptions on this account have been suspended to prevent further monetary charges.

For any disputes of this action, please visit the Exploitative Activity FAQ and Contact page here: http://us.blizzard.com/support/article/exploitfaq (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000006/!x-usc:http://us.blizzard.com/support/article/exploitfaq)

Regards,

Blizzard Entertainment
www.worldofwarcraft.com (wlmailhtml:{2EA115DC-605E-477A-9E35-AC5EE86A8132}mid://00000006/!x-usc:http://www.worldofwarcraft.com/)


So I try calling back and get the automated message saying they are open but too busy to answer and try calling back another day.
I sent an email but I guess WOW is out of the question for at least a couple of days. :mad:

[Borsch]

Ouch, you too? I got hacked/banned w/e last night apparently, I've been on hiatus from wow for a month now, 3 accounts expired last month, and the last two expired this week. Got home from work today and my wife says "uhm, all 5 of your guys logged in today and cleaned out their banks/inventorys".. Rofl. So yea, in the same boat, authenticator and everything. I don't know how/where they got ahold of my account info, I don't surf dubious websites, have yet to "login" to a fake site, all up to date anti-virus, spybot./adaware, etc. So I'm at a loss for how they got my info. Blizz rep told me that theres been a literal explosion in account thefts in the last few weeks though. Meh, I'm guessin its either a) an inside job, or b) someone is doin some serious packet sniffing on a router or something a few hops away from login server, rofl.

~10 hours to get through to blizz on the phone though... best of luck to ya

[Fursphere]

Call Blizzard. They'll get it sorted.

[Shodokan]

Call Blizzard. They'll get it sorted.

And since you are a multi-boxer there is a good chance they will send you your own authenticator for free (happened for my friend)

[Manben]

I hope they restore everything to what I had before. I am more of a casual player, log i do 1-3 instances log out etc. It takes alot longer to get the things I had so will be a bummer if I get a "care package" that I have heard some people get when this happens. My warrior was far from "uber" but he had 36k unbuffed and was progressing pretty nicely.

[Gorkette]

The "care package" is an optional quick restore.

You either take the "care package" or wait the days/weeks to have all of your gear restored.

[alcattle]

Let me get this clear.....neither of you had an authenticator on your account? nuff said

[daviddoran]

Yeah, IMO cata should require authenticators, or even be included in the box.

[Manben]

Let me get this clear.....neither of you had an authenticator on your account? nuff said

While this comment has validity. I have been playing MMOS for many many years(starting with Beta for Everquest) and have never had to have an authenticator before. I am the only person who uses this computer. I only use it for WOW( I use my work computer for email, facebook etc), and I run a virus scan every other day.

That all being said I did make the mistake of checking wowheroes by a recommendation from a friend and as careful as I am I got a virus and a compromised account. I havent decided if I am going to get an authenticator or not even now. I will just have my laptop up and use that to check websites for WOW information.

[jinkobi]

While this comment has validity. I have been playing MMOS for many many years(starting with Beta for Everquest) and have never had to have an authenticator before. I am the only person who uses this computer. I only use it for WOW( I use my work computer for email, facebook etc), and I run a virus scan every other day.

That all being said I did make the mistake of checking wowheroes by a recommendation from a friend and as careful as I am I got a virus and a compromised account. I havent decided if I am going to get an authenticator or not even now. I will just have my laptop up and use that to check websites for WOW information.

Why not get an authenticator man? You said you might not even get one now after all you've been through this week :confused:
They're only 6-7 bucks with free shipping&handling and if you got all your WOW's on one account covers them all.

If you'd had an authenticator on they couldn't have got into your WOW & cleaned you out even if they had your password. It's like a last a last line of defense if you've been compromised. It just takes one misplaced click to be keylogged no matter how careful you are.

You also said you run a virus scan every other day. Are you also running an anti malware program such as Ad-aware or Spybot? Gotta have both really.

It doesn't matter how long you've played games or other games. No game in its history is being keylogged like WOW is today because it is a multi million $$ business hacking people/taking their items/selling WOW gold for real $$$. The hacking of EQ and whatever other game is not nearly as wide spread.

[Manben]

They're only 6-7 bucks with free shipping&handling and if you got all your WOW's on one account covers them all
This is inherently part of the reason why I dont get an authenticator, not that I cant afford it, but why am I paying extra money on something I feel they should give to every single paying battlenet account.


You also said you run a virus scan every other day. Are you also running an anti malware program such as Ad-aware or Spybot? Gotta have both really.

I use Webroot which is an AV and Spyweeper.

[OzPhoenix]

Isn't the iPhone app free?

I respect your right to not have one, but I think it's a decision you may end up regretting.

It's not Blizzards fault per se, they are as much as anything else victims of their own success, with people paying real money for ingame items, gold and even whole accounts.

I use an authenticator and I had to pay $30 for mine (shipping costs to Australia), and while I was annoyed in a moral sense at having to spend money to protect myself from scumbags, it's still a small price to pay to ensure that when I do have time to play the game, I actually can.

Still, sorry to see you hacked, hope it doesn't happen again.

[zenga]

I'm truly with manben on this. You gotta think about it: a good part of the people who _need_ an authenticator need one because they are using at _no so_ secure system. Good chance their system is already compromised. Asking them to use their creditcard to obtain an authenticator can have other funny consequences. Quite a double standard here.

Myself I don't use an authenticator. For several reasons:
- I refuse to use my credit card online. I have a secure paypal account and during the 17 years i'm online, i've never used plastic. A pre paid credit card could be an option, but they are utterly expensive for the single time i'd use it (150 euro+).
- While some would call me a geek, i'm not into gadgets. My phone is 5y old and does his job: calling and receiving calls. I see no need to replace it to be able to load 3rd party software. Not to mention that most smartphones are insecure as hell.
- I run on linux. Which is by far a more superior system than windows (in terms of security, not willing to go into other aspects). I don't need to run a dozen malicious software fighter aps to be secure.
- I have common sense: my password is not in a dictionary and can't be brute forced.
- There are no authenticators available in the store where I buy my games. I live in a rather civilized country in the center of western europe. I haven't seen any authenticator either in france, germany or holland when i happen to be in a game store overthere.
- When shit happens it seems like blizzard restores your account, even if it takes a week. I haven't heard of a single case where the 'hacked' person gets punished for his actions (except this topic & the ban of course, which will most likely get sorted as well). If i can't play wow for a week due to that, i'll probably have more time to get stoned and will consume more beer.

I would consider an authenticator if:
- they are 100% fool proof
- blizzard would accept a secure paypal payment
- i could just go to a game shop and buy one

For now? No ty.

[Svpernova09]

Every time this comes up, the authenticator issues comes up as well.

It's really this simple:

If you are willing to lose EVERYTHING on ALL of your accounts and have to jump through hoops calling blizzard / possibly proving your identity to them (faxing them your driver's license or state / gov't ID) and waiting for GMs to restore all your stuff and HOPE to whatever sky fairy you pray to that they get it right the first time and you don't have to repeat the process because they forgot to give you something back that was rather crucial...

Have fun saving your $1 (mobile phone authenticator cost) or $6 (Keyfob cost). I hope your time you spend (should you ever have to) calling blizzard and getting all this sorted isn't worth more than $1 or $6. Personally, my time is MUCH more valuable.

Go cancel your homeowner's or renter's insurance as well. Why bother, right?

An extreme example, but it's the same point.

[KAC]

I have been playing wow since release and never have had my account hacked. How the hell do you get keyloggers on your system? I'm at a loss becuase if you can get a keylogger on your system the last thing I would be doing if I put the keylogger there would be to steal your wow account I'd be stealing your bank info and robbing you blind. Cleaning out a wow account and selling the gold for $25 is not my idea of making money. I don;t even go for the bullcrap line of they are not going after people who steal wow accounts either. Good luck catching me ripping off your bank account if I'm in russia, seriously. The reason you get hacked is because you go to dumbass websites or you are foolish enough to get duped into entering your account info on a fake website or using a computer that doesnt belong to you. The day a hacker puts a keylogger on my computer is the day they break into my house and load it on my machine while I'm gone.

[Tamu]

I recommend you get an authenticator. They already know your battlenet account (email address). It will most likely happen again if you do not take measures to prevent it.

[Daeri]

I have been playing wow since release and never have had my account hacked. How the hell do you get keyloggers on your system? I'm at a loss becuase if you can get a keylogger on your system the last thing I would be doing if I put the keylogger there would be to steal your wow account I'd be stealing your bank info and robbing you blind. Cleaning out a wow account and selling the gold for $25 is not my idea of making money. I don;t even go for the bullcrap line of they are not going after people who steal wow accounts either. Good luck catching me ripping off your bank account if I'm in russia, seriously. The reason you get hacked is because you go to dumbass websites or you are foolish enough to get duped into entering your account info on a fake website or using a computer that doesnt belong to you. The day a hacker puts a keylogger on my computer is the day they break into my house and load it on my machine while I'm gone.

Manben already explained how he got hacked. I'm indeed sure you never made a typo when typing an url in your browser's address bar. Well, one thing I've learnt is that the fact you've never got into any trouble doesn't mean you're doing it perfectly.

A few weeks ago I did the same mistake than Manben and instead of wow-heroes I landed on a very strange website (I closed the tab very quickly so I only had the time to see some gold banners and a plugin related question). Hopefully I was on my linux computer so no harm came from my mistake. Phew.

[thefunk]

it's free from itunes. Bosch I've just got it.

[genocyde]

The authenticator issue is simple for me. I've been gaming and participating in internet fun for well over a decade.

I have NEVER run an antivirus or spyware or etc. I am 100% against them. I have rarely ever had a problem. It's not that I don't do things that get viruses (I used limewire for years, I download the occasional thing commonly associated with viruses etc)

I have never been hacked although I am a guild leader and two of my guild members have been hacked and had our bank cleared out. Both times I got excellent service from blizzard and came out ahead in the long run having some items get replaced that were never lost etc.

I will never get an authenticator. What a waste of my time. It's a game, if I get hacked I'll put in a 30 second ticket requesting a restore. If I don't get it, I'll eventually cancel my subs and move on or just regear cause thats not that big a deal, It's kind of the point of the game... to play it. I've never considered being told I couldn't play wow for a week an inconvenience. That to me sounds like you are to involved.

[Svpernova09]

... I've never considered being told I couldn't play wow for a week an inconvenience. That to me sounds like you are to involved.

If by "too involved"you mean that I have 9+ other people that would miss me if I didn't log in for a few days, then yes. I am too involved.

[thefunk]

Genocide it does sound like you're saying "i've always left my house unlocked even though there are thieves in the neighborhood". Now I know this is different but why bother taking the risk when you can now get it for free?

[Vecter]

If by "too involved"you mean that I have 9+ other people that would miss me if I didn't log in for a few days, then yes. I am too involved.

You are 10 boxing now?

[Svpernova09]

You are 10 boxing now?

http://www.penny-arcade.com/images/2007/20070409.jpg
-----------------------Svper ^^^^^ ------------------------------------------------Vecter ^^^^^

[Vecter]

-----------------------Svper ^^^^^ ------------------------------------------------Vecter ^^^^^
http://i583.photobucket.com/albums/ss271/WOWnJONASbabe/wowbear.jpg?t=1252958297

[zenga]

Every time this comes up, the authenticator issues comes up as well.

It's really this simple:

If you are willing to lose EVERYTHING on ALL of your accounts and have to jump through hoops calling blizzard / possibly proving your identity to them (faxing them your driver's license or state / gov't ID) and waiting for GMs to restore all your stuff and HOPE to whatever sky fairy you pray to that they get it right the first time and you don't have to repeat the process because they forgot to give you something back that was rather crucial...

Have fun saving your $1 (mobile phone authenticator cost) or $6 (Keyfob cost). I hope your time you spend (should you ever have to) calling blizzard and getting all this sorted isn't worth more than $1 or $6. Personally, my time is MUCH more valuable.

Go cancel your homeowner's or renter's insurance as well. Why bother, right?

An extreme example, but it's the same point.

I think you miss the point that it's not a money issue for some, but rather a principal matter. Or even an inconvenience they don't want to deal with to obtain one (for me personally that is).

While i agree with you that dealing with a customer service can be a painful & tedious process, i'm just curious how much time you lose in an average month by having an authenticator to login. If it takes you 5 minutes to login (i for one login like 3-4 times a day) all your accounts, than i'm not sure if your comparison still wins.

[Svpernova09]

I think you miss the point that it's not a money issue for some, but rather a principal matter. Or even an inconvenience they don't want to deal with to obtain one (for me personally that is).

While i agree with you that dealing with a customer service can be a painful & tedious process, i'm just curious how much time you lose in an average month by having an authenticator to login. If it takes you 5 minutes to login (i for one login like 3-4 times a day) all your accounts, than i'm not sure if your comparison still wins.


I see your point. For me, the peace of mind the authenticator gives goes a long, long way.

[emps]

I'm a safe web user as well as I have my gaming rig isolated from other functions as web surfing, etc..etc.. However, I know the phishers already have my battlenet email as they have been trying to phish my email account linked to battlenet. Oh well. But they haven't been able to go any further. I do have an authenticator, probably one of the early adopters even. I bought one simply because I know I'd be pissed if I see my toons dry and naked at some point. I'm ok paying for it as I do with extended warranties, insurance, hell even local and national security in the form of taxes. You may or may not choose to get one depending on your principles but if you don't and get compromised then don't be surprised and just accept the fact that its a hassle. There's always a price you pay for security.

[Myc]

Yeah idk, a friend got me an authenticator from the last blizzcon..but it seems like a hassle to have to carry it around (keychain)..
tho only time I am not playing at my house would be on my laptop so don't really need to carry...
hmmm.. maybe I should start using it

[genocyde]

Genocide it does sound like you're saying "i've always left my house unlocked even though there are thieves in the neighborhood". Now I know this is different but why bother taking the risk when you can now get it for free?

Actually, coincidentally I don't lock my house or garage or car very often. In fact I usually leave the keys in the ignition of my vehicles. There aren't thieves in my area though, other than anyone, anywhere, any time can be robbed or victimized. That's life.


If by "too involved"you mean that I have 9+ other people that would miss me if I didn't log in for a few days, then yes. I am too involved.
I guess I don't get that side of things because I mostly play with real life friends. Every time some prevents us from playing we just go shoot some pool or play disc golf.

As far as my online friends that I don't know in real life.... I wouldn't spill my soda to put out a fire on their crotch... And they are aware of this if they've known me for a full conversation :)

I guess I do have to respect that others may have an online community they interact with. After all, here I am on a forum!

[Manben]

Zenga gets my point of not owning one Its the principle. I am now paying for my principles with a small hassle.
If I dont get anything back will I be upset? I would probably be a little upset, but I created the problem with getting a keylogger on my system.
Should Blizzard be concerned if I am happy? Coming from someone who manages a 9 million dollar a year retail establishment, yes they should. I can easily decide to cancel my 75 bucks a month plus they lose out on possible upgrades to Cataclysim and many more expansions to come.

I deal with a clientel that has credit lines with my company, if someone unauthorized comes in and purchases on thier account we are liabel as a company. We cannot hide behind the "We are a victim of our own success" line that people love to pull out whenever they dont want to handle a problem.

[emps]

...but I created the problem with getting a keylogger on my system.

Exactly why it's not free. All systems are vulnerable to some extent and from varying perspectives. The case of "account hacking" is client-side. Something that can be prevented without an authenticator if you just follow strict measures of safe computing. Authenticator is not mandatory as it is only an extra layer of security for your account. Think extended warranty not limited warranty. Limited warranty is when they restore your account.



. I deal with a clientel that has credit lines with my company, if someone unauthorized comes in and purchases on thier account we are liabel as a company. We cannot hide behind the "We are a victim of our own success" line that people love to pull out whenever they dont want to handle a problem.

Restoring your account is like shouldering fraudulent costs. Does your company provide an authenticator-type or biometric devices to add protection and prevent CC fraud? For an additional cost?

I'm not trying to argue Manben statements. Really, I just don't want to have to deal with work anymore today so... Yeah. :D Really, this is kinda like the sparkly pony issue. Only not about a pony anymore..? :D

[jinkobi]

Zenga gets my point of not owning one Its the principle. I am now paying for my principles with a small hassle.
If I dont get anything back will I be upset? I would probably be a little upset, but I created the problem with getting a keylogger on my system.
Should Blizzard be concerned if I am happy? Coming from someone who manages a 9 million dollar a year retail establishment, yes they should. I can easily decide to cancel my 75 bucks a month plus they lose out on possible upgrades to Cataclysim and many more expansions to come.

I deal with a clientel that has credit lines with my company, if someone unauthorized comes in and purchases on thier account we are liabel as a company. We cannot hide behind the "We are a victim of our own success" line that people love to pull out whenever they dont want to handle a problem.

Really you're blaming the wrong people. You're blaming Blizzard for people trying to hack their game which they have no control over. The authenticator was made for you as an extra security measure is all. It costs Blizzard tons of time and money undoing what the hackers do to people like you.

While I won't say Blizz doesn't milk people out of money- the authenticator is one thing I don't feel they try and use to make money from. That's why they're like 7 bucks with free shipping,

My authenticator is insurance against the hackers in case I screw up. No matter how careful I am (and I am paranoid careful) there's always that chance I go to a disquised website such as yourself. When you get a keylogger it really isn't Blizzard's fault now is it?! You're the one who chose to goto that website and were tricked by thieves.

Principles are something I can really understand- but think your principles are misplaced when it comes to this whole authenticator business.

As for slowing you down while logging in... Doesn't slow me down really and I log in multiple times a day as well. I even manually input the 5 codes it doesn't bug me or take more than a couple of mins. If you're in that big of a hurry then there are ways to enter your authenticator code just once for all 5 clients. It's in one of the threads here on dual boxing.

[Manben]

At this point im just arguing for the fun of it :).


My authenticator is insurance against the hackers in case I screw up.
Why should I pay for insurance? Dont I already pay them 15 bucks a month? I should expect some sort of system that protects my account.


I even manually input the 5 codes it doesn't bug me or take more than a couple of mins
3 minutes a day say on average 2-3 logins a days say 200 average days played a year.

3*3*200= 1800mins a year/60 = 30 hours a year of login time That is being generous most will have much more.


Does your company provide an authenticator-type or biometric devices to add protection and prevent CC fraud?

Yes we do they are called employees :) . I do not charge my customers extra to protect thier accounts it is assumed as part of the service we provide.

[zenga]

Really you're blaming the wrong people. You're blaming Blizzard for people trying to hack their game which they have no control over.

He said: "I created the problem with getting a keylogger on my system".


It costs Blizzard tons of time and money undoing what the hackers do to people like you.

Ain't that part of the service & support any decent company should offer to it's clients? To your analogy, if you enter your bankcard into a 'compromised' ATM or when fraude happens with your creditcard, the bank shouldn't do anything. "You entered your card into the atm, so it's your responsibility". Don't think so. You will expect your bank to refund you and undo any damage done. Moreover it's in the law in several countries.


While I won't say Blizz doesn't milk people out of money- the authenticator is one thing I don't feel they try and use to make money from. That's why they're like 7 bucks with free shipping,

Agreed to a certain extend. I bought my games back in november. 5 bc's, and 5x cataclysms and 5 gamecards to start with. Like 500 euro? At no point upon purchasing or upon creating my account i was told i'd need an authenticator to play the game in a safe way. The fact that you are 'forced' to use it while it's only available by using a credit card or by owning a fancy phone (in the bigger part of the 'civilized world') is what bothers the people, not actually using it.

Simple solution?
- ship any new box, be it vanilla, bc or wotl with an authenticator included
- make auth. available at any place where they sell wow products (i've seen the wow mouse in plenty of stores, but never an authenticator), so people can actually buy it with cash

[rfuilrez]

I had my WoW account hacked before they announce the merger with B.Net accounts. Crazy thing was this. I was 2 boxing at the time. Main account I've had since Vanilla release, and my second account I only had for a few months. They had both been inactive for 5-6 months. I get an email from blizz saying my 2nd account had its password changed, and attempt at changing the email. I think wtf? Well apparently some one logged in, activated the WotLK 10 day trial, and then did absolutely nothing. Vendered nothing, left the couple hundred gold, didn't delete it or make and alts or anything.

That was last year at some point. To this day, I don't know how they got the password. At the time it wasn't anything dictionary, related to my login, or simple. I hadn't been on any WoW related websites in forever, I run a Mac and didn't have a Windows machine at the time. And I'm a very well educated web user. Haven't had AV on and windows machine I ran in the past 6-7 years. Don't even run anti spyware or malware, and don't get that crap either.

I thought it was pretty strange. Changed the passwords, and as soon as BNet merging and the Authenticators were announced, I took both options.

[MiRai]

I will argue for the sake of arguing as well then.


3 minutes a day say on average 2-3 logins a days say 200 average days played a year.

3*3*200= 1800mins a year/60 = 30 hours a year of login time That is being generous most will have much more.

Separate your Battle.Net accounts for ease of logging in. Oh wait...that's another inconvenience like using an authenticator.


I do not charge my customers extra to protect thier accounts it is assumed as part of the service we provide.
Why should Blizzard follow your company's policy?


Ain't that part of the service & support any decent company should offer to it's clients? To your analogy, if you enter your bankcard into a 'compromised' ATM or when fraude happens with your creditcard, the bank shouldn't do anything. "You entered your card into the atm, so it's your responsibility". Don't think so. You will expect your bank to refund you and undo any damage done. Moreover it's in the law in several countries.
What about car insurance? I don't have to have full coverage insurance...it's my choice. If I don't pay extra for the full coverage then I shouldn't expect to get reimbursed for anything that's not covered. Blizzard never stated "you're 100% covered if you get yourself hacked."

[emps]

Yes we do they are called employees :) . I do not charge my customers extra to protect thier accounts it is assumed as part of the service we provide.

That's not preventive.. biometrics and authenticators prevent fraudulent activities.. That's why it's a layer of security. Now if you have gnomes sniffing malicious packets off the network for free, then maybe. But assuming the charges isn't security. Blizzard at least is trying to prevent it, though not free.. :D

Oh wait, time to go level the palalaladins..

[zenga]

I will argue for the sake of arguing as well then.
...

What about car insurance? I don't have to have full coverage insurance...it's my choice. If I don't pay extra for the full coverage then I shouldn't expect to get reimbursed for anything that's not covered. Blizzard never stated "you're 100% covered if you get yourself hacked."

The example i gave, was a reaction to the quote to give an example that this is part of a service a company offers. Insurance is a whole other thing. If blizzard was to offer a premium service with a guarantee your statement was correct. Now they offer nothing but an extra (paid) lock that should enhance your security but without any warranty. Dealing with hacked accounts(and solving them) is part of their service (the way i see/feel it at least), just as developing an authenticator is part of their service.

I'm very well aware that using examples to prove us right has double standards. For some products/service we lay the responsibility to deal with our shit in the hands of the provider, and for others we take action ourselves (insurance, ..). However I work in IT for over a decade as a free lancer, and haven't come across 1 single company where account troubles are not considered as part of their service. So I dare to say it's more or less a standard in this industry.

I find this topic very interesting and kind of an eye opener for myself (as in trying to see the whole picture rather than my own pov). Way better than any discussion i've come across where it usually tend to end up in a flame ware.

[lacitpo]

Authenticator, blah blah blah, money, blah blah blah, blizzard, blah blah blah hacked, blah blah blah, outrage, etc, etc

Am I doing it right?

[genocyde]

Authenticator, blah blah blah, money, blah blah blah, blizzard, blah blah blah hacked, blah blah blah, outrage, etc, etc

Am I doing it right?

As far as I can tell, Yes, You are doing it right.

[Redbeard]

This post is freaking ridiculous.

Blizzard will help you restore your stuff as part of their baseline service. You dont have to pay extra for it.

People who want extra protection against possible mistakes that THEY MAKE (not blizzard) can purchase it cheaply.

You sacrifice a bit of time for improved safety. You gain some peace of mind (which is unquantifiably valuable, on a person by person basis).

What the fuck are we arguing here?

[Svpernova09]

I understand people that don't want to get an authenticator, however jaded I think your reasons are. But if you choose not to get an authenticator, for fucks sake, make sure you're not in a position to have the loss of YOUR account affect OTHERS

http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091527.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091533.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091536.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091540.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091542.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091547.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091552.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091557.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091559.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091603.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091606.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091612.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091614.jpg
http://www.deathistemporary.com/images/steelhacked/WoWScrnShot_050510_091625.jpg

[Tonuss]

While this comment has validity. I have been playing MMOS for many many years(starting with Beta for Everquest) and have never had to have an authenticator before. I am the only person who uses this computer. I only use it for WOW( I use my work computer for email, facebook etc), and I run a virus scan every other day.
I am the same way-- very cautious, very computer savvy, and I've been able to avoid any issues with malware at home for ~20 years or so.

...and I have had an authenticator for a year or so already.

I was worried that I'd become "that guy." The computer-savvy person who winds up getting his WOW accounts hacked and wonders how the heck it happened. Maybe because I'm in IT and I have to deal with malware infestations all the time, including on computers whose users are pretty savvy themselves. I did not want to take a chance with my WOW accounts. The authenticator is a must-have for a multiboxer, IMO.

[Myc]

As far as I can tell, Yes, You are doing it right.

but but but...
Failing: he's not doing it right >.<

[Tonuss]

Ain't that part of the service & support any decent company should offer to it's clients? To your analogy, if you enter your bankcard into a 'compromised' ATM or when fraude happens with your creditcard, the bank shouldn't do anything. "You entered your card into the atm, so it's your responsibility". Don't think so. You will expect your bank to refund you and undo any damage done. Moreover it's in the law in several countries.
I think that in this example, the bank has much more to lose than Blizzard does, if it turns out that their security is so poor that theft is rampant. That's why so many banks and credit card issuers spend so much time and money on systems and services that provide assistance in the event of card/account/ID theft. My banks will call me if they see activity that they deem suspicious, instead of waiting for me to report a problem.

I think it's really about cost benefit. If the cost of dealing with account theft at the GM/CM level became bad enough, Blizzard would probably require authenticators and provide them free with new battle.net accounts. I'm sure it costs my bank less to have a pre-emptive system in place (track activity and have a real person call me when they think there's a problem) than it would be to deal with the losses from ignoring the few times when unusual activity was due to theft. Then again, once one company offers a service like that, the others may be forced to do so in order to keep up appearances. Blizzard's account security will never be as tight as that of a bank*, because it doesn't have to be.



* Or at least, I hope that there are no banks with security on the level of battle.net logins...

[thefunk]

People spend an extraordinary amount of time complaining about blizzard wasting time / money / whatever on a website when they could have logged into WoW with authenticators for half that time. I personally don't believe in blame culture especially on reasons where the company has released a fix, which wasn't intended specifically for multiboxers but for solo players. As Redbeard said, what's the problem?

[genocyde]

It's become obvious that this thread is meant for the discussion of arena strats. I finally realize why I haven't broke 1800 yet.

[Fursphere]

The sense of entitlement in this thread is disgusting.

BLIZZARD OWES ME AN AUTHENTICATOR ON PRINCPLE ALONE!

No you idiots, they don't. If you don't understand this, you deserve to get your accounts hacked. If you're going to put hundreds of hours into something, (hard to argue you're not going to when your willing to spend the cash to multibox), yet not protect it? Uh.. ya.

Its like restoring a classic car then leaving it unlocked on the street, uninsured. Why go through the effort?

[lacitpo]

http://turbid.com/images/goofy/01-i-has-a-bucket.jpg
-------------------------^^^Account w/out Authenticator^^^--------------------------------------^^^What happens^^^^^^^^^^^

[genocyde]

The sense of entitlement in this thread is disgusting.

BLIZZARD OWES ME AN AUTHENTICATOR ON PRINCPLE ALONE!

No you idiots, they don't. If you don't understand this, you deserve to get your accounts hacked. If you're going to put hundreds of hours into something, (hard to argue you're not going to when your willing to spend the cash to multibox), yet not protect it? Uh.. ya.

Its like restoring a classic car then leaving it unlocked on the street, uninsured. Why go through the effort?


That's a terrible comparison. If I could fill out a 30 second text explanation to the cops that some thieves stole my classic car drove it til it broke, stripped it, lit it on fire and rolled it off a cliff and a week later it was sitting back in my driveway in mint condition, not a replica of it, not a similar car or copy, but the exact same.... Then maybe I would consider that a fair comparison.

Thats what happens when your account gets hacked. You fill out a text box, press submit, and wait in line for a restore. The only thing an authenticator gives you is a warm fuzzy. Several authenticator equipped accounts have been comprimised already, it's by no means even implied to be unbeatable security.

Those without authenticators are sayin something like, "not worth the hassle" or "Idiots, stop d/ling pr0n and getting keyloggers"

Those with authenticators are saying something like "I like me a security blanket" or " OMG if you don't have an authenticator your gear score goes to 0 and you get -50 DKP from missing 2 raids"

Both sides are filled with a share of asses that like to argue blind technicalities and symantics, or total morons (myself included in that description somewhere).

Edit: I forgot to include the people that are in this in this thread, posting all over our faces with 1337 flame skills for lawlz

[Vecter]

That's a terrible comparison. If I could fill out a 30 second text explanation to the cops that some thieves stole my classic car drove it til it broke, stripped it, lit it on fire and rolled it off a cliff and a week later it was sitting back in my driveway in mint condition, not a replica of it, not a similar car or copy, but the exact same.... Then maybe I would consider that a fair comparison.

Thats what happens when your account gets hacked. You fill out a text box, press submit, and wait in line for a restore. The only thing an authenticator gives you is a warm fuzzy. Several authenticator equipped accounts have been comprimised already, it's by no means even implied to be unbeatable security.

Those without authenticators are sayin something like, "not worth the hassle" or "Idiots, stop d/ling pr0n and getting keyloggers"

Those with authenticators are saying something like "I like me a security blanket" or " OMG if you don't have an authenticator your gear score goes to 0 and you get -50 DKP from missing 2 raids"

Both sides are filled with a share of asses that like to argue blind technicalities and symantics, or total morons (myself included in that description somewhere).

Edit: I forgot to include the people that are in this in this thread, posting all over our faces with 1337 flame skills for lawlz

Keep in mind getting your account hacked also can affect others. Our guild bank was stripped and we are now down 1 raid member for this week and until they get their account back. Sure some blame can be placed on the guild officers for allowing this but this is the perfect example of a trusted person who has not had any issues getting hacked. It can happen to anyone. For me I use an authenticator so I DON'T have to continuously watch where I go, what I do. I know enough to stay away from most places but I know I can hit one on accident.

[Fursphere]

That's a terrible comparison. If I could fill out a 30 second text explanation to the cops that some thieves stole my classic car drove it til it broke, stripped it, lit it on fire and rolled it off a cliff and a week later it was sitting back in my driveway in mint condition, not a replica of it, not a similar car or copy, but the exact same.... Then maybe I would consider that a fair comparison.

Thats what happens when your account gets hacked. You fill out a text box, press submit, and wait in line for a restore. The only thing an authenticator gives you is a warm fuzzy. Several authenticator equipped accounts have been comprimised already, it's by no means even implied to be unbeatable security.

Those without authenticators are sayin something like, "not worth the hassle" or "Idiots, stop d/ling pr0n and getting keyloggers"

Those with authenticators are saying something like "I like me a security blanket" or " OMG if you don't have an authenticator your gear score goes to 0 and you get -50 DKP from missing 2 raids"

Both sides are filled with a share of asses that like to argue blind technicalities and symantics, or total morons (myself included in that description somewhere).

Edit: I forgot to include the people that are in this in this thread, posting all over our faces with 1337 flame skills for lawlz

Guess your memory is a bit fuzzy.

For many years Blizzard did nothing for hacked accounts. They simple said "there is nothing we can do" - only recently they've done complete restores, and have the "care package" option to speed things up.

When it becomes too cost intensive for them to handle all the restores, they'll pull the plug on that division.

They give out authenticators at events. They give you an in game pet for getting one. They include them in special editions of they're software. Take a hint: they want you to use the service (and its free if you have a supported smart phone).

Damn kids these days have it easy.

[genocyde]

Ya, trust me I understand that side of things. 2 of my 5 guild members were hacked in the last 2 months.

All 5 of us are real life friends. However the only thing that came out of it was that that hacked individual bought the first round or got razzed a little for being an idiot and getting hacked. (one for sure was an idiot and got himself hacked the other just caught some flack until he bought us all a beer)

I guess we are just of the non-serious mindset about the minor inconvenience of not getting to play a game for a few days. Allthough one of the hacked guild members managed to farm back the majority of a ilvl 232 gearset before blizzard could restore it. Which he then lost in the restore, and still I don't think I heard a gripe out of him.

Just playin a game after all. Thats the part I don't understand, why people act like a week of downtime is like having a limb removed. So far the only valid response is the inconvenience to your friends / guild who depend on you or enjoy your company. For me, we have the real life option, that doesn't exist for everyone due to long distances or creepy internet guy phobias. Thats fine, it's their life thier way.

It's comments like losing my online datas being equivalent to losing a rebuilt classic car (sorry to bomb on your terrible example again but I just can't stop) that just keep dragging me back to this thread for smiles.

[Fursphere]

It's comments like losing my online datas being equivalent to losing a rebuilt classic car (sorry to bomb on your terrible example again but I just can't stop) that just keep dragging me back to this thread for smiles.

Its called a labor of love.

The example is perfect becuase its something you put hundreds of hours into because you enjoy it. Restoring a classic car doesn't cost tens of thousand of dollars if you take your time and do the work yourself. It starts costing big bucks when people pay others to do the work for them.

[genocyde]

Guess your memory is a bit fuzzy.

For many years Blizzard did nothing for hacked accounts. They simple said "there is nothing we can do" - only recently they've done complete restores, and have the "care package" option to speed things up.

When it becomes too cost intensive for them to handle all the restores, they'll pull the plug on that division.

They give out authenticators at events. They give you an in game pet for getting one. They include them in special editions of they're software. Take a hint: they want you to use the service (and its free if you have a supported smart phone).

Damn kids these days have it easy.

My memory isn't fuzzy, I've playes since vanilla, I've just never been hacked so I don't really know the history of it. Simple risk management tells me they will never pull the plug on restoring lost accounts. Worst case scenario you'll see payed character rollbacks. It's their cheap solution to building an actual security system. Those keyfobs are a godsend for cheap security. But until they require it, it is a pain in my ass none the less.

I like the kids these days comment though. It reminds me of how inefficient old people are walking up hill both ways all the time.

[genocyde]

Its called a labor of love.

The example is perfect becuase its something you put hundreds of hours into because you enjoy it. Restoring a classic car doesn't cost tens of thousand of dollars if you take your time and do the work yourself. It starts costing big bucks when people pay others to do the work for them.

You fail to see the whole I smash your car and you can't press reset side of your own example. It's still terrible.

[Fursphere]

You fail to see the whole I smash your car and you can't press reset side of your own example. It's still terrible.

Car insurance = Press Reset and start over. (yes, I did mention INSURING the car)

A good insurance company takes the rig to a body shop / mechanic and starts fixing it. Thats the same as a blizzard tech restoring your lost items.

Is this really that hard for you? Ever heard of LoJack?

EDIT: Yes, a digtal restore is easier than a physical restore, but my whole god damn fucking point is you CAN take steps to reduce the risk and protect your (TIME) investment.

$6 for a authenticator is NOTHING. You wipe your ass with more than $6 worth of toilet paper. I made more than $6 with the time spent trying to explain this too you.

[Sam DeathWalker]

I'v been running for years without norton or anything.


1) Never open email attachments

2) If you go to a web site you dont know about and it says "Do you trust soandso" answer no. ALWAYS look at the address bar and make sure you are where you should be. Stuff like www.samdeathwalker.auxdfw.com (http://www.samdeathwalker.auxdfw.com) is a no no the thing right before .com has to be the name of the site you want. Also deep sub folders with random numbers like www.samdeathwalker.com/abfeds (http://www.samdeathwalker.com/abfeds) are to be avoided.

3) SHUT OFF ALL REMOTE services, this AUTOMATICALLY stops most anyone from remotly doing anything to your PC. Yes complex root kits and what not can override this but this will protect you from 99 percent of attacks, and anyone who can overcome it will not be interested in yur lousy $100 wow characters, they be hacking for real big times moneys


Turn this OFF:

http://www.howtogeek.com/howto/windows-vista/turn-on-remote-desktop-in-windows-vista/

http://www.sevenforums.com/system-security/29503-how-turn-off-all-remote-access-apps-services.html


This is what you need to look at and figure out which to turn off:

http://www.askvg.com/windows-7-services-that-can-be-safely-set-to-manual/

not set to manual but set to disable.




Always set the service to MANUAL, never disable it, so that whenever Windows needs to start a service it can easily start and use it. If you set any service to DISABLED, Windows will not be able to start it and will give some error messages


Ya you set to disable so you instantly know if some program is trying to change your registry to allow remote access lol ....





Just google each one that has "remote" in it and see what safe to shut off or not.


To overcome all that the hacker would have to be very very good. The kiddie script the op downloaded would have no way to run in admin mode to turn these on without all kinds of warnings coming up, if it even could.

In fact I bet if the OP checked his computer he has all the remote stuff on.

[genocyde]

Fur I'm not going to debate with you if your going to contradict your own arguments and apparently not read or comprehend mine.

[emps]

Several authenticator equipped accounts have been comprimised already, it's by no means even implied to be unbeatable security.


Again users' fault. It's another one of those warez that you downloaded together with w/e it is that you're dl'ing while playing wow. Pretty much like SSL; Yes the traffic is encrypted from the client to the server but what about internal (user to computer). For those who don't know here's a link for it: http://www.wow.com/2010/02/28/man-in-the-middle-attacks-circumventing-authenticators/.

Just wanting to add more information to the vulnerability so everybody is fully aware and not just swayed blindly by certain statements.

[Vecter]

Yea I think this thread has run its course. Closing.