Comments on: Authenticator Arrives

By: Authenticators are going out, via USPS | Warcraft-News.com

Authenticators are going out, via USPS | Warcraft-News.com — Wed, 09 Jul 2008 20:00:29 +0000

[...] had gotten their money refunded by Blizzard), but apparently there are at least a few going out. Mania got hers — she says that it works great, that she has already associated it with her accounts, and [...]

By: Ghanur

Ghanur — Wed, 09 Jul 2008 18:39:56 +0000

One attack vector is key-loggers – put on a PC by exploiting insecure browsers, like MS IE.
Another is playing over ‘public accessible PCs’ (AKA non-trustworthy environment) – key-loggers are a given.

The keyfob is a good enough countermeasure.

By: Faulk_Wulf

Faulk_Wulf — Tue, 08 Jul 2008 17:25:54 +0000

In addition, not everyone will want or need one of these things. Those that play on public computers, travel alot, or… well I really don’t know who to be honest. Cause I am not their target.

I have never felt my account is insecure, I don’t write down my information, I don’t buy gold, guides, or sell accounts. So I have no use for this.

It seems like a cool idea though a little overly complex.

By: Znodis

Znodis — Tue, 08 Jul 2008 15:48:36 +0000

There is no such thing as secure, Messyah. Even with the Authenticator. There is only the ability to make the effort required to break-in greater than the reward.

Second, the biggest flaws in WoW security have nothing to do with Blizzard programming and everything to do with how players handle their account information, buying/selling accounts and gold, and online browsing habits. Bliz isn’t robbing anyone, they’re handing out sawed-off shotguns to those that are worried about the gangs you mentioned.

I hope they get more in soon.

By: Messyah

Messyah — Tue, 08 Jul 2008 15:20:25 +0000

Extortion! – That’s the word. LOL, it was eluding me until now. :-)

By: Messyah

Messyah — Tue, 08 Jul 2008 15:19:18 +0000

Its a cool idea, but it’s foul that we have to pay extra to be “more secure” in a system that should have been secured in the first place. IMHO, they should flit the bill for these things. To me, this is like paying protection money to the same gang that is robbing you if you don’t pay. Capice?

By: Qix

Qix — Tue, 08 Jul 2008 02:20:29 +0000

Wikipedia has a long (and overly complicated) article on RSA SecureID’s

See this picture:
http://en.wikipedia.org/wiki/Image:RSA-SecurID-Tokens.jpg

That number changes every 30-60 seconds, You need to login with your normal information and the up to the second code on the Keyfob.

Each WoW account has its own Keyfob, so you must have your own specific keyfob that is attached to your account to get the right code.

By: Fearmdemon

Fearmdemon — Tue, 08 Jul 2008 01:37:36 +0000

lol…i have no idea how it works, but it sounds good