Topic: Cataclysm Ultra-thread (Read 55225 times)

A² · « **Reply #360 on:** November 29, 2010, 03:03:34 AM »

Yeah the spammers nowadays zero in on any account that doesn't have one of those gosh darned devices within seconds.

There was an article somewhere on the internets about how the entire little black market goldselling powerleveling etc thing is scared shitless in WoW because the auths are frustrating to get around (You have to resort to attacking the person's computer, MtiM attacks, etc compared to simply just bruteforcing your way in)

I wish I could find it.

Cthulhu-chan · « **Reply #361 on:** November 29, 2010, 03:57:44 AM »

How would that help, they'd still need the authenticator, wouldn't they?

A² · « **Reply #362 on:** November 29, 2010, 04:25:50 AM »

From my extremely limited and potentially wrong understanding, they basically intercept your login info as it goes to the server, and then use that still-valid Auth token to log in.

Which requires a bit more effort than just running a thing that randomly tries every password.

wtb someone with more knowledge in this area to speak up here.

Shinra · « **Reply #363 on:** November 29, 2010, 07:45:08 AM »

I got hit with an MTM attack earlier this year.

Basically, it works like this; a rootkit or trojan hijacks a DLL in your WoW install folder. A goldseller monitors the trojan (and probably dozens of others) and waits for you to log on; if he catches you log on, he presses a button that does something to the DLL - removes it, corrupts it, etc. It causes WoW to suddenly crash. The goldseller expects that you will try to log back in, so he waits for you to get to the login screen, and when you put in your username/password and auth code, the game seizes at trying to log in, and the hacker uses your information that he snagged with a keylogger to log in before your auth code expires. If he misses the opportunity, he lets you log in again, crashes you again, and then logs in again.

This method has extreme problems, of course. He can only use the code once, so it's impossible for hackers to change your pw or remove an authenticator from your account without having to resort to social engineering. They rely on the fact that most households only have a single computer (with wow installed on it, anyway) or that people aren't bright enough to figure out they're being hacked until it's too late to do anything about it. I was able to stop the hacker within 20 minutes of being hacked by logging in from another computer - he'd pulled 60,000 gold from my father in law's guildbank, 20 stacks of epic gems and about 200 fel lotus and was on his way to a go-between in stormwind whom I presume was going to take the money and items. Thankfully, I caught it in time.

Royal☭ · « **Reply #364 on:** November 30, 2010, 09:08:04 PM »

How often are WoW accounts compromised these days?

Norondor · « **Reply #365 on:** November 30, 2010, 09:25:41 PM »

thanks to the chinese, the internet has been almost completely converted to a WoW account-hijacking device, totally apart from its unintended secondary capabilities in enabling global transfer of information.

Bal · « **Reply #366 on:** November 30, 2010, 10:52:35 PM »

Quote from: Norondor on November 30, 2010, 09:25:41 PM

thanks to the chinese, the internet has been almost completely converted to a WoW account-hijacking device, totally apart from its unintended secondary capabilities in enabling global transfer of pornography.

Doom · « **Reply #367 on:** November 30, 2010, 11:12:53 PM »

A WoW Account is considered more valuable than a stolen credit card number, so.

The sad thing is that accurate stolen account numbers can't really be verified because gold sellers probably have their fingers in more accounts you can imagine. They wait for an order to pop up on a server and then they bother to actually log in and strip it. Having a giant mule character isn't really feasible these days. Chinese Farmers never forget.

If you don't use an authenticator you are basically dealing with a "when" and not a "if" situation.

norn · « **Reply #368 on:** December 01, 2010, 06:07:20 AM »

all these posts make me think i should get an authenticator.

i'm sure nothing bad will happen if i don't

Shinra · « **Reply #369 on:** December 01, 2010, 06:10:15 AM »

Considering you can download an app for free now for iphones/droids to do the same thing, i really don't think there's any reason not to have one.

Also, you get a mini core hound pet that's fucking awesome.

But really, they can piggyback trojans off flash banners and spacer images now. If you frequent wowwiki, wowhead, mmo-champion or wow insider, you WILL pick up a virus eventually, and you will lose your account. God help you if you did something stupid like one of my friends did and name your battle.net account after someone other than yourself for some stupid reason, because you won't be able to get your account back if they ever need you to provide ID.

Smiler · « **Reply #370 on:** December 01, 2010, 09:07:18 AM »

Well, I bought one, and Blizzard seems to be sending to me VIA Pony Express. I might be spoiled by ordering stuff from across state borders though. I guess they also deserve some slack, since the shipping is free.

Pacobird · « **Reply #371 on:** December 01, 2010, 02:02:23 PM »

I've been hacked within the last year. Getting my stuff restored was pretty painless, to be honest.

Doom · « **Reply #372 on:** December 01, 2010, 02:03:27 PM »

Getting your stuff restored, sure.

Now how about when they transfer you across realms/factions?

Rico · « **Reply #373 on:** December 02, 2010, 02:54:28 PM »

I was bored at work and started paging through a vanilla nostalgia thread on MMO when I came across this gem that needed to be shared:
"server transfer being first implemented = oh god i don't want to think about that. the server that xfered to mine on dentarg was fucking sharkz with lazers pew pew fuck those fucking fuckers"

NURFED. OF. DENTARG.

Niku · « **Reply #374 on:** December 02, 2010, 03:43:13 PM »

Hillsbrad could not possibly end the Undead quest chain line in a more satisfying way.

I say this of course as someone who saved Peacebloom vs. Ghouls for last.

Shinra · « **Reply #375 on:** December 02, 2010, 04:35:34 PM »

Orkus! Nooooooooooooooooooooooooooooooooooooooooooo!

Niku · « **Reply #376 on:** December 02, 2010, 04:57:37 PM »

Whatever happened to Dumas is my question.

Bal · « **Reply #377 on:** December 02, 2010, 05:32:33 PM »

He said he was going north. I can only assume he was killed in the plague lands

Ziiro · « **Reply #378 on:** December 04, 2010, 06:21:48 AM »

This is my understanding as to what happened

Niku · « **Reply #379 on:** December 04, 2010, 09:36:54 AM »

Basically what actually happened is all the new and interesting vehicle abilities, cinematic storytelling, and world-tailoring that they introduced in the last expansion has been applied to the entire game, in addition to many, many quality-of-life fixes regarding respawn times, quest locations, and drop rates. So it's the same game, just a lot more streamlined and varied. If you hated it before, it's not going to change your mind. If you were on the fence, it's worth checking out again.

News:

Author Topic: Cataclysm Ultra-thread (Read 55225 times)