Blizz security fails

#0 - Aug. 27, 2010, 12:17 a.m.
Blizzard Post
I have a friend who's account was banned for using cheats/gold farming/ect. His account was recently banned. He quit playing the account in January and his computer that he used has been in storage the whole time. His password is alpha numeric with special chars and he did not give it to anyone. I am hearing many complaints about inactive accounts getting banned for stuff like this. Explain to me how an inactive account gets hacked when there is no possible way a keylogger could get the password.
#17 - Aug. 27, 2010, 1:32 a.m.
Blizzard Post
As the others explained, Ofthrall, an account can become compromised long before it is actually accessed and either stripped or used for exploitation.
Q u o t e:

Oh really. So you are telling me that Blizz has never had security issues?


Not thus far, no.
Q u o t e:


They cant even stop gold farmers from flying level 1 toons in formation. Fail. Not to mention gold hacks.


As stated that is possible through client side exploitation and not technically considered a hack. Our Developers are working on preventing the ability to do what they are doing but it takes time as we have to be able to stop it without negatively impacting legitimate players.

I'm not entirely certain what you believe are "gold hacks".
#47 - Aug. 27, 2010, 1:56 a.m.
Blizzard Post
Q u o t e:

I understand the ways that his account could be compromised but since he has not played it in over 6 months why does he have to suffer a perma ban? Also, all of you on the "Blizz security is flawless" wagon need to wake up.


He doesn't necessary need to suffer permanent closure of the account, Ofthrall, but we would need to verify that whatever the account was closed for took place while it was compromised. If he hasn't done so already please have him review the following thread on compromises and what steps to take.

Account Hacked? Security Issue? Look Here!
http://forums.worldofwarcraft.com/thread.html?topicId=24702231244&sid=1
#53 - Aug. 27, 2010, 1:59 a.m.
Blizzard Post
Q u o t e:
Blizz will not return phone calls or email.


Was he somehow able to leave a message? O.o Do you mean he is unable to get through to our Billing department? That is entirely possible as the lines have been fairly busy. I'd recommend to keep trying though if he needs to update his account ifnormation, it sometimes just takes a bit of luck to get through.

As for e-mails, well, if his e-mail hasn't been processed yet it isn't that we will not address it, it means that we haven't gotten to it yet.

Mind providing me with the name and realm of a character on the account, Ofthrall.
#63 - Aug. 27, 2010, 2:01 a.m.
Blizzard Post
Folks, please. Can we please dial it back a bit. :)
#105 - Aug. 27, 2010, 2:51 a.m.
Blizzard Post
Q u o t e:
Here is one of his toons. Looks like the unauthorized activity started in March. Recently banned.


I'd say in late July actually. I'm unable to find any e-mails from the registered address on the account, which usually indicates the person is using the wrong e-mail address or the compromisers changed the address.
Q u o t e:

For all you trolls looking for an IT lesson...


The squeaky wheel gets the grease.


Really? How so? You don't believe that the account action will be oveturned due to your post here do you, Ofthrall? I'm sorry but this is not a petitioning system and the only thing I am really able to do is provide advice. I asked for the character name and realm so I can see if your friend has actually contacted us yet so I can again advise you to let them know that they should following the instructions found in the link I provided earlier.

If your friend does not have access to the current e-mail address registered to the account he'll need to contact our Billing and Account Services department directly.

You can call 1 (800) 592 5499 (1-800-59-BLIZZARD) 7AM-8PM (PST/PDT) for live representation.
Australian users should please call 1-800-041-378 if the standard 800 line does not work.
Q u o t e:

It is also likely that there is a blizzard employee using inactive accounts to make money.


I'm sorry, Ofthrall, obviously given the extremely limited view that you can actually believe such a ridiculous claim. No, it is nearly unimaginably unlikely that a Blizzard Employee is using inactive accounts. One, we do not have access to the information necessary to access the account. Two, there are checks and balances throughout the company that would catch such activity. Three, well three is really superfluous.
#106 - Aug. 27, 2010, 2:54 a.m.
Blizzard Post
Actually, I think this thread has run its course. No one has said it couldn't happen, Ofthrall, but they have said it hasn't happened yet.

Obviously you will believe what has been said or your won't. It really doesn't matter because this doesn't appear to have ever been about having a discussion.