#323 - July 24, 2009, 7:53 a.m.
Q u o t e:
Ooops sorry :( I dont post on the forums normally, and was unaware that suggesting that would be out of line for this forum topic.
I never said you were out of line, Darkblue. :) I was just referring you to the place that your suggestions would be able to be seen by those who can implement such changes.
Q u o t e:
I understand what you are saying about account logins. However what happens if the hacker/spammer gets the email. Yeah you can change it. But if they get your email, and you guys send new passwords thru the email that would be horrible if they took over your email too. How would you get your account back?
If the person who compromises your account gains access to your account, even an unmerged one, they are able to change your e-mail address. In such cases you'd need to contact our Billing Department. Once you verify your identity, usually done by answering your Security Question/Answer, they will update your contact information so you can regain access to the account.
Q u o t e:
So. If the hacker has your email, and you guys send passwords thru emails how do you get your account back? Also if you dont want to make yet another email and password to keep up with,
As I mentioned before, Darkblue, if the compromiser were to get a hold of your account name (on an un-merged account), that's it, they will always have it. Unlike a Battle.net account the account name on a World of Warcraft account can not be changed. So although it may be inconvenient to get a new e-mail address, it is better than being stuck with an account that is at an increased risk because someone already knows half of the information necessary to compromise you again.
Imagine if you had a credit card stolen. Is it a pain to cancel that card and get issued a new one? Absolutely. If you have the ability to change your account name by changing your e-mail address you have about the same option, you just canceled that account name so the thief no longer can use it.
Q u o t e:
the hacker getting email info could also get very private info. See my concerns?
Most accounts are compromised in one of three ways. Either you have provided the account information to someone voluntarily, you answered a phishing e-mail and provide someone with specific account information, or you accessed a system that has a trojan/keylogger program on it.
If your system is not secure they may have access to a great deal of personal information. It is the malicious program and computer security that should be the concern, not the logging in method you use to access your World of Warcraft account. If you have such a program on your system it wouldn't matter what log in system was used, the program would still be on your system and it may still have access to sensitive personal information that has nothing to do with WoW.
Q u o t e:
Also what happens to the person with multiple wow accounts? If they are all tied together wont it give instant access to all the accounts you have? One of our guildies has several wow accounts, he lets his kids play on. If he merged them all on a b.net account, and someone hacked that, they would have instant access to all his accounts. As it stands they are all played on different computers with different logins. He does not want to make different emails for all this kids accounts. So is there any other way to seperate the accounts so that if your b.net gets hacked they dont get all of them?
If he has minor children and allows each minor child to access a specific account registered to him that are merged to a single Battle.net account and if that account is compromised, yes, all accounts attached can be affected.
Personally I think the concern should be to keep a safe and secure system.
Also keep in mind that we can and do investigation such compromises and work to repair 100% of any damage that is caused.
This has become a Battle.net thread somehow. O.o I hope I addressed some of your concerns, Darkblue.