Blizzard Authenticator for World of Warcraft

joe · #1 (**permalink**) 06-27-2008, 06:38 PM

WoW Insider has the scoop on a new security feature for players of World of Warcraft. Today at the Worldwide Invitational Blizzard announced (and no, it's not Diablo III) the Blizzard Authenticator, a device separate from your computer that generates a unique six digit code when you initially log in to your account. The cost is slated to be $6.50, which is a pretty small price for this level of security (the device is in principle very similar to a SecurID). Fore more information check out the original article at WoW Insider here.

CoffeeShark · #2 (**permalink**) 06-27-2008, 06:40 PM

Just read that a minute before you posted. Seems a bit... unnecessary, but maybe because I'm not familiar with the WoW world.

joe · #3 (**permalink**) 06-27-2008, 06:44 PM

if you read the comments section of the WoW Insider post (danger, you'll need a nerd suit to venture in there), you'll see quite a few people who've had their account compromised...I don't know how big a problem it actually is, and whether or not it's people trying to crack accounts, or is it because of key loggers (which if it's the latter, then the user has more serious problems)

VincentVega · #4 (**permalink**) 06-27-2008, 06:48 PM

exactly. if you invested hundreds of hours into something, it's priceless

SonicSpeed · #5 (**permalink**) 06-27-2008, 06:49 PM

Well looks like Blizzard has found another way to make some money!

Teck · #6 (**permalink**) 06-27-2008, 06:50 PM

RSA SecurID ftw

VincentVega · #7 (**permalink**) 06-27-2008, 07:00 PM

That's OK. as Denny would remind us, it's not free for the company to implement. And, businesses don't exist to be nice to people, they're around to make money

Unbroken · #8 (**permalink**) 06-28-2008, 12:28 AM

LAME!!! i want d3 or sc2 NOW!!!! lol

Visi0n · #9 (**permalink**) 06-28-2008, 03:59 AM

Great idea... more money...

Dopefish · #10 (**permalink**) 06-28-2008, 09:51 AM

You know, for the security this provides, it really is priceless. This will guarantee that no one besides you will ever be able to log in to your system.

I was trying to think of ways hackers can get around this, and while it is possible, it would require direct access to the device. First, writing a simple device emulator would get around the detection of the device. Second, you would need to generate a number which probably uses the serial number of the device as a seed. You can be sure the algorithm used in all devices is exactly the same, so the only unique thing with the devices are the serial numbers. So the way someone would be able to get into your account is gaining direct, physical access to the device you have, write down the serial number, and then work from there. If you do buy one of these, it might be worth it to peel the serial number sticker off of it and store it somewhere safe. If you take that device to work, or friends' houses, they'll easily just be able to look at it and write it down.

You may think this would be complex for the average person, but hackers will probably just make the emulator and such and put it up for download. All it would require then is for some dumb kid to download that software, punch in the serial number, and have it generate the information.

No matter what, though, this will easily make your account much more secure. I don't play WoW, but if they offered this for any of games I play, I'd have no problem throwing down a one time fee of $7.