Dial-In Authenticator is wonderful

[Sajuuk]

This does not combat against someone hacking your account... blizzard has said that this is simply a backup for the actual authenticator. I asked about using this method for five accounts and they said that it did not protect against keyloggers, spyware etc etc like the hardware authenticator. If someone accesses anything from your computer then you are SOL.

Neither does the normal authenticator. Man in the middle attack, perchance?

Example: you get a trojan/virus... they open your computer into an SSH based proxy and proxy into WoW and empty your account... it's already happened to a few people and was discussed on the official forums.

Then it's your own damn fault for getting the trojan/virus!

And tell me how exactly they'll proxy into wow, I'd really like to hear it out of curiosity.

[daviddoran]

According to the FAQ, it is not a backup for a normal authenticator, they stated that you can only have ONE authentication method (hardware auth, phone app auth, or dial in auth)

I think this method will be a great balance between security and convenience for boxers, not having to wait 4 minutes to log in my toons is worth the slightly lessened security.

[kate]

IP addresses can be spoofed. If someone can get your password & bnet id, they can certainly know your IP address, and will get you.

The only security this would offer, I would think, is that if someone tries to add an authenticator to or change the password of your account you'd need to call. Or do you need to call?

[Tonuss]

And tell me how exactly they'll proxy into wow, I'd really like to hear it out of curiosity.

I'm curious about this myself. I asked in the previous thread I saw about the new authenticator, and did not get a response. How does someone spoof your IP address from another computer in order to access WOW, and does this seem like something that a gold seller or account thief would be able to do easily enough to make it worth his time?

I'd like some kind of technical explanation, not just "it can be done" or "it happened to so-and-so." How easy and/or simple is it to fake a specific IP address, especially for someone who is just sitting at another PC somewhere else in the world and just wants to hack a WOW account?

[Ughmahedhurtz]

I'm curious about this myself. I asked in the previous thread I saw about the new authenticator, and did not get a response. How does someone spoof your IP address from another computer in order to access WOW, and does this seem like something that a gold seller or account thief would be able to do easily enough to make it worth his time?

I'd like some kind of technical explanation, not just "it can be done" or "it happened to so-and-so." How easy and/or simple is it to fake a specific IP address, especially for someone who is just sitting at another PC somewhere else in the world and just wants to hack a WOW account?

Agreed on the "worth their time" angle.

I'd also like to see a link to the official forums thread where it was acknowledged that this was how someone got hacked with the Dial-In Authenticator set up. I mean, if it's happened and been discussed, should be trivial to find the thread again, right? Not trying to sound snarky but this sort of claim is always going around among kids trying to look important on forums.