Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Buying anything on Amazon? Please use the Geekzone Amazon aff link.




BDFL
50225 posts

Uber Geek
+1 received by user: 4756

Administrator
Trusted
Geekzone
Subscriber

Topic # 107373 10-Aug-2012 12:11 Send private message

Just received and posted information about Blizzard Entertainment leaked data:


The unauthorized access included email addresses associated with Battle.net accounts in all regions, outside of China. Additional information from accounts associated with the North American servers (which generally includes players from North America, Latin America, Australia, New Zealand, and Southeast Asia) was also accessed.

The company says the information includes cryptographically scrambled versions of passwords but not the actual passwords, the answer to a personal security question, and information relating to Mobile and Dial-In Authenticators. 

Blizzard says that even with all this information hackers would not be able to gain access to Battle.net accounts.

Based on Blizzard’s investigation to this point, credit card and other customer payment data does NOT appear to have been accessed or affected. As a precaution, however, Blizzard encourages players to change their Battle.net password and any similar passwords used for other purposes.






Create new topic
398 posts

Ultimate Geek
+1 received by user: 3


  Reply # 670887 11-Aug-2012 08:28 Send private message

My account just got locked out for "hacking", seems to much of a coincidence for these two events to be unrelated.

2526 posts

Uber Geek
+1 received by user: 249

Trusted
Subscriber

  Reply # 670955 11-Aug-2012 11:32 Send private message

Good thing I have one of those handy tokens (that even my bank won't offer me) I guess. Best $6 + $20 shipping ever spent.

7777 posts

Uber Geek
+1 received by user: 326

Trusted
Subscriber

  Reply # 671189 11-Aug-2012 21:26 Send private message

Embarrassing for Blizzard but they are such a high profile target anyone not using their two factor authentication (battle.net authenticator) is crazy.

It's even available as a free app for android and iphone., best $0 I ever spent.

https://play.google.com/store/apps/details?id=com.blizzard.bma

http://itunes.apple.com/nz/app/battle.net-mobile-authenticator/id306862897?mt=8



BDFL
50225 posts

Uber Geek
+1 received by user: 4756

Administrator
Trusted
Geekzone
Subscriber

  Reply # 671193 11-Aug-2012 21:36 Send private message

Kyanar: Good thing I have one of those handy tokens (that even my bank won't offer me) I guess. Best $6 + $20 shipping ever spent.


They had access to the token and the recovery information - whoever got that can get in anyway, unless you change your password now.


Ragnor: It's even available as a free app for android and iphone., best $0 I ever spent. 


And Windows Phone as well. 




710 posts

Ultimate Geek


  Reply # 671731 13-Aug-2012 11:18 Send private message

Changed PW.

Good timing hackers (Not!) just when expansion due out next month.




Worst Response To A Crisis:
From a readers' Q and A column in TV GUIDE: "If we get involved in a nuclear war, would the electromagnetic pulses from exploding bombs damage my videotapes?"



2526 posts

Uber Geek
+1 received by user: 249

Trusted
Subscriber

  Reply # 671869 13-Aug-2012 16:02 Send private message

freitasm:
Kyanar: Good thing I have one of those handy tokens (that even my bank won't offer me) I guess. Best $6 + $20 shipping ever spent.


They had access to the token and the recovery information - whoever got that can get in anyway, unless you change your password now.


Ragnor: It's even available as a free app for android and iphone., best $0 I ever spent. 


And Windows Phone as well. 


Only the software tokens.  The RNG seed for the physical authenticator (which is a Digipass Go 6 device) is still secure as only the HSM has that info.

Now with the recovery information, they could theoretically call up and get Blizzard to reset my password and/or disconnect my hardware authenticator.  Since we can't actually change our security question answers though, I don't see changing my password making a whit of difference.  One would hope though that Blizzard has instructed their CSRs to require physical identification prior to actioning any password reset/authenticator lockout type calls.

Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





Trending now »

Hot discussions in our forums right now:

My un-consented UFB install
Created by thurthur, last reply by mdooher on 28-Nov-2014 18:57 (79 replies)
Pages... 4 5 6


This is the end ...
Created by joker97, last reply by heavyusr on 28-Nov-2014 21:44 (54 replies)
Pages... 2 3 4


Gigatown winner town and plans
Created by freitasm, last reply by Demeter on 28-Nov-2014 08:59 (76 replies)
Pages... 4 5 6


Seen any good Black Friday / Cyber Monday deals?
Created by Jaxson, last reply by ckc on 28-Nov-2014 15:08 (24 replies)
Pages... 2


Gull Employment Dispute.
Created by networkn, last reply by richms on 28-Nov-2014 17:57 (153 replies)
Pages... 9 10 11


Do Chorus Still Fit ADSL to Rural Cabinets?
Created by TLD, last reply by TLD on 28-Nov-2014 21:56 (17 replies)
Pages... 2


Stuff.co.nz hacked by Syrian electronic army?
Created by surfisup1000, last reply by dclegg on 28-Nov-2014 13:35 (17 replies)
Pages... 2


Excessive Vodafone Support call waiting times 75 mins and then i have to wait an hour for a callback
Created by i4n, last reply by Talkiet on 28-Nov-2014 22:15 (16 replies)
Pages... 2



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.