[PC] Play Diablo or WoW? Change your passwords ASAP...

[Atlas]

http://news.cnet.com/8301-1009_3-57...asswords-stolen-in-battle.net-hack/?ttag=gpwl

Game maker Blizzard Entertainment's internal network security has been breached, the company informed customers today.
While the company behind World of Warcraft and Diablo believes no sensitive financial information was compromised, it said e-mail addresses for non-China Battle.net players and scrambled passwords were stolen, Blizzard President Michael Morhaime said in a company blog post:
This week, our security team found an unauthorized and illegal access into our internal network here at Blizzard. We quickly took steps to close off this access and began working with law enforcement and security experts to investigate what happened.


At this time, we've found no evidence that financial information such as credit cards, billing addresses, or real names were compromised. Our investigation is ongoing, but so far nothing suggests that these pieces of information have been accessed.
In addition to the e-mail lists, the company said the personal security question and mobile and dial-in authentication information for users in the United States, Australia, New Zealand, and Latin America were also illegally accessed.
The company said it believes its cryptography techniques will make it very difficult to crack the passwords and hack into accounts.
"Based on what we currently know, this information alone is NOT enough for anyone to gain access to Battle.net accounts," Morhaime said in the blog. However, the company is nevertheless recommending that users change their passwords immediately:
We also know that cryptographically scrambled versions of Battle.net passwords (not actual passwords) for players on North American servers were taken. We use Secure Remote Password protocol (SRP) to protect these passwords, which is designed to make it extremely difficult to extract the actual password, and also means that each password would have to be deciphered individually. As a precaution, however, we recommend that players on North American servers change their password.
The disclosure comes at a time of heightened awareness over password security. Last month, Yahoo confirmed that some 453,000 login credentials stored in plain text were stolen from the Web pioneer's network. Other recent high-profile password thefts at LinkedIn, eHarmony, and Last.fm contributed to approximately 8 million passwords posted in two separate lists to hacker sites in early June.

http://news.cnet.com/8301-1009_3-57...asswords-stolen-in-battle.net-hack/?ttag=gpwl

 

[leaffan]

Their security measures are pretty much top notch and for the most part us users don't have to worry all that much because by the sounds of it they arn't going to get anything outside of maybe passwords.

 

[jms493]

thanks I changed my password this morning.

 

[JeremyHight]

Authenticator ftw!

 

[BazookaJoe5]

If you play either and don't have an authenticator tied to your account, your doing it wrong.

 

[Maynard]

i guess i am doing it wrong

 

[jms493]

i guess i am doing it wrong

real simple to set up

 

[Maynard]

i guess i am doing it wrong....where would i go to change my password? i only played diablo. Should i log into the game and then change the pass or is there a link on the blizzard site

 

[jms493]

i guess i am doing it wrong....where would i go to change my password? i only played diablo. Should i log into the game and then change the pass or is there a link on the blizzard site

www.battle.net>login>settings>change password

Authenticators are under account security....u can see it on the main page.

 

[BazookaJoe5]

If you have a smart phone, you can d/l the authenticator for free. It's definitely worth it, adds the extra security in case something were to happen, with it on your account then it's basically impossible for anyone else to get into it.

 

[JBregz]

Got hacked when Diablo first came out and then downloaded the authenticator APP onto my blackberry.

 

[Twigg4075]

Their security measures are pretty much top notch and for the most part us users don't have to worry all that much because by the sounds of it they arn't going to get anything outside of maybe passwords.

Hmm. IIRC correctly Sony released almost an identical presser when PSN was hacked and you were one of the ones that was all on their shit saying that cred card info was most probably taken.

Now we have a company that only makes PC games and you're confident everything is fine?

If it wasn't you then I apologize.

 

[jms493]

LAWL!

 

[seaplus]

how does the authenticator work?

 

[JeremyHight]

First you have to turn on the authenticator under account settings and link one to your account (either the app or the actual authenticator key chain). When you log in, if you have a new IP address or are at a different computer, it will ask you to authenticate. Basically, you open the app and it gives you an 8 digit code, that refreshes every 15 seconds or so. You type in the code and if it matches, you can log in. So basically, if someone tries to hack your account, they may know your username, even your password, but without them having your phone or keychain, they cannot get into your account.