Comments for WoW UndeRealM

Comment on Blizzard Authenticator Flaw by Well, here's something interesting concerning the hackings... - Page 8 - AionSource.com

Thu, 21 Jan 2010 01:08:11 +0000

[...] safe. Oops, hacked anyway : Married IRL Blog Archive On Security No flaw? Here's one for example : Blizzard Authenticator Flaw – WoW UndeRealM So keep your authentifitaxor in your lame game. [...]

Comment on Blizzard Authenticator Flaw by Skizo

Skizo — Wed, 13 Jan 2010 14:51:20 +0000

Feel free to urinate at your wish, anyway I totally agree with you and, as things stand now (or how we think they stand) it’s not possible. Anyway what left me kind of worried was the easiness of an automation to ease such process. Considering how things stood back in the day, it was very easy to implement an automatic workaround right inside the keylogger itself.

Anyway we’re talking about more than one year ago, and a lot of fixes have been made to remove the problem. Such as, for example, the (now) impossibility to use the same code to log into game & website (clicky, clicky, remove auth, bye).

So, at the very end of things, would you leave a 1y+ post alone? :)

Comment on Blizzard Authenticator Flaw by lol

lol — Tue, 12 Jan 2010 19:39:44 +0000

I hate to urinate on your bonfire but your forgetting 1 crucial mentality not related to blizzard or players, The key logger and the hackers themselves. They will be key logging LOADS of people at the same time (they are making a large scale business out of this), its irrational to think that they would read your specific key log string within minutes of it arriving and then utilising it before the code expires, the chance of that happening is approximately the same chance as your vindictive flat mate borrowing your Authenticator when your not looking and raping your account. Even if it did happen you can bet your butt the chance of it happening again would be even smaller as you would have been bathed in advice about not being dumb enough to brows key logger hotspots and to get anti viral software to nail the loggers. and just as important you would still get most if not all your losses back from the hack. It may not be an air tight system but its a bloody good one for dummies that don’t brows safe and for the rare accidents.

Comment on Blizzard Authenticator Flaw by Skizo

Skizo — Thu, 05 Nov 2009 01:27:21 +0000

It would be a good idea if that’s how the authenticators worked, which is clearly not the case. The only thing the auth will do is provide you with a valid code (for a limited set of time) to allow you to login. Creating a new one won’t disable the previous one. It’s not sort of a car alarm system. You can do the following: type in the first one, generate a second one, and then log still with the first one. Since the auth data is not synchronous, your procedure won’t work, while it “kinda” would work given some of the car alarm systems.

Good call though :)

Comment on Blizzard Authenticator Flaw by BleeBlee

BleeBlee — Wed, 04 Nov 2009 22:45:22 +0000

How about another solution that you never thought of. After you login to Account # 1, press the Blizzard Authenticator again. This will generate another code that needs to be used to login and will not be picked up by a key logger since you will not be typing this code in. Problem solved, one Blizzard Authenticator, multiple accounts, no problems. ;)

Comment on Blizzard Authenticator Flaw by Skizo

Skizo — Mon, 13 Apr 2009 17:55:04 +0000

I'd like to make you aware of a few things: First: what you are saying makes totally no sense. Second: not everybody is able to play in totally safe conditions. The only time I got hacked, for once, was when I logged on my sysadmin's friend notebook, in his network café. Little that he knew, back in the UICentral days, he got a keylogger on. Third: if somebody happens to be in need to play from another computer, say, from a network café, should be a little more protected, and this by far is a great solution. And the usual explanations such as "if you're not on your computer do not do anything at all" just plainly suck, and I'm not discussing here why. Fourth: I'm not asking anything different from what I have, I just pretended (and obtained, albeit in a small part) the server-side code of the authenticator to be fixed. Again what you're saying makes TOTALLY NO SENSE. It would cost a lot more? Regular customers wouldn't afford it? WTF?!? Did you even understand what I wrote here? Guess not. Fifth and last: I'm BLOODY TIRED of idiots just like you who blame people for getting keyloggers, or being hacked or whatever. When I got hacked I've been called a power-leveler, a gold-buyer, a moron, a porn-downloader, an idiot and whatnot. Guess what, it wasn't even closely my fault, neither my friend went "browsing" "those porno sites" or "downloading any shit". In certain border-line conditions, there's not much you can do. Stop being a jerk. Overally I'd like to tell you to both re-read and try to understand what I wrote and go get a clue. Or just get the hell out, that'll do too. Peace.

Comment on Blizzard Authenticator Flaw by Samuel

Samuel — Mon, 13 Apr 2009 07:09:33 +0000

Or you just skip those porno sites and think before downloading any shit? And you wont get any key loggers! And a hacker wont be able to hack you? :> Even if the system is kinda failing, it’s a cheap one! To make one you are asking for would cost a lot more and an regular customer wouldn’t afford to get one for himself. There might be a failure, but YOU will always be the biggest failure if you get hacked.

Comment on Death Knights by jONY DEpp

jONY DEpp — Sun, 15 Feb 2009 21:28:16 +0000

Sweet

Happy huntin man.

Comment on Death Knights by Skizo

Skizo — Fri, 13 Feb 2009 16:47:16 +0000

Lore speaking I found it more appropriate to roll a human dk. Other than that, nothing much.

And ofc, I got a Tauren DK too =)

Comment on Death Knights by jONY DEpp

jONY DEpp — Thu, 12 Feb 2009 06:07:37 +0000

Rofl mate, i was bein an idiot

Ah, im more of a horde guy. Is beta any good and whats good with a human DK?