Tuesday, May 22, 2012

Diablo III Account Security

So I've played a lot of Diablo 3 in the last week. Probably too much. In the last couple days, a lot of reports started showing up on the battle.net forums and other fansites of people losing all of their gear or having their accounts hacked. Some rumors were posted that a Game Master command was somehow available to some players or that session ID spoofing was possible to allow other users access to your characters. I was kinda skeptical, but figured there was an outside chance that something like that had slipped through before the game was released. The one thing that the theories said was required for the "hackers" to gain access to your account, was your battle tag, which becomes available to others when you add them as friends, play with them in a multiplayer game, or post on the forums.

This forum post from Bashiok seems to indicate that they have not investigated any cases of accounts actually being compromised except through the traditional methods of password stealing. Furthermore, they "have yet to investigate a compromise report in which and authenticator was attached beforehand." If you play any Blizzard games and don't have an authenticator yet, I highly recommend either buying the keychain one from the Blizzard store (for about $6) or using a smart phone authenticator app.

'via Blog this'

No comments:

Post a Comment