Cancel Auctions Anytime

[Kylearan]

Hi,

Blizzard has categorically stated that no D3 users have been compromised with an authenticator attached before the compromise. A few have been called out in public for claiming they were hacked with an authenticator, and Blizzard has checked, and found they attached one after the fact. You can, of course, say that Blizzard lied about it if you like. I actually expect you to do so next.

Disclaimer: I've been hacked, but I'm pretty sure it wasn't Blizzard's fault - it happened because my password has been a minor variation of a password I had also used on another forum where hackers had stolen the database two years ago.

And yet, I have to play devil's advocate here.

You can, of course, say that Blizzard lied about it if you like. I actually expect you to do so next.

Is it really so implausible that Blizzard would lie about something like that? They sell the game, and they sell the authenticator (at least I think they do?), so they have to lose a lot here. Many other companies that got hacked in the past tried to cover up the event, and only admitted it after proof became undeniable.

So while I haven't seen any credible source where someone with an authenticator got hacked, and thus right now think that simple brute-forcing of weak and stolen passwords like in my case are the more likely cause of the hacks, I also wouldn't lightly dismiss a problem on Blizzard's side only because Blizzard "categorically stated" so.

-Kylearan