Diablo III

[Archon_Wing]

Originally Posted by Vallen Chaos Valiant

Agreed on that part. How dare Blizzard had the nerve to tell its customers to pay extra for security? They are suppose to be the ones doing the protecting. If the authenticator is so essential, they should send each customer a free one. I find the idea that Blizzard want us to pay for an authenticator to be outrageous.

Indeed, it's a joke. If you do online banking, you will realize how stupid it is, since they usually have security measures that let you register your computer. Do you have to pay extra? Some may argue it's included in the fees anyways, but that's fine, include the cost Blizzard. What I don't want is being sold an incomplete product that leads to shit like this.

How about this? I pledge to use the RMAH and you guys send it to me for free. K?

And I brought up online poker because that particular site has millions of users. If we counted play money it's up to 10s of millions of users and yes... they actually take measures to even offer support and help for THAT. Is Blizzard a small company that can't afford this? LOL. Well, even if they can't handle it, biting off more than you can chew is already a problem.

Yes that site has authenticators, but most people online and offline that I know have had no use for it. They could be trusted for hundreds or thousands of dollars-- I don't think i can trust Blizzard for 50.

[Kyero Fox]

you can get Authenticators for free as a phone app...

[Waven]

It's hard to keep facts from fiction here. People making claims on the internet vs a company trying to save face (read: money) - wouldn't want to judge this case.

Irrational internet mass rage without proof has become such a regular phenomenon that by now I distrust it as much as I distrust companies' promises.

[Squarecrow]

Originally Posted by Vallen Chaos Valiant

Agreed on that part. How dare Blizzard had the nerve to tell its customers to pay extra for security? They are suppose to be the ones doing the protecting. If the authenticator is so essential, they should send each customer a free one. I find the idea that Blizzard want us to pay for an authenticator to be outrageous.

Authenticator is not essential. Blizzard just knows people are stupid.

•Don't get phished and don't go to gold buying sites
•Don't download anything untrusted or go to random websites
•Use script/ad/Flash/Java blocking
•Use a real time malware blocker and scan your computer at least monthly as well w/ multiple scanners
•Keep everything up to date (Flash, Windows, AV, Java is you use it, Browser)
•And the most important thing is use a different password on every site and don't use your main email address on every site

You definitely don't need an authenticator anymore than any other site. 99.9% of the time an account is compromised it is the user's fault.

[Vallen Chaos Valiant]

Originally Posted by Squarecrow

Authenticator is not essential. Blizzard just knows people are stupid.

•Don't get phished and don't go to gold buying sites
•Don't download anything untrusted or go to random websites
•Use script/ad/Flash/Java blocking
•Use a real time malware blocker and scan your computer at least monthly as well w/ multiple scanners
•Keep everything up to date (Flash, Windows, AV, Java is you use it, Browser)
•And the most important thing is use a different password on every site and don't use your main email address on every site

You definitely don't need an authenticator anymore than any other site. 99.9% of the time an account is compromised it is the user's fault.

My Bank didn't advise that I get an authenticator. Steam doesn't advise me to get an authenticator. Nor does Ebay or Amazon. So why is it that Blizzard has told us to get an Authenticator?

[Squarecrow]

Originally Posted by Vallen Chaos Valiant

My Bank didn't advise that I get an authenticator. Steam doesn't advise me to get an authenticator. Nor does Ebay or Amazon. So why is it that Blizzard has told us to get an Authenticator?

Because so many players are stupid and get scammed by gold sellers.

Blizzard's servers haven't been compromised so it's up to the player when it comes to account security. It's their choice to use an authenticator or not. They don't have to if they are smart it's just extra insurance if they want it. It's also FREE on iPhone/Android phone so...

[Shinova]

Originally Posted by Tokkan

On the story side of things, I take no offense since D3's story is poorly written (though not as awful as SC2's writing) and does not even come close to approaching D2's levels of epic.

D2's story was epic?

Are you sure that's not the rose-colored glasses talking for you?

[Vallen Chaos Valiant]

Originally Posted by Squarecrow

Because so many players are stupid and get scammed by gold sellers.

Blizzard's servers haven't been compromised so it's up to the player when it comes to account security. It's their choice to use an authenticator or not. They don't have to if they are smart it's just extra insurance if they want it. It's also FREE on iPhone/Android phone so...

Why do I need an android/iphone? My bank sends me an SMS for authentication whenever I need to make a big transfer. The NicoNico website also sends me an SMS whenever I purchase points. Why do I need a smartphone to get authenticated?

[Squarecrow]

Originally Posted by Vallen Chaos Valiant

Why do I need an android/iphone? My bank sends me an SMS for authentication whenever I need to make a big transfer. The NicoNico website also sends me an SMS whenever I purchase points. Why do I need a smartphone to get authenticated?

You don't need anything. You can be completely secure on your end without an authenticator.

[Vallen Chaos Valiant]

Originally Posted by Squarecrow

You don't need anything. You can be completely secure on your end without an authenticator.

You are missing my point; other websites, when they worry about hacking, give us a built-in authenticator service that can work on ANY phone. That doesn't require me to download anything. Blizzard could have gave everyone the SMS authenticator by default. But they didn't.

[Archon_Wing]

Originally Posted by Vallen Chaos Valiant

You are missing my point; other websites, when they worry about hacking, give us a built-in authenticator service that can work on ANY phone. That doesn't require me to download anything. Blizzard could have gave everyone the SMS authenticator by default. But they didn't.

Just bolding in case people fail to read. And yea, I'd think Banks are even more prone to hacking attempts due to you know, involving tons of money. And they have something that's simple as a website cookie.

It's not like we aren't aware that many people screw themselves over and get hacked.

[Squarecrow]

Originally Posted by Vallen Chaos Valiant

You are missing my point; other websites, when they worry about hacking, give us a built-in authenticator service that can work on ANY phone. That doesn't require me to download anything. Blizzard could have gave everyone the SMS authenticator by default. But they didn't.

And plenty of other websites don't have SMS authenticators, what's your point? Some game company needs to offer multiple free services to protect your account when you can do it yourself? And even if you do get compromised they'll restored your stuff too. Blizzard isn't a bank, it's just a game company. So what if you lose some virtual property for a couple days?

Why don't my electronics or car come with free LoJack? What if they get stolen? That's not even my fault!

[Demi.]

Originally Posted by Squarecrow

Because so many players are stupid and get scammed by gold sellers.

Blizzard's servers haven't been compromised so it's up to the player when it comes to account security. It's their choice to use an authenticator or not. They don't have to if they are smart it's just extra insurance if they want it. It's also FREE on iPhone/Android phone so...

This sounds like typical blizzard fanboy logic. Did you not read my post a couple pages back?

Blizzard has been compromised in the past, and they have lied about it in the past. They were only willing to come clean after they found a solution to the problem. I'm 99.9% sure it's on their end, because as I said, I keep my computer very secure, and I even had that impenetrable fortress that is supposedly an authenticator, their very own authenticator which I payed 6.50 for. And it didn't do a shred of good. I've played dozens upon dozens of online games for many years, and only with Blizzard have I had to deal with this bullshit.

Also a comedic moment I had while trying to buy the authenticator. While trying to purchase the authenticator it kept giving me "We currently cannot ship to this address", despite purchasing the US only version, and living in the US. Blizzard couldn't even figure out the predicament I was in until they opted to just do everything automatically on their end. Several hours later. Any normal person would have just said fuck the authenticator. And now I kind of wish I had done the same.

[Vallen Chaos Valiant]

Originally Posted by Squarecrow

Blizzard isn't a bank, it's just a game company. So what if you lose some virtual property for a couple days?!

In case you don't realise, my entire savings (and likely yours too), exists as a virtual number in a bank's server. There is no difference between virtual and physical property.

Blizzard is turning themselves into a trading hub with real virtual money that has value. At some point they had passed "just a game company" and became something else.

[Squarecrow]

Originally Posted by Demi.

This sounds like typical blizzard fanboy logic. Did you not read my post a couple pages back?

Blizzard has been compromised in the past, and they have lied about it in the past. They were only willing to come clean after they found a solution to the problem. I'm 99.9% sure it's on their end, because as I said, I keep my computer very secure, and I even had that impenetrable fortress that is supposedly an authenticator, their very own authenticator which I payed 6:50 for. And it didn't do a shred of good. I've played dozens upon dozens of online games for many years, and only with Blizzard have I had to deal with this bullshit.

If it is their fault then sure I'll take back what I said and I'll apologize if you want. If it is their fault.

So far no one has proved it's server-side or even that they've had an authenticator attached beforehand. They just don't want to live up to their mistakes.

[Keroko]

Originally Posted by Squarecrow

Authenticator is not essential. Blizzard just knows people are stupid.

•Don't get phished and don't go to gold buying sites
•Don't download anything untrusted or go to random websites
•Use script/ad/Flash/Java blocking
•Use a real time malware blocker and scan your computer at least monthly as well w/ multiple scanners
•Keep everything up to date (Flash, Windows, AV, Java is you use it, Browser)
•And the most important thing is use a different password on every site and don't use your main email address on every site

You definitely don't need an authenticator anymore than any other site. 99.9% of the time an account is compromised it is the user's fault.

Ran your entire checklist. Always did everything (hell I'll even add "no mods installed" to the list). Still got hacked on my WoW account a couple of years back. Nothing a quick password swap couldn't fix, but they still got in.

What 'mistakes' did I make?

[risingstar3110]

Originally Posted by Squarecrow

If it is their fault then sure I'll take back what I said and I'll apologize if you want. If it is their fault.

So far no one has proved it's server-side or even that they've had an authenticator attached beforehand. They just don't want to live up to their mistakes.

You missed the point, squarecrow. This is not a blame game where you can decide whether the customer is more at fault, hence shift the whole responsibilities onto them and avoid losing face/ reputation etc. The whole point here is what each party can do to prevent it happening or to mitigate the damage in the first place, and whether Blizzard set up their priority in line with customers.

Blizzard decided to provide the game on online platform (even when the whole thing can run offline) to run their DRM and cash auction houses for a should-be offline game. They themselves created and increased the risk of customers getting hacked (comparing to traditional offline game), so the gold farmers can dig in and make the profit from some other kids' dad Master Card. And they also know that they can't prevent people from going into 'random websites' or force them to have a series of net/computer protection. Murphy's law and such

So they should have counter-measures to prevent and mitigate the damage themselves. Let's see how Blizzard deal with it first. But similarly, BP can't expect the worker to not blowing up the oil drill , and hence does not have any safety measures for deepwater oil spill because "the contracted worker should know better". Or the government just legalise weeds, abusive drugs and expected "the customers should know better"

[Archon_Wing]

Originally Posted by Squarecrow

And plenty of other websites don't have SMS authenticators, what's your point? Some game company needs to offer multiple free services to protect your account when you can do it yourself? And even if you do get compromised they'll restored your stuff too. Blizzard isn't a bank, it's just a game company. So what if you lose some virtual property for a couple days?

Why don't my electronics or car come with free LoJack? What if they get stolen? That's not even my fault!

Wow, that's one of the worst analogies I've seen in years. I think you should level up before attempting to use the sarcasm skill.

When you purchase something like cars and electronics, it's a physical piece of property that you take. The transaction between you and the seller ends the moment you receive the item unless it is defective. Their responsibility was merely to deliver the item in proper shape and form.

On the other hand, when you bought Diablo III, you have to play on their server. No questions asked. You have to do it. Thus, they have more of a responsibility to prevent their side from having compromises because the product you bought is not just a one-time thing. It is ongoing. You are paying money to play this game on their servers.

Considering that Blizzard will partake in real money deals in the near future, they may not be a bank, but there's definitely more at stake here.

[Squarecrow]

Originally Posted by Keroko

Ran your entire checklist. Always did everything (hell I'll even add "no mods installed" to the list). Still got hacked on my WoW account a couple of years back. Nothing a quick password swap couldn't fix, but they still got in.

What 'mistakes' did I make?

I don't know. Let someone else use your computer? Got hit by malware on a trusted site that's usually safe? Used public Wi-Fi?

Are you saying that Blizzard's server was compromised at this time? Any news articles at the time of your compromise?

Originally Posted by risingstar3110

Spoiler:

You missed the point, squarecrow. This is not a blame game where you can decide whether the customer is more at fault, hence shift the whole responsibilities onto them and avoid losing face/ reputation etc. The whole point here is what each party can do to prevent it happening or to mitigate the damage in the first place, and whether Blizzard set up their priority in line with customers.

Blizzard decided to provide the game on online platform (even when the whole thing can run offline) to run their DRM and cash auction houses for a should-be offline game. They themselves created and increased the risk of customers getting hacked (comparing to traditional offline game), so the gold farmers can dig in and make the profit from some other kids' dad Master Card. And they also know that they can't prevent people from going into 'random websites' or force them to have a series of net/computer protection. Murphy's law and such

So they should have counter-measures to prevent and mitigate the damage themselves. Let's see how Blizzard deal with it first. But similarly, BP can't expect the worker to not blowing up the oil drill , and hence does not have any safety measures for deepwater oil spill because "the contracted worker should know better". Or the government just legalise weeds, abusive drugs and expected "the customers should know better"

Well this is a good point. They do have extra counter-measures though, the free authenticators. Of course not everyone has an iPhone/Android phone. Like you said though they can't force people to protect themselves. Even if they did have SMS authentication people would still get hacked. They also do have the damage mitigation - account restores.

Originally Posted by Archon_Wing

Spoiler:

Wow, that's one of the worst analogies I've seen in years. I think you should level up before attempting to use the sarcasm skill.

When you purchase something like cars and electronics, it's a physical piece of property that you take. The transaction between you and the seller ends the moment you receive the item unless it is defective. Their responsibility was merely to deliver the item in proper shape and form.

On the other hand, when you bought Diablo III, you have to play on their server. No questions asked. You have to do it. Thus, they have more of a responsibility to prevent their side from having compromises because the product you bought is not just a one-time thing. It is ongoing. You are paying money to play this game on their servers.

Seems like it went over your head.

Unless Blizzard's servers were compromised then the analogy holds true. They have protected their side until proved otherwise. They have no responsibility to protect your account from your mistakes. You're expecting something extra that isn't necessary just because you *think* it's so simple and easy for them to implement. Just like you shouldn't be entitled to have LoJack on everything expensive just because it can prevent and stop theft. There's a point where a company has to say no. And electronics can be much more expensive than a virtual account and they aren't something that magically reappear after they're stolen. Life is unfair. Or better yet, life isn't always what you want it to be.

[aohige]

My Monk just solo downed both Infeno Skeleton King & Butcher, both WITH full stack of valor.

AWWWWWW yeah.

Spoiler: