PDA

View Full Version : Security key coming to WoW

Buddy J
3 Jul 2008, 1:24am
<div class="figure"><img src="/draco/images/news/2008/07/key.jpg" alt="" /></div><p>In an effort to protect gamers from account theft, Blizzard has announced a <a href="http://www.blizzard.com/store/details.xml?id=1100000182">security key for World of Warcraft</a>.
The keychain device will generate a six-digit PIN to be used by gamers when logging in to their accounts and is expected to cost $6.50 when it's finally released. No news on when it will hit shelves.</p>
pigflipper
3 Jul 2008, 2:46am
Hopefully it actually works, unlike their current security.
Cyclonite
3 Jul 2008, 2:58am
It looks like RSA's SecureID. http://rsa.com/node.aspx?id=1156

Really cool technology. We're working on getting it implemented for our VPN folks at my company.
Thrax
3 Jul 2008, 3:12am
It is SecureID.

Blizzard's security works fine, but you can't secure stupid users with bad browsing habits.
pigflipper
3 Jul 2008, 5:04am
So thats why my account, on a completely clean and locked down system, was stolen three (3) times in a 10 month period?
Thrax
3 Jul 2008, 5:08am
You think people just pull passwords from thin air? Have access to their database?

Did you know that a vulnerability in flash banners allowed delivery of a keylogger for more than a month and a half, and none of the virus scanners on the market could pick it up?

There are plenty of ways where a "clean" and "locked down" system can be hijacked. My buddy's account just got ganked because he was using Avira, and it didn't catch a keylogger than only AVG did. He went to some bad sites and made some bad choices.

That's the only way to get haxxed. Poor decisions.
pigflipper
3 Jul 2008, 6:00am
That's the only way to get haxxed. Poor decisions.

Which in my case means someone was using my system without my permission and at my old house, that was definitely happening. Never thought of that as a possible avenue. Sneak something in during the time my dumbass roommates, with myspace generation browsing habits, were breaking into my room to use the "good" computer and I log into WoW before the AV/anti-spyware updates/runs and BAM! my account is gone.

So glad I got out of that house.
MAGIC
3 Jul 2008, 6:04am
Which in my case means someone was using my system without my permission and at my old house, that was definitely happening. Never thought of that as a possible avenue. Sneak something in during the time my dumbass roommates, with myspace generation browsing habits, were breaking into my room to use the "good" computer and I log into WoW before the AV/anti-spyware updates/runs and BAM! my account is gone.

So glad I got out of that house.

Well, you can't blame blizzards security for you not password protecting your box.
Thrax
3 Jul 2008, 6:11am
Which in my case means someone was using my system without my permission and at my old house, that was definitely happening. Never thought of that as a possible avenue. Sneak something in during the time my dumbass roommates, with myspace generation browsing habits, were breaking into my room to use the "good" computer and I log into WoW before the AV/anti-spyware updates/runs and BAM! my account is gone.

So glad I got out of that house.

Pretty much. :( Sorry to hear your acct got whacked.
ZenMode
3 Jul 2008, 3:19pm
This technology is pretty interesting; I know my company employs them on some level for access security for our off-site people.
Buddy J
3 Jul 2008, 3:32pm
Has any other game company gone this far? If they have, I'm unaware of it. Seems to me that this really shows just how big of a game WoW is and how valuable accounts can be.
Cyclonite
3 Jul 2008, 3:34pm
Has any other game company gone this far? If they have, I'm unaware of it. Seems to me that this really shows just how big of a game WoW is and how valuable accounts can be.

I've never seen it. Very interesting. Makes you wonder if it's going to change MMO authentication altogether.
Qeldroma
3 Jul 2008, 3:48pm
My son is a WoW Guild Master and works well with the Blizzard server admins. He has some interesting stories.

Another vector to be aware of: Let's just say that some of the players and those thought to be friends may also try and tempt the unprepared into doing things they may regret later.

Bottom line- The weakest link in your security is yourself.
primesuspect
4 Jul 2008, 7:07pm
Social engineering has ever been the single most effective exploit.