Blizzard annouces they have been hacked.

General Discussion Area
Post Reply
User avatar
bringoutyourdead
Forums Admin & general flunky
Posts: 1432
Joined: Fri Nov 07, 2008 1:11 pm
Location: Texas, USA

Blizzard annouces they have been hacked.

Post by bringoutyourdead »


Hybuir
Gear Dependent Squirrel
Gear Dependent Squirrel
Posts: 1471
Joined: Tue Sep 06, 2005 6:22 am
Location: Austin, TX
Contact:

Post by Hybuir »

Oh yeah, man that sucks. I had to change my password yesterday, as suggested for all US players. Doesn't bode well that they are doing away with the phone authentication as well (not the app, though).

Balgair
Araiceil
Posts: 1716
Joined: Fri Sep 30, 2005 11:47 am
Location: UK

Post by Balgair »

Hybuir wrote: Doesn't bode well that they are doing away with the phone authentication as well (not the app, though).
I think that's at least partly down to people not reading properly and thinking that one was the same as the app or a physical authenticator, then bitching at Blizz when they still got hacked.

Whole thing's a pain but I have to say I'm impressed it took so long for a breach to happen, given the size of the company and high profile of its games, it's gotta be a pretty big target. Lucky for me only email addresses were taken for European players but I changed my password and login address anyway, figuring I'll likely be getting phishing mail to my old login address soon, now it's been harvested; I try to keep WoW on a unique address so I can easily tell real mails from fake ones!

User avatar
bringoutyourdead
Forums Admin & general flunky
Posts: 1432
Joined: Fri Nov 07, 2008 1:11 pm
Location: Texas, USA

Post by bringoutyourdead »

Why phone authentication is not a thought thru idea.

http://www.wired.com/gadgetlab/2012/08/ ... cking/all/

Using a resource that is easily hacked to protect other resources..
not the smartest idea on the block.

Never link accounts that are not required to to be linked.

Never use the same password for different accounts.

Whenever possible.. use unique ID's for everything. This is one of the reasons I obtained my own domain and have for important access my own email post office.. with that I have unlimited email ID's (in the same domain).

I always know which of my correspondents leaked my information to others and can quickly limit or kill off any possible damage.

Post Reply