Diablo III Hacking?

A bunch of threads on the Diablo III forums from players who've experienced unauthorized access to their accounts suggest their may be a security issue with the action/RPG sequel or that the game's future support of real-money auctions has attracted more hacking attempts than one would consider normal. The threads in question are: Ummm...all of my gold and items are gone, Hacked. GG Online Only Single Player DRM, Hacked with an authenticator, and The hacker found (with screenshot). Thanks nin.
View : : :
256 Replies. 13 pages. Viewing page 2.
Newer [  1  2  3  4  5  6  7  8  9  10  11  12  13  ] Older
236.
 
Re: Diablo III Hacking?
May 23, 2012, 01:28
Re: Diablo III Hacking? May 23, 2012, 01:28
May 23, 2012, 01:28
 
RollinThundr wrote on May 22, 2012, 20:52:
Quinn wrote on May 22, 2012, 19:17:
RollinThundr wrote on May 22, 2012, 14:08:
Quinn wrote on May 22, 2012, 09:50:
Mr. Tact wrote on May 22, 2012, 09:23:
Quinn wrote on May 22, 2012, 08:58:
I'm the foreign guy here but nowhere in my previous comment did I show any indication that I didn't understand that nightmare for a lvl 1 is too hard. In fact, if I didn't understand that concept my entire previous comment wouldn't make sense! It's exactly tha understanding why I'm pissed. Like I said, I'd wanna play this easy drag of a campaign with one hero if I must... if I had the ability to roll a new hero and dive into a higher (not impossible) difficulty.

Honestly, what is it YOU don't understand about my point? That's a better question.
He isn't the only one who doesn't understand what you are saying. Are complaining that you can't create a level 30 Wizard (or whatever) after you have completed normal difficulty with your Witch Doctor?

My goodness...

Is it thinking out of the box by complaining that there isn't an option to play your FIRST PLAYTHROUGH WITH ANY CHARACTER on a higher difficulty than tard-easy "Normal" mode!?

What part of a new character wouldn't live on Nightmare is too difficult for you to comprehend?

You're slow. So very. Very slow. Else you would've understood me by now.

Like others managed to say in other words hours ago to show that they understand what I'm saying is that I would've liked an adjustable difficulty from the get go. I'm noy talking about either Normal or Nightmare but somewhere in between, to make a first playthrough with any character more interesting.

Jesus, dude. How slow can you get.

How slow can you get that you don't understand how a Diablo game is? Your own damn fault for not doing research.

Riiight, so you truly think my complaint that Normal is way too easy isn't in any way valid? Fie on those who dare critisize da Blizz, huh?! Fie!!
235.
 
Re: Diablo III Hacking?
May 22, 2012, 20:53
Re: Diablo III Hacking? May 22, 2012, 20:53
May 22, 2012, 20:53
 
My coworker (btw, I am a Systems Security Engineer for the govt (CISSP), and have been doing security for decades) started up Wireshark, and then D3.. he was telling me how easy it was to hijack his session..the session ID floating around out there.. and then we got into the 2 step process it took to reverse engineer his authenticator.

Now granted, we have a more knowledgeable background than the layperson.. but if we showed you guys how much is out there to be found.. and how after a few minutes you too could see this stuff.. you can bet your ass the hackers are even further along with just a tiny bit more effort.

While everything is hackable, what's going on with D3 right now is rather troublesome. --for the record, he stopped playing last night after witnessing what he saw.
234.
 
Re: Diablo III Hacking?
May 22, 2012, 20:52
Re: Diablo III Hacking? May 22, 2012, 20:52
May 22, 2012, 20:52
 
Quinn wrote on May 22, 2012, 19:17:
RollinThundr wrote on May 22, 2012, 14:08:
Quinn wrote on May 22, 2012, 09:50:
Mr. Tact wrote on May 22, 2012, 09:23:
Quinn wrote on May 22, 2012, 08:58:
I'm the foreign guy here but nowhere in my previous comment did I show any indication that I didn't understand that nightmare for a lvl 1 is too hard. In fact, if I didn't understand that concept my entire previous comment wouldn't make sense! It's exactly tha understanding why I'm pissed. Like I said, I'd wanna play this easy drag of a campaign with one hero if I must... if I had the ability to roll a new hero and dive into a higher (not impossible) difficulty.

Honestly, what is it YOU don't understand about my point? That's a better question.
He isn't the only one who doesn't understand what you are saying. Are complaining that you can't create a level 30 Wizard (or whatever) after you have completed normal difficulty with your Witch Doctor?

My goodness...

Is it thinking out of the box by complaining that there isn't an option to play your FIRST PLAYTHROUGH WITH ANY CHARACTER on a higher difficulty than tard-easy "Normal" mode!?

What part of a new character wouldn't live on Nightmare is too difficult for you to comprehend?

You're slow. So very. Very slow. Else you would've understood me by now.

Like others managed to say in other words hours ago to show that they understand what I'm saying is that I would've liked an adjustable difficulty from the get go. I'm noy talking about either Normal or Nightmare but somewhere in between, to make a first playthrough with any character more interesting.

Jesus, dude. How slow can you get.

How slow can you get that you don't understand how a Diablo game is? Your own damn fault for not doing research.
233.
 
Re: Diablo III Hacking?
May 22, 2012, 19:23
Re: Diablo III Hacking? May 22, 2012, 19:23
May 22, 2012, 19:23
 
The answer is in the original news post along with what we see with Windows... EVERYTHING can be hacked. Even the US government’s top security networks have been compromised (and yes, they are generally NON-WINDOWS based)…

As the news post states, “the game's future support of real-money auctions has attracted more hacking attempts than one would consider normal.” That’s exactly the point. The bigger the target with more of a reason to hack it, the better chance it will be compromised. I’m sure there has been people (if not groups) planning attacks on Blizzards servers since the day it was announced.

Similar to MS Windows as the most used OS on the market (and throughout the world), the larger the target, the more arrows will be fired and they WILL get through… anyone that knows at least a little bit about computers understands this.

Also, it’s not all about so called ‘strong’ passwords… this helps but is damn sure not an iron clad method to prevent a breach. ‘Strong’ passwords help tremendously when ‘brute force attacks’ are used that try literally millions or billions of alpha numeric combos until a correct password is reached… These however, are rarely used since the original adoption of 128-bit encryption as a standard that prevented even the fastest of computers from getting a correct password in a ‘reasonable’ amount of time (it could literally take weeks, months or even years which made it totally useless to brute force your way into something that you wanted immediate access to).

Today, more cleverly used are virus deployed key loggers and dummy front web sites that just log whatever your password is instead of guessing. Fresh installs of Windows (or any other OS for that matter) doesn’t ensure you are free from attack or virus either. In fact, if you have a live connection during first boot you are probably more vulnerable because many security patches have not yet been applied to known threats.

It was just a matter of time before breaches started and they will continue. Diablo 3 will no more be safe than D2 (I had my account hacked several times in that version).

We had a conference in our city about 2 years ago on bank transaction security that hosted a visit from an ex CIA agent that headed up their network security, his exact words were, “There is nothing you can do to prevent someone from getting into the information stored on your computer.” Even disconnecting yourself from a network or the internet wouldn’t prevent a physical hack (like ripping your hard drive out of your computer) if the information was important enough to warrant one.

The best line of defense is to make yourself as small of a target as possible or appear to not be worth the time (ie. This is why larger banks must concentrate more on security than a mom and pop bank in a little city outside of Lickn’Spit Arkansas).

Anyway… my point is, Blizzard and specifically D3 servers are far to large of a target to not have hacking attempts made on them. D3 is also controversial enough (as even seen on the Blues forums) that there are obviously people out there who want to make a point. Their target is massive right now.
232.
 
Re: Diablo III Hacking?
May 22, 2012, 19:17
Re: Diablo III Hacking? May 22, 2012, 19:17
May 22, 2012, 19:17
 
RollinThundr wrote on May 22, 2012, 14:08:
Quinn wrote on May 22, 2012, 09:50:
Mr. Tact wrote on May 22, 2012, 09:23:
Quinn wrote on May 22, 2012, 08:58:
I'm the foreign guy here but nowhere in my previous comment did I show any indication that I didn't understand that nightmare for a lvl 1 is too hard. In fact, if I didn't understand that concept my entire previous comment wouldn't make sense! It's exactly tha understanding why I'm pissed. Like I said, I'd wanna play this easy drag of a campaign with one hero if I must... if I had the ability to roll a new hero and dive into a higher (not impossible) difficulty.

Honestly, what is it YOU don't understand about my point? That's a better question.
He isn't the only one who doesn't understand what you are saying. Are complaining that you can't create a level 30 Wizard (or whatever) after you have completed normal difficulty with your Witch Doctor?

My goodness...

Is it thinking out of the box by complaining that there isn't an option to play your FIRST PLAYTHROUGH WITH ANY CHARACTER on a higher difficulty than tard-easy "Normal" mode!?

What part of a new character wouldn't live on Nightmare is too difficult for you to comprehend?

You're slow. So very. Very slow. Else you would've understood me by now.

Like others managed to say in other words hours ago to show that they understand what I'm saying is that I would've liked an adjustable difficulty from the get go. I'm noy talking about either Normal or Nightmare but somewhere in between, to make a first playthrough with any character more interesting.

Jesus, dude. How slow can you get.
231.
 
Re: Diablo III Hacking?
May 22, 2012, 16:12
Dev
Re: Diablo III Hacking? May 22, 2012, 16:12
May 22, 2012, 16:12
Dev
 
Verno wrote on May 22, 2012, 10:41:
They don't want you skipping progression as then people would want a skip Nightmare/Hell button too. I don't know why players would want this anyway, it just encourages more AH whoring.
Yeah but wouldn't they WANT that because they'd be getting cash from it?
Slashman wrote on May 22, 2012, 12:45:
Rubberbanding issue aside, Titan Quest(plus Immortal Throne expansion) is currently my absolute favourite clicky ARPG.
Ironically enough, I experienced lag induced rubber banding in D3 "single player" last time I played. I was trying to run away from a monster and I kept getting rubber banded bounced back to him since he hit me even though my screen didn't show it.
Mr. Tact wrote on May 22, 2012, 11:12:
Uh, I'm pretty sure MB was criticizing Blizzard there, not praising them.
That was the joke. And actually its more real than a joke, the fanboys might criticize it a tiny bit, but then run to give blizzard money.

This comment was edited on May 22, 2012, 16:18.
230.
 
Re: Diablo III Hacking?
May 22, 2012, 14:10
Re: Diablo III Hacking? May 22, 2012, 14:10
May 22, 2012, 14:10
 
Verno wrote on May 22, 2012, 10:41:
Slashman wrote on May 22, 2012, 10:37:
Actually, since they have removed stats and skill choices from the leveling process, couldn't they just start your character out at the appropriate level when you choose a higher difficulty mode?

It seems to me that this would be a much better option now that leveling is completely automated.

They don't want you skipping progression as then people would want a skip Nightmare/Hell button too. I don't know why players would want this anyway, it just encourages more AH whoring. You'd show up in Nightmare with zero items and have to farm them on a different character or go on a spending spree at the AH I'd rather earn the items myself otherwise there is pretty much no point in playing.

Although I might change my tune soon about the AH if I keep getting 3 shot in Inferno A2 by regular mobs despite having 30k health, 15k dps and a shitload of armor/resists. Having to kite as a melee class in an ARPG is really stupid btw.

Shitty design is shitty design. Not much other way to look at it.
229.
 
Re: Diablo III Hacking?
May 22, 2012, 14:08
Re: Diablo III Hacking? May 22, 2012, 14:08
May 22, 2012, 14:08
 
Quinn wrote on May 22, 2012, 09:50:
Mr. Tact wrote on May 22, 2012, 09:23:
Quinn wrote on May 22, 2012, 08:58:
I'm the foreign guy here but nowhere in my previous comment did I show any indication that I didn't understand that nightmare for a lvl 1 is too hard. In fact, if I didn't understand that concept my entire previous comment wouldn't make sense! It's exactly tha understanding why I'm pissed. Like I said, I'd wanna play this easy drag of a campaign with one hero if I must... if I had the ability to roll a new hero and dive into a higher (not impossible) difficulty.

Honestly, what is it YOU don't understand about my point? That's a better question.
He isn't the only one who doesn't understand what you are saying. Are complaining that you can't create a level 30 Wizard (or whatever) after you have completed normal difficulty with your Witch Doctor?

My goodness...

Is it thinking out of the box by complaining that there isn't an option to play your FIRST PLAYTHROUGH WITH ANY CHARACTER on a higher difficulty than tard-easy "Normal" mode!?

What part of a new character wouldn't live on Nightmare is too difficult for you to comprehend?
228.
 
Re: Diablo III Hacking?
May 22, 2012, 13:12
Re: Diablo III Hacking? May 22, 2012, 13:12
May 22, 2012, 13:12
 
xXBatmanXx wrote on May 22, 2012, 12:24:
There are mods that don't get you banned that fix all of that jazz.

Which mods? I thought that the sprites/etc were all low resolution and thus unfixable by a simple resolution change.

You're joking, right? People did this all the time in D2, just with the slightly slower fashion of "rushes". Or, if they wanted to have the appropriate level, they'd do the whole Tristram->Tombs->Cows->Baal Runs gambit until they leveled up enough. People want(ed) to find end-game gear more than stuff they'll use for a level or two and then throw away - some people that is. Especially with your 3rd or 4th character. Slogging through the first couple difficulty levels becomes a bit tedious.

As I said in an earlier post, there's nothing really stopping the idea of rushes and I think it's a conscious design choice that has two ways of seeing it. You learn a lot about your class by playing it, no one starts an expert and even Normal is a part of that process even if it is just DPSing everything until you learn your preferences.

This comment was edited on May 22, 2012, 13:20.
Avatar 51617
227.
 
Re: Diablo III Hacking?
May 22, 2012, 12:45
Re: Diablo III Hacking? May 22, 2012, 12:45
May 22, 2012, 12:45
 
Orogogus wrote on May 22, 2012, 11:47:
Prez wrote on May 22, 2012, 10:57:
Up to this year D2 was still the go-to ARPG.

Got to disagree with you there. D2 is absolutely murder on the eyes with today's big screens - I'll take Titan Quest any day.

Well, I agree with you personally, but for whatever reason on other forums I would see people organize for D2 and not Titan's Quest, which is regularly like $5 on Steam. And I guess people get used to terrible resolutions somehow and play the Infinity Engine games. But yeah, when I look at it all I see are giant pixels everywhere.

At least one person was bitching heavily about rubberbanding in TQ, whatever that is. So maybe it's flat out unplayable for some people? If TQ is unplayable, I can't think of another significant ARPG that supports co-op. Dungeon Siege? Nox?

Rubberbanding issue aside, Titan Quest(plus Immortal Throne expansion) is currently my absolute favourite clicky ARPG. The dual class options lend a huge amount of depth and replayability, and the game looks decent even by today's standards of graphics.

There is a fan-made community patch which solves a whole host of issues and it installs seamlessly with the Steam version as well. The acts are huge and the story and setting are decent. I haven't really seen anything in D3 reviews or previews which makes me think it is significantly better than TQ. Which is what is so maddening about D3. It doesn't add anything!!! It actually takes stuff away and pretends that less is more.
226.
 
Re: Diablo III Hacking?
May 22, 2012, 12:45
Re: Diablo III Hacking? May 22, 2012, 12:45
May 22, 2012, 12:45
 
Eeeexcelent. Good work hackers, keep it up.
225.
 
Re: Diablo III Hacking?
May 22, 2012, 12:24
Re: Diablo III Hacking? May 22, 2012, 12:24
May 22, 2012, 12:24
 
Prez wrote on May 22, 2012, 10:57:
Up to this year D2 was still the go-to ARPG.

Got to disagree with you there. D2 is absolutely murder on the eyes with today's big screens - I'll take Titan Quest any day.

There are mods that don't get you banned that fix all of that jazz.
224.
 
Re: Diablo III Hacking?
May 22, 2012, 11:47
Re: Diablo III Hacking? May 22, 2012, 11:47
May 22, 2012, 11:47
 
Prez wrote on May 22, 2012, 10:57:
Up to this year D2 was still the go-to ARPG.

Got to disagree with you there. D2 is absolutely murder on the eyes with today's big screens - I'll take Titan Quest any day.

Well, I agree with you personally, but for whatever reason on other forums I would see people organize for D2 and not Titan's Quest, which is regularly like $5 on Steam. And I guess people get used to terrible resolutions somehow and play the Infinity Engine games. But yeah, when I look at it all I see are giant pixels everywhere.

At least one person was bitching heavily about rubberbanding in TQ, whatever that is. So maybe it's flat out unplayable for some people? If TQ is unplayable, I can't think of another significant ARPG that supports co-op. Dungeon Siege? Nox?
223.
 
Re: Diablo III Hacking?
May 22, 2012, 11:40
Re: Diablo III Hacking? May 22, 2012, 11:40
May 22, 2012, 11:40
 
They don't want you skipping progression as then people would want a skip Nightmare/Hell button too. I don't know why players would want this anyway, it just encourages more AH whoring.

You're joking, right? People did this all the time in D2, just with the slightly slower fashion of "rushes". Or, if they wanted to have the appropriate level, they'd do the whole Tristram->Tombs->Cows->Baal Runs gambit until they leveled up enough. People want(ed) to find end-game gear more than stuff they'll use for a level or two and then throw away - some people that is. Especially with your 3rd or 4th character. Slogging through the first couple difficulty levels becomes a bit tedious.

On the other hand, I didn't expect that to change for D3, and it hasn't. Blizzard keeps seeming to choose the "make them replay the same game" style, which helps them cut down on work on content, but doesn't make for compelling gameplay.
222.
 
Re: Diablo III Hacking?
May 22, 2012, 11:40
Re: Diablo III Hacking? May 22, 2012, 11:40
May 22, 2012, 11:40
 
Slashman wrote on May 22, 2012, 10:37:
Actually, since they have removed stats and skill choices from the leveling process, couldn't they just start your character out at the appropriate level when you choose a higher difficulty mode?

It seems to me that this would be a much better option now that leveling is completely automated.

I'd think this would have been easier to do this when they had stats and skills; you would just assign the points, like you do in any RPG that doesn't start you out at level 1. But I guess the purists who hate respecs would have a conniption if it were that easy.

It would be harder here since you're expected to be have your loot from earlier runs, and the loot is that much more important without the stats & skills.
221.
 
Re: Diablo III Hacking?
May 22, 2012, 11:36
Re: Diablo III Hacking? May 22, 2012, 11:36
May 22, 2012, 11:36
 

Not sure if this one was posted yet.

While the authenticator isn't a 100% guarantee of account security, we have yet to investigate a compromise report in which an authenticator was attached beforehand.

We've been taking the situation extremely seriously from the start, and have done everything possible to verify how and in what circumstances these compromises are occurring. Despite the claims and theories being made, we have yet to find any situations in which a person's account was not compromised through traditional means of someone else logging into their account through the use of their password. While the authenticator isn't a 100% guarantee of account security, we have yet to investigate a compromise report in which an authenticator was attached beforehand.

If your account has been hacked, please view the previous post for information on contacting our support department.


Now you just have to figure out who is lying. I'm more inclined to believe it's the people who can't secure their accounts properly.
Avatar 55452
220.
 
Re: Diablo III Hacking?
May 22, 2012, 11:32
Re: Diablo III Hacking? May 22, 2012, 11:32
May 22, 2012, 11:32
 
Possibly, now that you mention it... When I moved in mid 2005 it wasn't a problem. But later in 2010(?) when my ISP's DHCP gave me a new address I got locked out. So clearly something changed. I have no idea when.
“Extinction is the rule. Survival is the exception.” -- Carl Sagan
219.
 
Re: Diablo III Hacking?
May 22, 2012, 11:24
Re: Diablo III Hacking? May 22, 2012, 11:24
May 22, 2012, 11:24
 
I am sure it is possible, that is why I didn't say it was a 0% chance, but it just wouldn't make sense from a business point of view to be ban happy. I never had an issue with it. Then again things could of changed since I stopped playing.
”Not many people know I owned the first radio in Springfield. Weren’t much on the air then. Just Edison reciting the alphabet over and over. “A,” he’d say. Then “B.” “C” would usually follow."
Avatar 39012
218.
 
Re: Diablo III Hacking?
May 22, 2012, 11:21
Re: Diablo III Hacking? May 22, 2012, 11:21
May 22, 2012, 11:21
 
Well, there are some issues with it. I never got "banned" but my account got locked when my ISP gave me a new IP. And I have a friend who like you played while staying in hotels -- his account was locked several times before he managed to get some sort of flag set on his account allowing different IPs. So, probably more frequent than .001% but unlikely to cause a "ban" without additional factors.
“Extinction is the rule. Survival is the exception.” -- Carl Sagan
217.
 
Re: Diablo III Hacking?
May 22, 2012, 11:18
Re: Diablo III Hacking? May 22, 2012, 11:18
May 22, 2012, 11:18
 
Muscular Beaver wrote on May 22, 2012, 04:06:
Still I didnt get reimbursed for the lost days I was banned.
Yup.

Didn't you read their EULA? It pretty much says that they can do whatever they want, with or without a reason, and you can't sue them.

If they don't want to reimburse you, then they don't have to and you can't do nothing about it.

Only if it makes them money, will they help you.
256 Replies. 13 pages. Viewing page 2.
Newer [  1  2  3  4  5  6  7  8  9  10  11  12  13  ] Older