#0 - July 18, 2009, 5:57 p.m.
All this hacking activity has got to stop
#19 - July 18, 2009, 6:15 p.m.
After reading this over, should you possess any thoughts regarding how we may improve, please do not hesitate to post them within our Suggestions Forum. As also noted within the cited thread, though, please remember that we must balance security with feasibility and player enjoyment. :)
#24 - July 18, 2009, 6:27 p.m.
#37 - July 18, 2009, 7:08 p.m.
#53 - July 18, 2009, 7:36 p.m.
Q u o t e:
No I guess I didn't see it before. I am just speaking from my own personal perspective and experience. I know there are always two sides to any argument. And I will go and read that thread since it pertains to my issue.
I think it may help. If anything, it will show that we're not an idle bystander by any stretch of the imagination; we do much to assist in the prevention of compromise and the recovery from it. :)
#58 - July 18, 2009, 7:38 p.m.
Q u o t e:
authenticators should be free.
They should come with every package of wotlk sold in stores wether it be from wal-mart or online.
Seeing as how blizzard owns our accounts, items, characters and not us,,,,,, then the responsibility is not as much ours as some of the <removed> on here wants everyone to believe.
For those just now joining this conversation, I'm going to reiterate my previous post:
- I recently discussed the ways in which Blizzard Entertainment is working to assist players with account and computer security, Deathencarn. You may review this discussion here: http://forums.worldofwarcraft.com/thread.html?topicId=18360840329&pageNo=1&sid=1#8
After reading this over, should you possess any thoughts regarding how we may improve, please do not hesitate to post them within our Suggestions Forum. As also noted within the cited thread, though, please remember that we must balance security with feasibility and player enjoyment. :)
#75 - July 18, 2009, 7:50 p.m.
Q u o t e:
Let's keep this civil and constructive, folks.
#82 - July 18, 2009, 7:55 p.m.
Q u o t e:
because suggestion forums are rarely looked over by anyone affiliated by blizzard and when they do look they never listen to anyone's suggestions anyway.
As a few of your fellow posters have noted, the Suggestions Forum is actually quite actively reviewed. You'll simply see no form of official response within due to legal and feasibility concerns.
To reiterate a link already, a great discussion on this topic may be found here: http://forums.worldofwarcraft.com/thread.html?topicId=6286660338&postId=62859156400&sid=1#74
If you've some ideas under your belt regarding account security, Critmonster, please do not let the common fallacy stop you. We're always listening and will not hesitate to act upon the contributions of our players should they benefit the game. Unfortunately, we cannot be made aware of an idea unless it is first shared with us, so if you believe the subject worth broaching here, I'd encourage you to create a new post within our Suggestions Forum or simply copy and paste your thoughts into an existing thread. :)
#102 - July 18, 2009, 8:27 p.m.
Q u o t e:
i have to wonder... has it ever occurred to anyone that the sheer volume of accounts being hacked could be on blizzard's end?
This is something we consistently check and re-check and for which we establish safeguards. The compromises you've seen to date are due to a client-side breach.
Q u o t e:
does anyone out there truly believe that ALL of blizzard's empolyees are HONEST???????
This is also something we consistently check and re-check and for which we establish safeguards. The conduct of a Blizzard employee is always under scrutiny; everything we do is monitored and held to the highest of standards. Though we cannot see all ends, we can certainly do our part to ensure that some of them do not come to pass.
Q u o t e:
I just feel completely frustrated since I have received no response from my emails to account administration since the 9th of July. I pay to play this game and to have this happen just makes me so angry. There is no phone number I can call besides billing, and I am discouraged from calling that number because that is not their department. I just feel like such a small fish in a huge ocean.... I am robbed of one of my favorite things to do when I get off work and have been for over ten days. It's not right. If I didn't like this game so much I would have given up already, I don't know what else I can do besides complain to expedite a resolution to my problem.
Bellâdonnâ, if you can provide me the name and realm of a character on the account in question, I can work to confirm that it remains in queue for restoration. :)
In the meantime, though, go ahead and focus on what you can do for yourself: take control of your account and computer security and really work to establish a solid foundation. Some excellent tips and suggestions may be found here:
- Computer Security Recommendations
http://forums.worldofwarcraft.com/thread.html?topicId=1778038509&sid=1
I know this must be very frustrating for you, so if you've any questions, please let me know.
#119 - July 18, 2009, 9:04 p.m.
As a reminder, though, if anyone herein possesses a thought or an idea regarding how we may improve account security, the most apt place to post is within our Suggestions Forum. While the Game Master department is happy to assist in any way that we are able, facilitating a systems change is beyond our purview and thus best brought to the attention of our developers. :)
#128 - July 18, 2009, 9:17 p.m.
May I ask if anyone has submitted a petition on your account's behalf, though? If not, go ahead and email [email protected] from your registered email address and include the following information:
- * Whether or not any characters have been transferred
* If characters have been transferred, which ones—include both original name and realm
* Whether or not characters have been deleted
* If character have been deleted, which ones—include both name and realm
* Whether or not inventories have been purged or sold
* Whether or not gold is missing
* If gold is missing, in what amount
* If a guild bank was affected
This will just double-up and cover all bases. Also, only provide what you can; we'll fill in the rest. :)
#141 - July 18, 2009, 11:32 p.m.
Q u o t e:
With that all said, as unsettling—and, perhaps, as humbling—as it may be, accepting that compromises occur client-side is the first and most important step to bolstering an account's security.
Please know that this assertion is not the blanket assignment of blame. To say that those who are compromised are always to blame for their account compromise is to insinuate, semantically, that each and every affected owner willfully contributed to the dissemination of the account's log in and password. Neither you nor I believe this is the case for all account compromises. Some, yes. All, no.
I am simply asking you to realize that an account owner's network of security may be imperfect. As the old adage goes, "There's more than one way to skin a cat," and, regrettably, this sentiment also holds true in the case of compromise.
One's security may be compromised through malware, for example, or through the unknowing provision of account-specific information (through a phishing email or website). One's email address may be gleaned or Security Answer & Question guessed. Our goal, as end users, is to admit that these threats exist, understand that we have underestimated how secure our systems are, and take the appropriate steps to stengthen our defenses.
We do not wish to further penalize players who have been affected by compromise by pointing an accusing finger in their direction. We do, however, want them to understand that compromises occur client-side and that, to prevent such compromises from repetitiously wrecking an account, one must first accept this fact. We'll do all that we can to assist—both in terms of prevention and recovery—but ultimate responsibility lays in the hands of an account holder. This may be a scary thought at first, but fully realizing the nature of the beast, so to speak, is the one of the first steps to taming and controlling it.