I was keylogged, Blizzard you could do more

#0 - Oct. 2, 2006, 6:53 a.m.
Blizzard Post
I am angry. I am a adult, a mother and have played WOW with 3 accounts since beta.

Thats well over $1225 dollars I have sent to you Blizzard for monthly fees, software and to even add insult to injury another $75 in fees to transfer 3 account charecters to a different server a very shot time back because our Old server was so bad since March 06.


I am angry Blizzard because I feel you do NOT do enough to help us in this regard...I run anti-virus software, I am behind a router, I dont download unknown links etc etc. No one, not even my husband knows my account info.

Currently I have stopped the billing on the other 2 accounts ( they are fine), I had pre-orders in for 3 copies of BC
whether I continue to play wow or not depends upon how you handle this and how quickly.


As someone whom has invested a fair amount of both time and money in this online game, what I "expect" is that since I have spent over over $1200 with you, and since it would be plainly obvious to ANYONE with any IT skill that someone in that 90 minute time frame I detailed to you in my email ( for the account issue via your account managment form), that it came from some IP range that no doubt is in Asia or something.

I "expect" since i know for a fact as an online company ( I am a senior manager for Time Warner Tech support) that you will simply go in and see that " yes ...humm yeah...she logged off...logged BACK on form an ip thats no doubt on the other side of the planet...and just "decided" for the fun of it to destroy all of her stuff and her items and delete her charecters on that account BUT not the other 2...

I "expect" you to simply say " hmm yes she been paying for multiple accounts for a very long time, has never ahd any "issues" and to then simply go in, and DO A RESTORE from some date a day or two or whatever before 0120-0300 sat morning 093006 ( when this happaned).

i "expect " to be put back "exactly" as I was....and I "expect" you to "follow the trail" and to shut these people down ...the money the items whatever they got form me HAD to go somewhere.


Thats what I "expect". I dont expect to have to try and relearn almost 2 years of trade recipes, redo countless items etc ...

It is totally "absurd" for someone to "only restore someone part way". You have backups....you cannot possibly even begin to tell me that if a power outage /hard drive crash caused a failure you cannot restore accounts. you TRANSFERRED me form one server to another, you can COPY us to the TEST SERVER......


NOW>....


You, as BLIZZARD do NOT do enough to stop this. I will freely admit, from what I have been able to find out...that this logger came to me because on tuesday I downloaded a popular ui addon from curse gaming that shows "plus healing". I asked myself, but WHY was only one account affected? why not all three? the addon is on MORE then one comp?

AHHHHHHH but on tuesday we had a patch.....and IM behind a router.....and guess what? Your downloader also uploads to "share the load" fomr the computers ( as I understand it)...so I have to open ports on the router to one comp to get the patch.

The other comps had it. but they couldnt get out because ONLY the one comp had the router opneing the ports....and I suspect the keylogger used THOSE ports...becasue I did in fact make a human error.

I forgot to close those ports back down AFTER the patch.

My fault, I thought my router, my anti virus software, my spybot, my not going to "unusual websites" was enough.

I was wrong.


But...WHY I am angry at blizzard still?


because you do do NOT give US , the paying customer enough tools to protect us.

1) you make us use our account names to post on the forum, your "warden" software doesnt cover that ( true we choose to post..thats tru)

2) You KNOW this has become a HUGE issue...you have created all these "new" sections in your account management to deal with it...

3) THE BIG ONE.......you do NOT give us the ability to make it so ONLY we can delete our accounts.

eh? whats that YOU say?

well, you MAKE us agree to all these emails when we transfer a charecter.....but...we dont have a button to LOCK our account...

there "NEEDS" to be a button on the charecter creation screen that if pressed sends a email to the REGISTERED email address and if we agree..LOCKS the account so it CANNOT be deleted.

People can Choose to LOck or NOT. But at least that way a hacker cannot delete the ENTIRE charecter, becasue I would NOT agree to the email....

Ohhhhhhh...hmmm why Gee...that DOES sound like a good idea. I mean lets face it...the "human workload" factor this causing you guys must be huge...THINK about how much time that would save....at least the charecter(s) would be spared,,,,sure its exatr effort then now but i imagine far less then a restore


4) You are SOOOO worried about "exploits"...that when its OBVIOUS, as it is in my case when you look at the IP logs and the time factor, that you dont ( as I understand but it IS what I "expect" you to do) simply restore the charecter from a backup and be done.

5) This one is tough...but I do think its time for a change....you make it TOO fast and easier for a hacker to disenchant the gear. ON epics for example, there should be a 30-60 second cooldown in place. As well as a 30-60 second cooldown on selling them to a NPC, OR destroying them.

Yes...it would affect EVERYONE, but lets face it....I have played this game for almost 2 years with 3 accounts and have raided MC, BWL and ONY OVER 45-55 times...

at NO time EVER that I can think of would a 30-60 second cool down on both disenchating an epic and sellign an epic to a NPC have caused a problem.

BUT it would TAKE TIME for the hackers to SELL our stuff or to DE it...time that they DONT want to spend in game. TIME to give someone to stop them or to catch them.

THEY got me sometime in ONLY a 90 minutes window.

I "think" most people in game would be willing to put up with those restrictions.


6) I want to prosecute. I WANT to help you with legal action. I WILL sign police afidavits ( sp?), I will make a police report, I would make a report with the FBI ( I am assuming because it involves a computer crime?) whatever.

I WANT these %$*( to pay and to get it stopped. I "assume" ( and I could be wrong) that installed a keylogger would be a violation somehow of the security act and may come under a felony for computer crime? ( I dont know...I know if I was to put a keylogger on a companys computer without their permission I could go to jail).

I dont want JUST a restore...I want criminal actions..( IF a crime has been comitted..if not..well then ignore this)


Bottom line...my computer and its security ARE my responsibility. True enough. BUT you make it easy for them. You have us "upload" during patches, you dont allow us to "protect" our accounts with email notifications to delete our charecter(s), ( if we want). You dont simply do a "backup restore" when its obvious what happaned.

You allow somone to quickly and easily simply learn a new tradeskill and immediately disenchant literally years worth of items...

I am , I will admit VERY VERY angry right now, IM angry at myself and Im angry at YOU blizzard.

Why, in gods name would you only "partially" restore someone? ( ie no recipes etc) ( now I PRAY thats NOT what you do to me, but Ive gotten different reponses). if you restore, restore...we dont want "reimbursement".

Preventing exploits is important, but at the same time backups ARE there for a reason, and it doesnt take a IT networking genius to look at something like what has happaned with me and see in a moment glance what happaned.

I am anxious about this, I am angry ( and also with myself) and I truely also question whether or not I should be playing a game that requires so much time investment...where something like this feels like my home was robbed.

It would be like a burglar taking all my familes stuff and then me going to the police station and I could SEE my stuff...I KNOW they have it...but the say " well yeah its obvious that it was taken...but here we are only going to give you a little back...even though we have a record of everything you had.




I KNOW this is a very long post.......I apologize......but IN my VERY humble opinion, I think I haev made some good points.

To the customer service moderator(s)....

I am VERY anxious about getting back my alchemy recipes, my factions, my items and my gold ( in that order).

I am VERY concerend if it takes "weeks" (now IM parying maybe it will only take days or that maybe monday for exmaple my charecter will be back)..that that would mean you have SO much of this going on...that is IS an epidemic.


Please.....pass on some of my points....GIVE us the ability to lock an account.

And please, if you can and you made it thru this long angry post, try not to flame me....I am angry, hurt and upset. I have 99 days played time on this charecter alone.....esp for me, being a mom, as I see that thats HUGE amount of my free time. I cannot afford time wise to rebuild those recipes and items.

and I still WANT to play...but at this point it all depends on you Blizzard.


please help me, help the others its happaned to, and help us ALL to stop this. GIVE us more tools to protect against this...Ive have listed several ideas that are easily implemented and possible and would go a long way, I think, to help YOU blizzard, help us.


Thank you, and I hope for a blue reply and am hoping for a full recovery.


PS...

i WANT to help prosecute, and Ive sent an email to that effect....you have all my contact info...if "they" are within USA Jurisdiction and it IS a crime, contact me.











#3 - Oct. 2, 2006, 7:43 a.m.
Blizzard Post
Before all else, Tortiebear, allow me to offer my most sincere apologies for the apparent distress you have been caused by what can only be described as a harrowing experience; believe me when I say that we would like nothing more than to assist you in restoring your account to all its former glory. That said, please also understand that, while we shall make every effort to reverse whatever damage was dealt during the compromise, restoration is not always guaranteed. This does not mean, however, that we shan't strive to recover everything that was lost. :)

As for your ideas as to how various aspects of functionality may be revisited in the interest of maintaining the safety and integrity of players' accounts, I'm afraid that -- while the concepts are not necessarily without merit -- the Game Master Department has no involvement whatsoever in the decision to effect such change, nor are we able to convey players' opinions to the Development Team through any internal means.

If you wish to pose your concerns such that the proper authorities may take them into consideration for the future, I would strongly recommend that you use our Suggestions Forum, which was created for just such a purpose. The developers regularly peruse the threads there to gather player feedback, as well as garner new ideas for future changes in content and functionality; although legal restrictions prevent us from posting in response to players there, you have my word that your ideas shall be seen and ruminated upon. I wish you the best in making your voice heard. :)

Q u o t e:
I totally agree with you, and I'm also disturbed (no pun intended) by the lack of blue response on this specific matter... They IMMEDIATELY reply to the "Honor" thread but not this one. They should be ashamed of themselves as a company and as people. WE the paying customer DEMAND better customer service.


If you'll note the timestamps, Disturb, Tortie posted this about 40 seconds before I replied to "Honor," at which time I was likely formulating my response to that thread; it would have been difficult to see this before then. I am truly sorry, however, if you believe that to be dissatisfactory.
#44 - Oct. 2, 2006, 8:22 p.m.
Blizzard Post
While I appreciate the feedback and healthy discussions being had here, I must ask politely that this be continued in the proper forum; the Suggestions Forum: http://forums.worldofwarcraft.com/board.html?forumId=11122&sid=1

Thank you. ;)