Blizz WTF !!!!!!

[zenga]

Did you have an authenticator? I use the phone in one. When my ip address changes I need to phone in, with a pre agreed phone number, and enter a 4 digit pin number. Fool proof. And I can log into all my accounts now at the same time, no waiting a minute for each code from my old iphone app.

Not exactly 'fool proof'. Enough 'tools' out there that turn your computer into a proxy. That is with regards to the 'ip changing' of course, I don't comment on the authenticator part.

[Tonuss]

Not exactly 'fool proof'. Enough 'tools' out there that turn your computer into a proxy. That is with regards to the 'ip changing' of course, I don't comment on the authenticator part.

The authentication is what makes it foolproof*, or at least as useful as the keyring authenticator. If you try to log in from a new IP, you have to call them from the phone number that you registered the service with and provide two numbers- a four digit PIN that you created when you signed up for the service, and a random number shown on the screen.

As someone else stated, the best part about using this service is that you can log in all of your accounts at once again. I no longer have to spend five minutes entering separate authenticator codes. Hallelujah...

* I hate to use the term foolproof, as it implies that it's impossible to get around it, and time and experience show us that people find ways around anything. But for securing your WOW account, the authentication options at least make it so that your account becomes more trouble to hack than it is worth, IMO.

[kate]

The authentication is what makes it foolproof*, or at least as useful as the keyring authenticator. If you try to log in from a new IP, you have to call them from the phone number that you registered the service with and provide two numbers- a four digit PIN that you created when you signed up for the service, and a random number shown on the screen.

As someone else stated, the best part about using this service is that you can log in all of your accounts at once again. I no longer have to spend five minutes entering separate authenticator codes. Hallelujah...

* I hate to use the term foolproof, as it implies that it's impossible to get around it, and time and experience show us that people find ways around anything. But for securing your WOW account, the authentication options at least make it so that your account becomes more trouble to hack than it is worth, IMO.

What they're saying is that someone can fake the IP address of your computer when doing a login - it won't seem to Blizzard like it's coming from a different IP address so they won't trigger the authentication call-in procedure. If someone can log your keystrokes, it's not difficult for them to get your IP address and then fake it.

The keychain fobs are, IMO, the best bet - if someone finds a way to hack those they won't waste their time on WoW accounts, they'll just hack bank accounts (my bank issued me a fob when I signed up for online banking).

[Tonuss]

What they're saying is that someone can fake the IP address of your computer when doing a login - it won't seem to Blizzard like it's coming from a different IP address so they won't trigger the authentication call-in procedure. If someone can log your keystrokes, it's not difficult for them to get your IP address and then fake it.

Ah, I understand now. I'm wondering if that is possible, though, or at least easy enough for your garden-variety gold farmer or account thief to pull off.