• Log InLog In
  • Register
Liquid`
Team Liquid Liquipedia
EDT 18:20
CEST 00:20
KST 07:20
  • Home
  • Forum
  • Calendar
  • Streams
  • Liquipedia
  • Features
  • Store
  • EPT
  • TL+
  • StarCraft 2
  • Brood War
  • Smash
  • Heroes
  • Counter-Strike
  • Overwatch
  • Liquibet
  • Fantasy StarCraft
  • TLPD
  • StarCraft 2
  • Brood War
  • Blogs
Forum Sidebar
Events/Features
News
Featured News
HomeStory Cup 27 - Info & Preview18Classic wins Code S Season 2 (2025)16Code S RO4 & Finals Preview: herO, Rogue, Classic, GuMiho0TL Team Map Contest #5: Presented by Monster Energy6Code S RO8 Preview: herO, Zoun, Bunny, Classic7
Community News
Weekly Cups (June 23-29): Reynor in world title form?6FEL Cracov 2025 (July 27) - $8000 live event13Esports World Cup 2025 - Final Player Roster14Weekly Cups (June 16-22): Clem strikes back1Weekly Cups (June 9-15): herO doubles on GSL week4
StarCraft 2
General
The SCII GOAT: A statistical Evaluation Weekly Cups (June 23-29): Reynor in world title form? How does the number of casters affect your enjoyment of esports? Esports World Cup 2025 - Final Player Roster HomeStory Cup 27 - Info & Preview
Tourneys
HomeStory Cup 27 (June 27-29) WardiTV Mondays SOOPer7s Showmatches 2025 FEL Cracov 2025 (July 27) - $8000 live event $200 Biweekly - StarCraft Evolution League #1
Strategy
How did i lose this ZvP, whats the proper response Simple Questions Simple Answers [G] Darkgrid Layout
Custom Maps
[UMS] Zillion Zerglings
External Content
Mutation # 480 Moths to the Flame Mutation # 479 Worn Out Welcome Mutation # 478 Instant Karma Mutation # 477 Slow and Steady
Brood War
General
BW General Discussion StarCraft & BroodWar Campaign Speedrun Quest ASL20 Preliminary Maps BGH Auto Balance -> http://bghmmr.eu/ Unit and Spell Similarities
Tourneys
[BSL20] GosuLeague RO16 - Tue & Wed 20:00+CET The Casual Games of the Week Thread [Megathread] Daily Proleagues [BSL20] ProLeague LB Final - Saturday 20:00 CET
Strategy
Simple Questions, Simple Answers I am doing this better than progamers do.
Other Games
General Games
Stormgate/Frost Giant Megathread Nintendo Switch Thread Path of Exile What do you want from future RTS games? Beyond All Reason
Dota 2
Official 'what is Dota anymore' discussion
League of Legends
Heroes of the Storm
Simple Questions, Simple Answers Heroes of the Storm 2.0
Hearthstone
Heroes of StarCraft mini-set
TL Mafia
TL Mafia Community Thread Vanilla Mini Mafia
Community
General
US Politics Mega-thread Trading/Investing Thread Stop Killing Games - European Citizens Initiative Things Aren’t Peaceful in Palestine Russo-Ukrainian War Thread
Fan Clubs
SKT1 Classic Fan Club! Maru Fan Club
Media & Entertainment
Anime Discussion Thread [Manga] One Piece [\m/] Heavy Metal Thread Korean Music Discussion
Sports
2024 - 2025 Football Thread Formula 1 Discussion NBA General Discussion TeamLiquid Health and Fitness Initiative For 2023 NHL Playoffs 2024
World Cup 2022
Tech Support
Computer Build, Upgrade & Buying Resource Thread
TL Community
The Automated Ban List
Blogs
Blog #2
tankgirl
Game Sound vs. Music: The Im…
TrAiDoS
StarCraft improvement
iopq
Heero Yuy & the Tax…
KrillinFromwales
Trip to the Zoo
micronesia
Customize Sidebar...

Website Feedback

Closed Threads



Active: 586 users

Should we act to ensure more security?

Blogs > darkness
Post a Reply
Shield
Profile Blog Joined August 2009
Bulgaria4824 Posts
Last Edited: 2012-05-28 04:40:50
May 27 2012 23:06 GMT
#1
Okay, I just found out passwords on bnet aren't case sensitive. This means that it doesn't matter whether your password is coolguy or CooLGuY. Battle.net treats them the same. I think it's fair to say that most services require correct typing of passwords including upper and lower cases.

Do you think it's a good idea to demand case sensitive passwords? Should we let Blizzard know about our demand? If most of you answer "yes", can someone start a proper organised thread please in order to draw Blizzard's attention? I'm not good at writing smart, so I'm kinda useless.

Ok, there's a poll for you:

Poll: Case sensitive password?

Yes (15)
 
58%

I don't care (9)
 
35%

No (2)
 
8%

26 total votes

Your vote: Case sensitive password?

(Vote): Yes
(Vote): No
(Vote): I don't care



Update:
+ Show Spoiler +

I contacted Blizzard, and this is what I got as an answer:


Hello,

Sadly we in the GM team are not responsible for the overall account security, please keep this to the forums (you will find multiple posts on this already) however sadly even if passwords were case sensitive it would make very little difference to the amount of losses on accounts, case sensitive or not people are still getting keylogged, we are yet to come across a case of an account being brute forced.

Also blizzard passwords have been this way since the very beginning of WoW, even before.

However your concerns are noted as are the conserns of the community at large.

Regards

Korgalos
Blizzard Entertainment
Customer Services EN




***
Cokefreak
Profile Joined June 2011
Finland8095 Posts
May 27 2012 23:11 GMT
#2
What? PW's aren't case sensitive? Then why the fuck have I been doing upper and lowercase pw's...
hifriend
Profile Blog Joined June 2009
China7935 Posts
May 27 2012 23:11 GMT
#3
I'm mostly just pissed that for all these years, there was a much simpler way of typing my password. -_- Yeah that's completely ridiculous.
Gheed
Profile Blog Joined September 2010
United States972 Posts
May 27 2012 23:17 GMT
#4
They already offer you free authenticators. Your password could be "password" and it wouldn't matter if you used one.
EtherealDeath
Profile Blog Joined July 2007
United States8366 Posts
May 27 2012 23:22 GMT
#5
Lol wtf why would passwords not be case sensitive.
Vivax
Profile Blog Joined April 2011
21965 Posts
May 27 2012 23:43 GMT
#6
Didnt know about this either, but Blizzard has my phone number to verify identity, so w/e.

Still a pretty unnecessary risk, why the hell wouldn't you make them CS?
JerKy
Profile Blog Joined January 2011
Korea (South)3013 Posts
May 27 2012 23:53 GMT
#7
wow. had no idea. blizzard what are you doing... you're almost making this too easy
You can type "StarCraft" with just your left hand.
Micen
Profile Blog Joined October 2011
United States34 Posts
May 27 2012 23:53 GMT
#8
The reason why, is that even with Authenticators being out, Blizzard has admitted to a security hole in the system allowing a hacker to bypass that phase of login. There were tons of people exploiting it to hack Diablo 3 accounts day 1. I'm not sure if it carries over into SC2, but it could be assumed considering that they share Account Information. It just brings the security up to par with most other commercial sites.
Go then, There are other worlds then these.
Gheed
Profile Blog Joined September 2010
United States972 Posts
May 28 2012 00:12 GMT
#9
On May 28 2012 08:53 Micen wrote:
The reason why, is that even with Authenticators being out, Blizzard has admitted to a security hole in the system allowing a hacker to bypass that phase of login. There were tons of people exploiting it to hack Diablo 3 accounts day 1. I'm not sure if it carries over into SC2, but it could be assumed considering that they share Account Information. It just brings the security up to par with most other commercial sites.


http://eu.battle.net/d3/en/forum/topic/4309703662

In all of the individual Diablo III-related compromise cases we’ve investigated, none have occurred after a physical Battle.net Authenticator or Battle.net Mobile Authenticator app was attached to the player’s account, and we have yet to find any situation where a Diablo III player's account was accessed outside of “traditional” compromise methods (i.e. someone logging using an account's login email and password).
Aelonius
Profile Blog Joined October 2010
Netherlands432 Posts
May 28 2012 00:20 GMT
#10
Gheed:

Blizzard has confirmed that a work-around that allows hackers to gain access to games protected by its authenticator tool has been invented.

This is the first confirmed case of a compromised World of Warcraft account with an authenticator attached. The affected user alerted others to the issue on the official forums, which was responded to by a Blizzard rep, who confirmed that the case was genuine. Other players then reported similar experiences.

Blizzard poster Kropacius informed readers that the type of problem was a ‘Man In The Middle’ attack. According to information from various affected users, the hacker gains access to a player’s system through a keylogger, thought to be a file named emcor.dll, which can be found in C:/Documents and Settings/Users/[username]/Application Data/Temp. Once infected, the PC will cause WoW to crash, prompting players to log back into the game. This is when the authenticator code is intercepted by the hacker, who sends on a different code to Blizzard’s servers, preventing the legitimate user from gaining access to the game. In the mean time, the hacker does have access to the account until the code resets, and can proceed to steal any gold and/or possessions from your characters.

The code on an authenticator changes every 30 seconds or so, therefore hackers only have access to the account until they log out. In the case of the original user who reported the issue, he was blocked from attempting to access WoW for 15 minutes after inputting “incorrect” login details too many times. During that time, the keylogger file was detected and removed. Nothing was changed in the account management on the official WoW site, but when he gained access to WoW after the lock-out, several in-game items were gone; the hacker had presumably been logged out when the owner logged back in.

Blizzard has always maintained that the authenticator was never a 100% fool-proof method of keeping game accounts safe, and should be treated as an additional layer of protection. This latest development further highlights the need to be aware of keyloggers, and to keep anti-virus software up to date. However, neither of these prevented the afore-mentioned user from falling foul of the scum of the internet.


Source: http://diablo.incgamers.com/blog/comments/first-blizzard-authenticator-hack-confirmed


Ontopic:
I do not want to use an authenticator for various personal reasons, but I do feel that the password policy of Blizzard is lacking terribly. Why can't we use special characters for example?
''The nine most terrifying words in the English language are: 'I'm from the government and I'm here to help.''—Ronald Reagan
Gheed
Profile Blog Joined September 2010
United States972 Posts
May 28 2012 00:28 GMT
#11
I hadn't seen that. However, that method relies on a person having a keylogger on their computer, which would render a case-sensitive password useless anyway.
dangthatsright
Profile Joined July 2011
1158 Posts
May 28 2012 01:34 GMT
#12
Erm.

Oh wow that actually works.

As mentioned above, most more sophisticated methods probably make case-sensitivity useless as a security measure, but it's a very good thing to force to, idk, make it much less easily dumbass-able.
SKC
Profile Joined October 2010
Brazil18828 Posts
Last Edited: 2012-05-28 01:46:55
May 28 2012 01:39 GMT
#13
Is it time to link this XKCD comic?
[image loading]

Seriously though, it's what Gheed said. Hacked accounts are basically never brute forced, and hacked accounts with authenticators, something that hasn't happened in D3 so far it seems, only in WoW, are not only much more rare but also impossible to brute force. Adding case sensitive passwords would change nothing.

Micen's post is wrong, they admited in a WoW case, but still say it hasn't happened in D3. Definatelly not "a ton of people".
JeeJee
Profile Blog Joined July 2003
Canada5652 Posts
Last Edited: 2012-05-28 03:36:13
May 28 2012 03:28 GMT
#14
Does it actually matter? It's not like anybody can bruteforce a password even if they know its only restricted to a-z0-9, don't they kick you out after a few guesses? If you're getting hacked, your password being stronger wouldn't help you since presumably you either got keylogged or phished or something like that.

edit: here's another appropriate xkcd comic related to this
[image loading]
(\o/)  If you want it, you find a way. Otherwise you find excuses. No exceptions.
 /_\   aka Shinbi (requesting a name change since 27/05/09 ☺)
Shield
Profile Blog Joined August 2009
Bulgaria4824 Posts
Last Edited: 2012-05-28 04:42:15
May 28 2012 04:42 GMT
#15
Answer from Blizzard:


Hello,

Sadly we in the GM team are not responsible for the overall account security, please keep this to the forums (you will find multiple posts on this already) however sadly even if passwords were case sensitive it would make very little difference to the amount of losses on accounts, case sensitive or not people are still getting keylogged, we are yet to come across a case of an account being brute forced.

Also blizzard passwords have been this way since the very beginning of WoW, even before.

However your concerns are noted as are the conserns of the community at large.

Regards

Korgalos
Blizzard Entertainment
Customer Services EN

Please log in or register to reply.
Live Events Refresh
Next event in 1h 40m
[ Submit Event ]
Live Streams
Refresh
StarCraft 2
JimRising 505
SteadfastSC 351
Livibee 221
StarCraft: Brood War
Calm 2383
Rain 1289
Mini 414
EffOrt 115
firebathero 98
Stormgate
NightEnD21
Dota 2
NeuroSwarm92
League of Legends
Grubby4177
Counter-Strike
summit1g6463
taco 603
sgares204
Super Smash Bros
PPMD155
Other Games
fl0m922
ToD262
Pyrionflax190
Sick90
Mew2King56
Maynarde52
Organizations
Other Games
BasetradeTV29
StarCraft 2
Blizzard YouTube
StarCraft: Brood War
BSLTrovo
sctven
[ Show 15 non-featured ]
StarCraft 2
• musti20045 60
• davetesta40
• AfreecaTV YouTube
• intothetv
• Kozan
• IndyKCrew
• LaughNgamezSOOP
• Migwel
• sooper7s
StarCraft: Brood War
• Pr0nogo 4
• BSLYoutube
• STPLYoutube
• ZZZeroYoutube
League of Legends
• masondota2918
Other Games
• imaqtpie1351
Upcoming Events
Replay Cast
1h 40m
Wardi Open
12h 40m
PiGosaur Monday
1d 1h
The PondCast
1d 11h
Replay Cast
2 days
RSL Revival
2 days
WardiTV European League
2 days
Replay Cast
3 days
RSL Revival
3 days
WardiTV European League
3 days
[ Show More ]
FEL
3 days
Korean StarCraft League
4 days
CranKy Ducklings
4 days
RSL Revival
4 days
FEL
4 days
Sparkling Tuna Cup
5 days
RSL Revival
5 days
FEL
5 days
BSL: ProLeague
5 days
Dewalt vs Bonyth
Liquipedia Results

Completed

Proleague 2025-06-28
HSC XXVII
Heroes 10 EU

Ongoing

JPL Season 2
BSL 2v2 Season 3
BSL Season 20
Acropolis #3
KCM Race Survival 2025 Season 2
CSL 17: 2025 SUMMER
Copa Latinoamericana 4
Championship of Russia 2025
RSL Revival: Season 1
Murky Cup #2
BLAST.tv Austin Major 2025
ESL Impact League Season 7
IEM Dallas 2025
PGL Astana 2025
Asian Champions League '25
BLAST Rivals Spring 2025
MESA Nomadic Masters
CCT Season 2 Global Finals
IEM Melbourne 2025
YaLLa Compass Qatar 2025

Upcoming

CSLPRO Last Chance 2025
CSLPRO Chat StarLAN 3
K-Championship
uThermal 2v2 Main Event
SEL Season 2 Championship
FEL Cracov 2025
Esports World Cup 2025
FISSURE Playground #2
BLAST Open Fall 2025
BLAST Open Fall Qual
Esports World Cup 2025
BLAST Bounty Fall 2025
BLAST Bounty Fall Qual
IEM Cologne 2025
FISSURE Playground #1
TLPD

1. ByuN
2. TY
3. Dark
4. Solar
5. Stats
6. Nerchio
7. sOs
8. soO
9. INnoVation
10. Elazer
1. Rain
2. Flash
3. EffOrt
4. Last
5. Bisu
6. Soulkey
7. Mini
8. Sharp
Sidebar Settings...

Advertising | Privacy Policy | Terms Of Use | Contact Us

Original banner artwork: Jim Warren
The contents of this webpage are copyright © 2025 TLnet. All Rights Reserved.