Lessons learned today: Buy authenticator

[camorra]

Long story short:

I came home from work and after diner I wanted to log in for a daily. The game told me that my password was wrong and after a few tries I checked the EMail adress I use for my accounts. Ooops one of my toons is banned for "online trading". I never did anything like that but it was the account my aution house chars were on (roughly 300k cash + a few items) so I thought blizzard suspected that the money came from illegal sources. I tried to call them but in europe the phone support seems to be out of order at the moment. Filled in some web page with my complaint and went to watch a movie.
Later tonight I thought that even if one account is banned I can still do my daily on the other accounts. I logged in to find that 2 other chars were robbed basically of everything that is sellable including an empty guild bank.
I contacted a GM and must say that I was very pleased: I was contacted within 5 minutes. He heard my story and understood that I am multiboxing. He promised me that my stuff on all my chars will be back within a day. I just hope he'll be right wenn I log in tomorrow.
First thing I did after logging out was to order 2 authenticators. Until today I never thought that this could happen to me...

Multibox safe - use strong passwords and an authenticator and don't click on every website you come across.

camorra

[Bollwerk]

I'm amazed there are still people who play without authenticators.

[Drommon]

/Facepalm

[Shodokan]

I'm amazed there are still people who play without authenticators.

I don't frequent porn sites or any non-safe site.

My "visit" list includes

here
d2jsp
wow forums
shoryuken
deviantart
warcraftmovies
elitist jerks
arenajunkies
mmo-champion
wowhead
my school's e-mail
hotmail and never get spam there.

I don't think i need an authenticator. I will eventually get one though. My password includes letters, numbers, ascii characters and is the max character length. It would take most brute-force years to get in.

[Littleburst]

I don't got an authenticator and it's been proven several times that people with authenticators get hacked just as hard. There are just fewer people with them then without, so it's a smaller percentage.

Personally i don't think you can do anything against it, but you can do stupid things to make the odds you get hacked bigger.

Even blizz posted somewhere on the wowforums that it's not hackerproof.

[kadaan]

I don't got an authenticator and it's been proven several times that people with authenticators get hacked just as hard.

Source?


Yes, it's not 100% hackerproof, but it's a LOT harder to steal an account with an authenticator than one without.

[Souca]

I don't think i need an authenticator. I will eventually get one though. My password includes letters, numbers, ascii characters and is the max character length. It would take most brute-force years to get in.

Or just one second with a trojan or man in the middle attack. Do you know if your network connection is secure? You sure everyone at your ISP is legit and there isn't a temp willing to make a change to a router to get passwords as they stream by?

Just saying, it isn't just being careful that is enough.

- Souca -

[Ualaa]

I've seen posts where the authenticator code is essentially stolen as you use it to log in.
You don't actually log in, but then they have a valid code for 30 seconds or so.

Still, a hack/virus/whatever that steals your code in real time, screws over an authenticator or no authenticator.
A more simple key logger, only screws over the no authenticator.

Although I agree, not clicking the suspicious links or visiting warez, hackz, porn, etc, will prevent the hacks too.
It helps to have your B.Net email not used for anything else, anywhere.

[Powerwar]

I don't frequent porn sites or any non-safe site.

As a porn site webmaster I feel a bit offended by that, but I see your point.

Just in case someone here tries to freeload on porn sites, if you go to password trading sites or search around for pay sites passwords for free you are very likely to get a free virus/trojan/spyware/malware/alien too. This is how paysite passwords trading sites make money since lots of years ago, just now they push bad things even more. Unfortunately some old time clean sites are also moving to pushing viruses and trojans because the bad guys pay more money than legitimate sponsors.

In short... if you want to surf porn safely, either pay for it as you pay for other services or go to the well known big tubes that are usually clean sites... and use an antivirus.

[heyaz]

I'm amazed there are still people who play without authenticators.

some of us don't want that hassle for a technology that is still defeated by keyloggers