Email Authorisation

#1 - Sept. 18, 2012, 10:26 a.m.
Blizzard Post

I’m having to authorise my account almost every time I try to log in. Whilst this is annoying, I don’t mind so much although it does mean I have to keep my emails open. My problem is that every time I authorise, it’s coming up with a different location. It has never once come up with my city, and the closest it’s been is about an hour away. This has ranged up to the other side of the UK. I know that it’s me asking for these emails because of the times that they come through, but it seems ridiculous to authorise these IP addresses and locations if it’s not going to stay the same (I only game from my house). Surely this makes it more likely to be hacked?

#3 - Sept. 18, 2012, 1:30 p.m.
Blizzard Post

I’m having to authorise my account almost every time I try to log in. Whilst this is annoying, I don’t mind so much although it does mean I have to keep my emails open. My problem is that every time I authorise, it’s coming up with a different location. It has never once come up with my city, and the closest it’s been is about an hour away. This has ranged up to the other side of the UK. I know that it’s me asking for these emails because of the times that they come through, but it seems ridiculous to authorise these IP addresses and locations if it’s not going to stay the same (I only game from my house). Surely this makes it more likely to be hacked?

Well, yes and no to that last bit. It’s far, far more likely you’d be hacked from a different continent than that you’d be hacked from a location an hour away. So the authorization emails can be very helpful, where you see, say, “Leeds,” “York,” even “Chester” or “Portsmouth” and then suddenly see “Beijing.” It’s that last one that is the “ah ha!” moment, although naturally a compromise could come from the other places (but not nearly as likely).

Having said that, I will ask the team if disabling the feature is on the cards. We’re so intent on trying to protect our players — and help them protests themselves — that I’m not sure how high a priority it would be to disable a feature that is provably effective, but I take on board that there are cases where disabling may be the player’s desire.