Printable View
man in the middle attack doesn't work anymore... the key expires on use (To the same battlnet) they would record it on the way there, not totally redirect it, and then login behind you. The key is also required to be entered prior to logging in on the forums, which is also no good. Pretty sure the virus was a MiTM- conducting a replay attack.
I've been having this recently too.Quote:
Originally Posted by Grondir
If you still got a/the trojan on your PC they most definitely can try to brute force your authenticator code.
Blizzard has no auto-block feature that blocks your IP after you unsuccessfully tried to log in X times.
The chance of them hitting it is about as small as winning the lottery... but they can still be trying ;p
Either way you should make sure that your PC is clean by running decent programs to check it.
Never rely on just your authenticator to keep you safe.
I'm pretty sure this isn't how the current man-in-middle attack works.Quote:
Originally Posted by Iceorbz
Your first attempt will be captured and used to log in. You will just be thinking you made a typo and enter a new code again and you can log in. They do not let you use the first code entered as the expiration has been present for a long time... we have posts about that on the forum here going way back when they made this change. You can still log in on multiple accounts with the same authenticator code at the same time.
In the mean time they will be messing around on the website doing whatever. Granted they can't do too much besides changing your password. But the next time you try to log in they will use your authenticator code to actually log in to the game and rip it.
Quote:
Originally Posted by Grondir
If it happens again, run a ping test. My latency gets bad a few times (stupid ISP) and I get issues where some or all of my guys get logged off every minute or so. When it first happened, I totally thought I was being hacked.
I have random dc's but it's always when loading in or changing zones/instances. It happens maybe once to a few times a night at most.
Just as a note Multi, I did all the nuke from teh sky and clean format and what I believe was still happening to my accounts was that they were tracking the connection IP and using remote desktop protocals to get back onto the machine. What finally cleared me was to power down my cable modem for about 15 minutes and then it got a new IP when it restarted. This was the only thing that got me clear.
As a side note, my issue was that they kept changing the account password (one of the trial accounts that I had at the time) which I had not put an authenticator on due tothe account being about to expire.
ah good idea I'll do that now
Quote:
Originally Posted by Silence
Using innerspace keybroadcasting I can't login with the same code, others can do this?
Mutiple b.net accounts. All my accounts are on their own individual b.net account.Quote:
Originally Posted by DLoweinc
You can link your authenicator to any account. Hell I even linked it to an account that wasnt even mine while linked to my accounts at the same time.