Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Diablo 3 hacks are not a Blizzard problem states Blizzard

24

Comments

  • Fessor111Fessor111 Member UncommonPosts: 33

    Ok thanks

    Zoos the Slacker

  • NightCloakNightCloak Member UncommonPosts: 452
    Originally posted by Mephster

    When it is online only it is Blizzard's responsibility to provide security for the users. I can't believe some would even argue that. Keylogging or not, it is their responsibility to keep it secure like they claimed they would. It is only going to get worse when the RMAH releases soon.

    Keep what secure? Them or you?

     

    Did their server security get breached or did yours?

     

    If you buy a car and leave the keys out in the open, someone takes the keys and drives off with your car, is that the fault of the car maker or you?

     

    Lets say someone registeres to this website. Lets say they use the same email address as in WoW. Lets also say they use the same password.

    How can Blizzard protect against that?

    They offer the authenticator. If you take it, you better have it require authentication every login attempt too. This is a free service they provide or if you want the physical token you can buy that. So they have, in fact, provided security.

  • TorrmwyreTorrmwyre Member UncommonPosts: 66

    This thread is rife with Blizzard fanboyism.

  • GrayGhost79GrayGhost79 Member UncommonPosts: 4,775

    Honestly with the RMAH Blizzard was obligated to include an authenticator with purchase. Not doing so is going to make them liable down the road should someone lose items/in game currency that is worth a hefty amount of rl currency.

    Other game companies have taken big hits over issues like this. Blizzards only way of covering their arses was to include 1 authenticator with purchase this way they get to say they took every concievable pre-caution in protecting other peoples property since it has real life monetary value.

     

    They did not though and are likely relying on a flimsy terms of service that has yet to be effective in keeping other companies from getting hit hard by lawsuits about the above.

     

    Blizzards big mistakes were ..

    1) Not including an authenticator to cover their arses.

    2) Allowing people to pull cash out of the RMAH system.

    Those things combined can lead to a very bad day down the road lol.

  • JeroKaneJeroKane Member EpicPosts: 7,098
    Originally posted by Torrmwyre

    This thread is rife with Blizzard fanboyism.

    Because truth hurts? 

    This has nothing to do with Blizzard.  As stupid and/or naive ignorant people getting their accounts hacked in every friggin online game !  This is nothing new.

    And as long as these people keep pretending it's NOT their fault, keep sticking their heads in the sand and refuse to acknowledge the error is theirs and don't take action....

    ...they will continue to be hacked... again.... and again.... and again.

    But sure.... if slandering the game studio, in this case Blizzard makes you feel better.... be my guest. In the end tho, it won't help you nor prevent you being hacked again in any online game you might play!

  • NightCloakNightCloak Member UncommonPosts: 452
    Originally posted by Uhwop
    Originally posted by someforumguy
    Originally posted by gaugemew

    *snip*

    *snip*

     Not to mention that most of the time you're not getting your Bnet account hacked by a keylogger.  It's people getting emails and passwords from other sites.  To many people still don't understand that the easiest way to prevent your accounts from getting hacked is to not use the same email/ password combo for every website you register on.

     

    If it's your fault it's your fault.  It's ironic that the OP would blame Blizz of placing the blame elsewhere when all I see is a bunch of people who don't grasp the simple concept of responcibility.   It's your PC, learn to protect it and quit placing the blame elsewhere.

     

    When I quit WoW I tested it. I changed my password to the one I used for this site.

    My WoW account is now banned. (its been restored)

    Keylogger? No. Virus? No. Bad practice? Yes.

    If you dont want your account "hacked", dont be dumb.

  • JeroKaneJeroKane Member EpicPosts: 7,098
    Originally posted by GrayGhost79

    Honestly with the RMAH Blizzard was obligated to include an authenticator with purchase. Not doing so is going to make them liable down the road should someone lose items/in game currency that is worth a hefty amount of rl currency.

    Other game companies have taken big hits over issues like this. Blizzards only way of covering their arses was to include 1 authenticator with purchase this way they get to say they took every concievable pre-caution in protecting other peoples property since it has real life monetary value.

     

    They did not though and are likely relying on a flimsy terms of service that has yet to be effective in keeping other companies from getting hit hard by lawsuits about the above.

     

    Blizzards big mistakes were ..

    1) Not including an authenticator to cover their arses.

    2) Allowing people to pull cash out of the RMAH system.

    Those things combined can lead to a very bad day down the road lol.

    A hell lot of people who bought Diablo 3, also played previous games and most likely already have an authenticator!  Like me and everyone else I know who play games.

    So why would I need another authenticator?  Every time you log into Battle.net you get face smacked regarding secuirty and the authenticator!

    Every local gamestore also sells them for just 5 bucks!  Gamestop stores have them hanging in the shelves right next to Blizzard's games.

    You must be really blind to miss all this.

  • gorro187gorro187 Member UncommonPosts: 234

    A guy a few post up said if the game is online only its the game companys responsibility to stop people from hacking your account. So let's all post our usernames and password to the mmos we play here and we can blame said company with a online only game for not stopping other's from looting us in game. SMH

  • TorrmwyreTorrmwyre Member UncommonPosts: 66
    Originally posted by JeroKane
    Originally posted by Torrmwyre

    This thread is rife with Blizzard fanboyism.

    Because truth hurts? 

    This has nothing to do with Blizzard.  As stupid and/or naive ignorant people getting their accounts hacked in every friggin online game !  This is nothing new.

    And as long as these people keep pretending it's NOT their fault, keep sticking their heads in the sand and refuse to acknowledge the error is theirs and don't take action....

    ...they will continue to be hacked... again.... and again.... and again.

    But sure.... if slandering the game studio, in this case Blizzard makes you feel better.... be my guest. In the end tho, it won't help you nor prevent you being hacked again in any online game you might play!

    No, you're actually completely wrong.

    This is a Blizzard problem because it is effecting paying customers. Not because some people got mad that they got stuff stolen or griefed. Are they dumb for clicking on that obviously fake email/ad? Of course, but is Blizzard entitled to more or less say F*** Off behind pretty words? Not really.

    Now, I understand that people on this forum are completely 1-sided and seem to never look at something from another person's perspective, but I'm actually Loling at how many of you would change sides if this minor hacking problem turned into a huge issue.

  • gorro187gorro187 Member UncommonPosts: 234

    Fact: Blizzard is restoring accounts to a point prior to the problem.

    Issue: anyone can come on a forum and claim they are one of the masses to get hacked. Causing fuel for the fire so to speak. Let's see some people who emailed blizzard or called and blizzard told them sol your not getting jack back.

  • XzenXzen Member UncommonPosts: 2,607

    Buy an authenticator or if you have a smart phone (I know you have one) just get the authenticator app. You're other choice is to get smarter when it comes to protecting yourself from keyloggers etc..

  • centkincentkin Member RarePosts: 1,527

    Actually I do think they have some amount of responsibility for one major reason and a few minor ones.

    The major reason is that they allow repeated logons without locking down the account (from that IP range).  In essence this opens the door to brute forcing passwords.

    The minor reasons are that the passwords are not even case sensitive.  This makes the hacking of passwords easier.

    The other minor reason is that they use the email address as the login name.  If you are allowed to use a handle (not shown anywhere) as your login then hackers need to guess two things not one.

    ----

    In essence this means that you REALLY have to be careful with your passwords to the battlenet. 

    If you use a word or even 2 words as your password -- IE if your password is "redclematis" you are extremely easy to hack under the current system.  That password would be sufficient in a system where you were limited to 5 attempts -- but where infinite attempts are allowed there are only a finite number of words.

    Is someone who uses a password like "redclematis" at least partially responsible for being hacked because they didnt take enough care?  Sure.  But not everyone knows to make passwords like "5jd0sxa2pfs"  nor can everyone easily remember such a password -- especially when they have many passwords that they need to remember.

  • saurus123saurus123 Member UncommonPosts: 678
    Originally posted by Xzen

    Buy an authenticator or if you have a smart phone (I know you have one) just get the authenticator app. You're other choice is to get smarter when it comes to protecting yourself from keyloggers etc..

    getting authenticator doesnt help

     

    problem is when you join or create public games these "hackers" can read your real id and exploit/copy it somehow

     

    next time you log into the game seeing your char is naked and have strange names in thier friendlist

     

    thats how few of my friends was "hacked" by joining public games

     

  • JeroKaneJeroKane Member EpicPosts: 7,098
    Originally posted by Torrmwyre
    Originally posted by JeroKane
    Originally posted by Torrmwyre

    This thread is rife with Blizzard fanboyism.

    Because truth hurts? 

    This has nothing to do with Blizzard.  As stupid and/or naive ignorant people getting their accounts hacked in every friggin online game !  This is nothing new.

    And as long as these people keep pretending it's NOT their fault, keep sticking their heads in the sand and refuse to acknowledge the error is theirs and don't take action....

    ...they will continue to be hacked... again.... and again.... and again.

    But sure.... if slandering the game studio, in this case Blizzard makes you feel better.... be my guest. In the end tho, it won't help you nor prevent you being hacked again in any online game you might play!

    No, you're actually completely wrong.

    This is a Blizzard problem because it is effecting paying customers. Not because some people got mad that they got stuff stolen or griefed. Are they dumb for clicking on that obviously fake email/ad? Of course, but is Blizzard entitled to more or less say F*** Off behind pretty words? Not really.

    Now, I understand that people on this forum are completely 1-sided and seem to never look at something from another person's perspective, but I'm actually Loling at how many of you would change sides if this minor hacking problem turned into a huge issue.

    So what do you want Blizzard to do?  Lock every account that has not an authenticator attached to it? And so effectivily FORCE everyone to buy an authenticator or use the software based one?

    I personally wouldn't mind!  But I can see this is going to piss off a lot of people who refuse to use it or don't feel the need to use it!

    Basically, if you are NOT stupid and use different AND strong passwords for different sites, NOT use the same email everywhere and DO NOT click on links within phising emails, nor visit shady websites... keep your PC up to date with Anti Virus and scan regularly.... then technically you actually would not need an authenticator!

    But as i am too lazy to remember over a dozen different passwords (already need to in my every day job as IT consultant), I have an authenticator for almost every MMO I play and/or have enhanced security enabled (like with Aion's pincode system).

     

  • XzenXzen Member UncommonPosts: 2,607
    Originally posted by saurus123
    Originally posted by Xzen

    Buy an authenticator or if you have a smart phone (I know you have one) just get the authenticator app. You're other choice is to get smarter when it comes to protecting yourself from keyloggers etc..

    getting authenticator doesnt help

     

    problem is when you join or create public games these "hackers" can read your real id and exploit/copy it somehow

     

    next time you log into the game seeing your char is naked and have strange names in thier friendlist

     

    thats how few of my friends was "hacked" by joining public games

     

    They can't log into your account or game if you have an authenticator.

  • JeroKaneJeroKane Member EpicPosts: 7,098
    Originally posted by saurus123
    Originally posted by Xzen

    Buy an authenticator or if you have a smart phone (I know you have one) just get the authenticator app. You're other choice is to get smarter when it comes to protecting yourself from keyloggers etc..

    getting authenticator doesnt help

     

    problem is when you join or create public games these "hackers" can read your real id and exploit/copy it somehow

     

    next time you log into the game seeing your char is naked and have strange names in thier friendlist

     

    thats how few of my friends was "hacked" by joining public games

     

    Dude... this whole session ID hijacking was a hoax!  It has already been debunked as technically not possible.

  • saurus123saurus123 Member UncommonPosts: 678

    alot of these ppl had authenticator and it didnt help them

  • DistopiaDistopia Member EpicPosts: 21,183
    Originally posted by centkin

    Actually I do think they have some amount of responsibility for one major reason and a few minor ones.

    The major reason is that they allow repeated logons without locking down the account (from that IP range).  In essence this opens the door to brute forcing passwords.

    The minor reasons are that the passwords are not even case sensitive.  This makes the hacking of passwords easier.

    The other minor reason is that they use the email address as the login name.  If you are allowed to use a handle (not shown anywhere) as your login then hackers need to guess two things not one.

    ----

    In essence this means that you REALLY have to be careful with your passwords to the battlenet. 

    If you use a word or even 2 words as your password -- IE if your password is "redclematis" you are extremely easy to hack under the current system.  That password would be sufficient in a system where you were limited to 5 attempts -- but where infinite attempts are allowed there are only a finite number of words.

    Is someone who uses a password like "redclematis" at least partially responsible for being hacked because they didnt take enough care?  Sure.  But not everyone knows to make passwords like "5jd0sxa2pfs"  nor can everyone easily remember such a password -- especially when they have many passwords that they need to remember.

    Yeah I can agree here, while a person's handling of their PC is their own fault it is Blzz's responsibility to ensure their systems are using the best security methods available. I"m still wondering if they do what is normal today and track device/ip origins when an account is accessed. OR if they just simply fall back on the authenticator argument like everyone here.

    For every minute you are angry , you lose 60 seconds of happiness."-Emerson


  • UhwopUhwop Member UncommonPosts: 1,791
    Originally posted by NightCloak
    Originally posted by Uhwop
    Originally posted by someforumguy
    Originally posted by gaugemew

    *snip*

    *snip*

     Not to mention that most of the time you're not getting your Bnet account hacked by a keylogger.  It's people getting emails and passwords from other sites.  To many people still don't understand that the easiest way to prevent your accounts from getting hacked is to not use the same email/ password combo for every website you register on.

     

    If it's your fault it's your fault.  It's ironic that the OP would blame Blizz of placing the blame elsewhere when all I see is a bunch of people who don't grasp the simple concept of responcibility.   It's your PC, learn to protect it and quit placing the blame elsewhere.

     

    When I quit WoW I tested it. I changed my password to the one I used for this site.

    My WoW account is now banned. (its been restored)

    Keylogger? No. Virus? No. Bad practice? Yes.

    If you dont want your account "hacked", dont be dumb.

     When half the websites you go to are selling your email address.  Hell, the DMV in my state sells my peronal information, and has for many, many years.  They even have a tiny little notice on a peice of 8x11 paper taped to a single post telling you that your address and phone numbers are public records according to the DMV and that they may give them away or sell them at their discretion. 

    Do people really think that their emails aren't being sold left and right on the net?  Sure, using the same password for everything attacked to that email, including the email itself is easy and convenient.  So is writting down all the diffirent passwords you use a piece of paper and storing it nearby. 

    What's more likely?  Someone hacking a website you just registered on, or someone breaking into your house and stealing a little piece of paper you keep all your random passwords jotted down on?

  • XzenXzen Member UncommonPosts: 2,607
    Originally posted by Distopia
    Originally posted by centkin

    Actually I do think they have some amount of responsibility for one major reason and a few minor ones.

    The major reason is that they allow repeated logons without locking down the account (from that IP range).  In essence this opens the door to brute forcing passwords.

    The minor reasons are that the passwords are not even case sensitive.  This makes the hacking of passwords easier.

    The other minor reason is that they use the email address as the login name.  If you are allowed to use a handle (not shown anywhere) as your login then hackers need to guess two things not one.

    ----

    In essence this means that you REALLY have to be careful with your passwords to the battlenet. 

    If you use a word or even 2 words as your password -- IE if your password is "redclematis" you are extremely easy to hack under the current system.  That password would be sufficient in a system where you were limited to 5 attempts -- but where infinite attempts are allowed there are only a finite number of words.

    Is someone who uses a password like "redclematis" at least partially responsible for being hacked because they didnt take enough care?  Sure.  But not everyone knows to make passwords like "5jd0sxa2pfs"  nor can everyone easily remember such a password -- especially when they have many passwords that they need to remember.

    Yeah I can agree here, while a person's handling of their PC is their own fault it is Blzz's responsibility to ensure their systems are using the best security methods available. I"m still wondering if they do what is normal today and track device/ip origins when an account is accessed.

    Best argument so far. They should lock down the account after 3 or so failed log in attempts.  I''d bet what's happening is they are getting peoples id and then running a program that simply tries passwords until it works.

  • TorrmwyreTorrmwyre Member UncommonPosts: 66
    Originally posted by Xzen
    Originally posted by Distopia
    Originally posted by centkin

    Actually I do think they have some amount of responsibility for one major reason and a few minor ones.

    The major reason is that they allow repeated logons without locking down the account (from that IP range).  In essence this opens the door to brute forcing passwords.

    The minor reasons are that the passwords are not even case sensitive.  This makes the hacking of passwords easier.

    The other minor reason is that they use the email address as the login name.  If you are allowed to use a handle (not shown anywhere) as your login then hackers need to guess two things not one.

    ----

    In essence this means that you REALLY have to be careful with your passwords to the battlenet. 

    If you use a word or even 2 words as your password -- IE if your password is "redclematis" you are extremely easy to hack under the current system.  That password would be sufficient in a system where you were limited to 5 attempts -- but where infinite attempts are allowed there are only a finite number of words.

    Is someone who uses a password like "redclematis" at least partially responsible for being hacked because they didnt take enough care?  Sure.  But not everyone knows to make passwords like "5jd0sxa2pfs"  nor can everyone easily remember such a password -- especially when they have many passwords that they need to remember.

    Yeah I can agree here, while a person's handling of their PC is their own fault it is Blzz's responsibility to ensure their systems are using the best security methods available. I"m still wondering if they do what is normal today and track device/ip origins when an account is accessed.

    Best argument so far. They should lock down the account after 3 or so failed log in attempts.  I''d bet what's happening is they are getting peoples id and then running a program that simply tries passwords until it works.

    This is most likely a common occurence and that is a great suggestion for fixing it. A lot of forums have a 5-try system and it works very well. Depending on what Blizzard is working on in terms of Diablo currently, more security options should be a pretty high priority.

  • RealPvPisFPSRealPvPisFPS Member Posts: 42

    I do have some facts here:

    I logged off last night with my level 51 character on Nightmare mode in the last part of Sanctuary getting ready to beat it to go on to Hell mode.

    I log on this morning and all my gold, items in storage and items on my character were gone. My character was back on Normal mode in Tristan with the beginning quest again. I submitted a trouble ticket and won't hear back for a couple of days or if at all.

    There is no rootkit or other viruses, keyloggers or any kind of malware on my computer. I know about the fake Blizzard emails going around that are phishing scams.

    I never have played co-op yet in Diablo 3 so those specualtions on how others can hack those on multiuplayer which I've read about cancels me out even if it is remotely true.

    One of two things happened or both, who knows, 1. Blizzard has a major bug on their system causing these issues to a vast majority of people or 2. Professional hackers were able to compromise the Blizzard's servers.

    Take your pick because it is one of these two or both. Blizzard is denying everything, go figure.

     

     

     

  • DistopiaDistopia Member EpicPosts: 21,183
    Originally posted by Xzen

    Best argument so far. They should lock down the account after 3 or so failed log in attempts.  I''d bet what's happening is they are getting peoples id and then running a program that simply tries passwords until it works.

    I'd think it's keylogging, which has always been a problem Blizz customers face, there's always a lot of fishing going on when it comes to their games it's the easiest way, one that requires little time or work on the hackers end.

    Authenticators are good in this regard but so are systems that detect strange IP or device access on an account basis. That's one thing I can say good about my SWTOR experience, they went the whole nine yards in terms of account security. CHange something in your PC? Expect a long login process of answering questions and proving who you are.

    For every minute you are angry , you lose 60 seconds of happiness."-Emerson


  • VengerVenger Member UncommonPosts: 1,309

    I did not have sexual relations with that woman.  Sound similar?

    I don't buy the PR spin that it is all people going to the wrong type of sites.  I think their public game feature has an issue.

  • JeroKaneJeroKane Member EpicPosts: 7,098
    Originally posted by RealPvPisFPS

    I do have some facts here:

    I logged off last night with my level 51 character on Nightmare mode in the last part of Sanctuary getting ready to beat it to go on to Hell mode.

    I log on this morning and all my gold, items in storage and items on my character were gone. My character was back on Normal mode in Tristan with the beginning quest again. I submitted a trouble ticket and won't hear back for a couple of days or if at all.

    There is no rootkit or other viruses, keyloggers or any kind of malware on my computer. I know about the fake Blizzard emails going around that are phishing scams.

    I never have played co-op yet in Diablo 3 so those specualtions on how others can hack those on multiuplayer which I've read about cancels me out even if it is remotely true.

    One of two things happened or both, who knows, 1. Bliazzard has a major bug on their system causing these issues to a vast majority of people or 2. Professional hackers were able to compromise the Blizzard's servers.

    Take your pick because it is one of these two or both. Blizzard is denying everything, go figure.

    First, they don't even need a keylogger on your system. You most likely (like most people) use same email/password combination on a lot of other sites, including fansites/forums. (don't deny it.... this is just common knowledge).

    So it's highly likely that one of those fansites / public forums have been comprimised (like was reported last week regarding a very popular fansite that was flagged by Google, with hacks immediately happening right after).

Sign In or Register to comment.