No Authenticator, No Diablo III Cash Auction House

[AzrealMaximillion]

Lol

http://www.examiner.com/article/diablo-iii-an-authenticator-still-gets-you-hacked

No claims confirmed indeed.

If a guy who reviews video games writes a story about being hacked while owning an authenticator, I'm going to call that a conformation

Sorry friend but the forums are full of claims of exactly this.

But this guy is openly saying that he gets hacked every 15 seconds. He's obviously doing something wrong if he's getting hacked so often. I bet his password is '123456' or 'qwerty'
It's similar to saying "I have had 18 different phones and they have all broken". At some point you have to assume that YOU are the problem and not the 18 phones.

Umm, he said he got hacked ONCE, and that 4 of his friends have been hacked. Did you read the link?

 

[Kordie]

Lol

http://www.examiner.com/article/diablo-iii-an-authenticator-still-gets-you-hacked

No claims confirmed indeed.

If a guy who reviews video games writes a story about being hacked while owning an authenticator, I'm going to call that a conformation

Sorry friend but the forums are full of claims of exactly this.

But this guy is openly saying that he gets hacked every 15 seconds. He's obviously doing something wrong if he's getting hacked so often. I bet his password is '123456' or 'qwerty'
It's similar to saying "I have had 18 different phones and they have all broken". At some point you have to assume that YOU are the problem and not the 18 phones.

Umm, he said he got hacked ONCE, and that 4 of his friends have been hacked. Did you read the link?

He did say he had his WoW acount hacked 4 times before getting an authenticator, and with his D3 hack he totals 5 times on B-net.

 

[AzrealMaximillion]

Right, because authenticators prevented hacking entirely.....oh wait...

"Oh wait" what?

If you're talking about those claims that authenticator protected accounts got hacked, then here's something for you.

None of those claims have been confirmed, none.

Lol

http://www.examiner.com/article/diablo-iii-an-authenticator-still-gets-you-hacked

No claims confirmed indeed.

If a guy who reviews video games writes a story about being hacked while owning an authenticator, I'm going to call that a conformation

Sorry friend but the forums are full of claims of exactly this.

Its funny how he had all these different accounts hacked. He has apparently been hacked more by himself than the total of me and the friends who played together.... on a single account.

I think the security risk might not be with the account....

I am having an even harder time believing him due to the timing of things. Get hacked 5 days after the authenticator was attached?

Still in the end its word against word. Both side has something to gain by lying. Blizzard has more to gain by lying, but also a lot more to lose.

I don't know why people would make up stories about getting hacked while owning authenticators. There's no logic in that. And counting in that this whole always online single player was supposed to be a DRM system to PREVENT hacking makes this even more suspect on Blizzard's part.

Seriously we're going to see a lot of people who don't buy authenticators getting hacked even though they don't have any intention of using the RMAH at all. Why the hell should they be more at risk to lose everything then everyone who pays Blizzard?

Seems like Blizzard is very horribly covering its ass here

I can tell you why to make up the stories.

Multitude of reason. There are personal ones. People wanting to see Blizzard fail out of spite because of the choice of making the game always online. If the cause can be the very reason they fail all the better.
Professional reason like getting paid per page view. Having a story that is impossible to confirm used as proof for a multitude of people who didn't buy the game as "Told you so".

Also the always online wasn't to prevent hacking of accounts. You will not find a single quote from Blizzard saying that. If anything it was close to that it was to prevent item hacking. Not the same thing The most common sentiment that I have seen is "We think that Diablo 3 is meant to be played online". The people who has voiced "its because of the RMAH they made it always online" have come to that conclusion themselves.

That decision I believe however was taken as a social DRM. They know they cannot prevent pirates from playing the game. So they do the next best thing. Prevent the pirates from playing with their friends. Its using the lesson they learned from WoW, that the best way to get a guy to play WoW is by having his friend play WoW. That is my opinion anyway. Not a fact. Only one who really knows why is Blizzard.

Diablo 3 has had some birthing problems. Alot by the standards of an average game and A WHOLE FUCKING LOT by Blizzard standards. If you are in a good mood you would call them unprofessional, and if bad incompetent. Butt criminal is stretching it.

I highly doubt that people paid $60 just to complain about a video game my friend. If that were the case then they've already lost because Blizzard has their money. And to be honest by your logic people should've been making up claims that Ubisoft's DRM locked them out of purchases completely and other outlandish things about other recent releases. D3 seems to be the only one. I also doubt that you'd need a false story about being hacked in D3 in order to generate page hit money. Quite frankly all you'd have to do as a writer is mention that you disagree with Blizzard's handling of D3 and you've got all the page hits you want.

This is the only game in recent memory to cause this much anger and for good reason, they dropped the ball hard on security. And the "We think D3 is meant to be played online" excuse is just that. There are plenty of games that do extremely well without any DRM attached in terms of making profit. Look at GOG.com

By every big publisher's logic GOG should have died years ago, but it's still there strong and DRM free. Blizzard honestly had no need to worry about piracy affecting sales. It was going to sell massively regardless. The RMAH IS what's causing this entire mess. People aren't getting hacked for their accounts, you're right about that, but the real money incentive to hack players was too great to pass up.

 

[Li Mu]

Umm, he said he got hacked ONCE, and that 4 of his friends have been hacked. Did you read the link?

I did read it, thanks.

(concerning D3)...Lo and behold, one week later, I get hacked...
...I?ve been hacked three times on Twitter...
...I?ve been hacked on World of Warcraft four times...
...For WoW, I?ve been hacked even when my account was frozen...

So my statement still stands, "I bet his password is '123456'"

 

[Kordie]

People had their accounts stolen long Before RMAH even existed. You are making a false positive without any evidence to support it.

Would you say the rate of accounts being compromised in D3 is higher or lower when compared to other b-net titles and other similar style games (ie. torchlight)?

Because from what I can see, it seems like a higher rate with D3. That higher rate has to be because of something. Factors could be a greater rate of false claims. Could be more malicious people trying to access acounts. Could be that there is a fault in the security for this game.

Yea, people had accounts hacked before, but the rate apears to have increased for this game and that requires further investigation.

Could more people simply have un-secure accounts? That doesn't make sense, what about this game would make users treat their accounts with less care than other games.

Could more people be lieing about account issues? I see no reason for more people to lie about this game than others. Even if there are some lies along the "I told you so" line, it's not likely that this is the source of all the additional complaints.

Could the rate of malicious attempts have gone up? What about the game would make people want to hack it more? possibly a real money auction house? or is it just that the Diablo franchise has always been a big target for hackers in the past. Hacking has basically ruined the 2 former games online components.

Could there be problems with blizzards security? Seeing as there are problems with everyones security, most likely. Possibly more than expected with all the new systems they are implementing. (Always online, no LAN)

I believe the closest title to compare this to in terms of stats would be WoW. Because it is still a blizard game, has an in game AH as well, and requires the same login procedure. Now, D3 seems to be getting hit worse than WoW, so what are the differences? I do not know the technical side of the games, but it's possible that not being a persistantly online world can cause some security issues. The RMAH has also garnered a lot of attention as it can legitimise the art of gold selling.

So who do we blame for all this? the base line complaints can be pretty much be blamed on un secure acounts, the additional complaints we would have to put in the hands of blizzard and the hackers. Are hackers evil? of course, but as consumers we don't have the tools to fight them. Blizzards role? seems like they aren't doing enough yet to stop the malicious people. The RMAH was basically asking for people to come in and abuse it. The recently announced bans may have some effect, but only time will tell if blizzard can fight them off, or if this will fall apart.

As for the authenticators, that is a factor that can reduce the baseline account issues and possible impede the hackers attempts. I'm not holding my breath on it stopping them however.

 

[pirateninj4]

people are still playing this game?

HA HA! I see what you did there...

In other news, paying real money for fake shit is still fucking lame. Here's Miranda with the scoop...

 

[Epona]

So, if you want the full Diablo III experience and you don't own a smartphone, the price is now $66.50 and it will take about a week before you can enjoy the full game (ie, before your authenticator comes in).

 

[Kordie]

Well I would go the best comparison to Diablo 3 is Guild Wars. Guild Wars could have been made with the same system as D2 with an online/offline in the same way D3 could.

Now you dont have the data to tell if the compromising of accounts have gone up, but you do have the incentive to do so.

Now the thing is Rift had a massive security problem the first month where a 1/3 of the accounts were compromised. New games always make a rise in compromise reports. It is pretty common for hackers to hoard the account information up to a new releases, and then use them all over a short amount of time before people can react. So this pattern is to be expected.

So while the RMAH is an incentive so is Diablo 3 in it self.

Now the always online cannot have an effect on the security anymore than a normal account would. It does increase the dmg of getting your account stolen, but not the risk.

Thats kinda the point I was making. This game has a big target on its head for hackers who are going to find any and every hole they can in blizzards security to get in.

People who are saying that every case of accounts being hacked are user error are ignoring this. Also people who are saying blizzard is not to blame are ignoring that every system has faults. There is plenty of blame to go around, but you cannot push aside the issue as "oh you fell for a scam, etc" as many people here are doing.

As I said earlier, only time will show if blizzard wins out over hackers.

 

[zumbledum]

And yet, until they fix the Man-In-The-Middle attacks that people were already using to hack D3 this won't do any good.

It'll help SOME but if they're that desperate then yeah, they'll just use Session Hijacks or MITM for which the authenticators help none.

session hacks was a rumour started by the hackers, mitm is possible but massively expensive and totally prohibitive.

truth is maybe 1/10th of 1% is scams and phishing the rest is people using the same details to log in to bnet as they do fan sites and effectively giving their accounts away.

 

[Grunt_Man11]

Right, because authenticators prevented hacking entirely.....oh wait...

"Oh wait" what?

If you're talking about those claims that authenticator protected accounts got hacked, then here's something for you.

None of those claims have been confirmed, none.

Lol

http://www.examiner.com/article/diablo-iii-an-authenticator-still-gets-you-hacked

No claims confirmed indeed.

If a guy who reviews video games writes a story about being hacked while owning an authenticator, I'm going to call that a conformation

Sorry friend but the forums are full of claims of exactly this.

The Examiner is your source? Really? A tabloid newspaper is your source?

Wow, you would of been better off providing no source at all.

Sorry friend, but that's not even close to good enough. Try again.

 

[Evil Smurf]

why are people arguing over extra security measures?

 

[Strazdas]

99% of hackings happen due to social engineering and user stupidity. the other 1% is not interested in games.
Also, i i understnad this correct, in order to make your pc safe they offer a phone authenticator? what is this i dont even....

 

[ElPatron]

Yeah, no. Not even my dual-core @ 3.0Ghz can handle 1000 guesses per second.

Cute comic. If one person or program was running guesses, it might take a bit of time. But does that really matter? So it takes you a week, no big deal. It's not like you aren't running several programs accessing several accounts at once.

So, even with 550 computers running, it would still take 1 year. I missed the part where 1 year = 1 week. And someone replied to me explaining that they won't let you make 1000 guesses per second.

 

[Sansha]

If I didn't think Diablo 3 failed completely on the most crucial aspect of it - the itemization, I'd be raging at this.

But on behalf of everyone else who doesn't have a smartphone or even cheap access to your authenticators, Blizzard, go fuck yourself.

You can't afford a whole entire six dollars to make your account hack-proof? How do you eat? Are you using a laptop you found in the garbage outside Starbucks where the free Wifi works?

And yes, I do mean hack-proof, because my WoW account was breached all the time until I got an Authentication. Haven't had an issue since.

I'm sorry, it just upsets me to see people bitching out Blizzard for caring about your accounts. They could take another sip of champagne and say "Nah we don't care, keep getting hacked.", but no, they've decided to take further steps to insure your account isn't worth hacking because they can't wank a spurt of sticky hot dollars off it.

This decision has actually sparked my interest to fix my copy's installation and play.

Yeah, no. Not even my dual-core @ 3.0Ghz can handle 1000 guesses per second.

Cute comic. If one person or program was running guesses, it might take a bit of time. But does that really matter? So it takes you a week, no big deal. It's not like you aren't running several programs accessing several accounts at once.

So, even with 550 computers running, it would still take 1 year. I missed the part where 1 year = 1 week. And someone replied to me explaining that they won't let you make 1000 guesses per second.

If someone used 550 computers and a year's time to get my account, they can have it, because they clearly want it more than I ever could.

 

[zefiris]

because my WoW account was breached all the time

Says it all. Mine was never breached.

The problem here is you. And that's why you support authenticators: You want to blame everyone else. It's easier for you to pretend that every account will instantly hacked by magic hackers than to accept that you screwed up, got phished, keylogged, or failed to not reuse your passwords and emails at other sites.

After all, then you'd have to admit error on your part.

YOU are the problem. And because you are so incompetent, and sadly, many people are like you, Blizzard now passes their support cost to the rest of us, who didn't fail computer security 101.
*THAT* is the issue.

Authenticators are only needed by fails.

PS: accounts don't get hacked unless the company is terrible. If you throttle login attempts (to, say, less thsn 10 per seconds), then it's outright impossible to brute force. No hacking takes place unless a company allows it.

IF Hacking takes place, then your authenticator is useless and will not help you, because it will be circumvented. Which happened before, by the way.

Edit: And before you say "SONY!" - Sony allowed it by incredibly lax security.

 

[Sylocat]

I'm surprised nobody's done this with Minecraft yet. Sell your own creations for real-world cash... and it's easier to spot fakes, too.