How to ruin my only day off.
#1
Fri, 06/01/2012 - 12:44
How to ruin my only day off.
So after a long overnight shift i got home and proceeded to log into Diablo 3 only to find a naked character and all my stuff gone,i had been hacked.Here i am 2 days later and fucking Blizzard still hasnt rolled back my account.Today is my only day off and i had planned on playing all day but that isnt possible now.In closing i recommend you guys grab an authenticator (i got the mobile app for my phone) and check your pc for viruses often.
That sucks. Get a Blizzard Authenticator. You can buy a key fob for a few bucks, or download the app for free if you have a smartphone. This happened to me in WoW once. Also, make sure to update Windows, Java and Flash on your PC. Unless, you clicked on a bad email.
I've been seeing this on alot of the Diablo forums. Sucks to hear that. I just put the authenticator on my phone.
I got my roll back this morning,went from lvl 32 to 25 and lost 3 pieces of armor and a pair of swords that had insanely good stats.I did get the authenticator on my smartphone now so i got that goin for me but i keep my pc squeky clean by doing 2 virus sweeps every other day and i dont open emails unless i know the person so im not sure where i couldve picked up a virus.Anyway after i finish my first playthrough today im down for some coop if anyones interested let me know.
I hear you. I have no clue how my account got hacked a few years ago with WoW. I never opened any of the fake emails, ever. And I keep my PC AV up to date, along with all the Windows, Java, and Flash. All I know was that not only I but hundreds of players got hacked at the same time. Blizzard never said it was their fault, but I believe that it was.
Anyway, that sucks. And the Authenticator will prevent any future problems.
The biggest way accounts get hacked now are via scripts in Flash, or by hacking sites that you may have signed up on. A few years ago, a wow addon site got nailed, and the email I use for gaming sites got hacked. Luckily for me, the email address and password I use for websites (such as 2o2p) aren't the same as what I use to sign-up for games or anything I use my credit card for.
Personally, I bought an authenticator the moment they were available to be shipped to Canada, just because I didn't want the hassle. I realise that as careful as I am, I can't prevent someone with more expertise and resources than I have and is hellbent on stealing my infoz from doing it. I'm outmatched.
I was reading an article earlier this week about the virus in Iran that went undetected by antivirus software for something like 5 years. The article had quotes from some security expert stating who crappy antivirus software essentially is, and given sufficient resources pretty much any system is vulnerable.
When you consider that the market for selling gold to people is estimated to be in the billions of dollars, hacking by organized groups is a very lucrative side market.
I seriously doubt Blizzard is ever the source of accounts being comprised. If they were, they'd have to disclose it as a potential liability for financial reporting reasons. It's why Sony eventually disclosed their issue – failing to do so and being caught later is a larger risk than being upfront about it in a "reasonable" timeframe.
I'm hoping that once the RMAH comes out for D3, and along with it the ability to purchase gold, that the grey market for gold will evaporate. This is the only upside to RMT's in games; by offering a legitimate way for people to buy gold or goods in game, the game company essentially destroys the grey market and reduces the ROI on account hacking.
Unless the hack has changed, the authenticator doesn't save you from being hacked, they're getting around that. I had stayed away from playing public matches, but now that i'm on Hell difficulty, you almost practically need 2 or 3 or 4 people and it's easier to find randoms. So i'm a little concerned about security issues and why blizzard hasn't fixed the issue now with 2 if not 3 patches out already.
I was reading an article that kurt loder posted on twitter describing the diablo 3 hackers and alot of insiders think hackers are getting ahold of session keys ( i have no idea what that means) which makes it ENTIRELY the fault of blizzard.I am gonna look through my timeline and if i find it ill post the link.
I would assume a session key is some sort of temporary key that is created between your game client and blizzard's servers. You'd get a new session key each time you had to log in. This would be used by the servers to continually let it know you are you. So, if hackers are grabbing these keys (which I think are temporary), then it's probably done while they are in the same game as you (if so, then your authenticator may mean crap at this point). Somehow they are able to trick the server into thinking they are you?
Anyway, I think staying out of public games would be a smart idea :)
I believe they're grabbing those from public coop games, so if you go into public, you're at risk.
sucks man, sorry. I changed my password the minute I heard about people being able to account hack through public games. I also have a Mac, so no viri for me.
Blizzard has already said multiple times that there is 0 evidence of public hacks with authenticators and that every single instance of hacking has come from people without an authenticator on their account. Keep in mind that even if their WAS a temporary key to steal, the authenticator is void after 30 seconds. You would have to log in, go to a public game, and then get hacked all within this time frame. Seems fairly hard to do IMO.
I'm sure anything is possible, but keep this in mind; I've played WoW for nearly 5 years with no hacks. I've played D3 since launch in multiple public games with no hacks. I have always had an authenticator.
I've been playing a lot of public now that I'm on Inferno.... I should prob get an authenticator. I dont have a phone that their app works on tho so i'd need to get that dongle thing.
Edit : looked again and they do have a version for my phone now so w00t... i'm authenticating now.