EPTCapitalization on Blizzard Passwords - Page 2
| Forum Index > SC2 General |
|
ZerGuy
Poland204 Posts
| ||
|
Lysergic
United States355 Posts
| ||
|
bakesale
United States187 Posts
On July 20 2011 02:04 busbarn wrote: Well, if someone gets your password say through a keylogger which is the most common. It doesn't really matter anyway. I have a hard time seeing how making it read upper and lower cases different makes a difference in security. It's still symbols. Maybe someone can explain it too me, It only makes a difference if someone is trying to crack your password by guessing (dictionary attack). Having case-sensitive passwords adds 26 more symbols, increasing the number of possible "words" to choose from when guessing. So, technically, it is harder to crack a password in a system that distinguishes upper and lower case. | ||
|
Dulkan
Germany24 Posts
| ||
|
Carush
United States356 Posts
whether it's indirect or direct i feel like I've seen WAY to many of these last few days | ||
|
Badfatpanda
United States9719 Posts
On July 20 2011 02:20 Carush wrote: also, what's with all the bnet hate threads this week whether it's indirect or direct i feel like I've seen WAY to many of these last few days Where did I say I hated bnet? I don't even think this is that big of a deal but I thought people should know...go to one of the "this is why bnet sucks, this is how I could do it better" threads and post there. | ||
|
TheOnlyOne
Germany155 Posts
On July 20 2011 02:12 ApBuLLet wrote: I don't really think this is as big of a deal as people are making it out to be. People tend to panic a bit when they feel like they or their property is at risk, and rightfully so. However, the vast majority of the time people get their accounts stolen is due to some sort of keylogging malware, in which case the a case sensitive password system would not matter, because your hacker would know anyway. The only thing I can see it being good for is if somebody is trying to guess your password or something like that. Case sensitive passwords make that a million times harder I would imagine, as you'd have to guess the password and the patter of lowercase/uppercase. So overall, yes I think it is bad and there is no reason not to have case sensitive passwords for that little bit of extra security, but in reality I don't really think it is that big of a deal. I'm not going to worry about it personally  I think implementing a "feature" for case recognition is done super quick, its no work. It is a good thing and "should" be in games anyway, so Blizzard should just do it and everyone is happy. So no matter what, if the features is done so quick, just do it, nothing to lose. | ||
|
aksfjh
United States4853 Posts
On July 20 2011 02:21 Badfatpanda wrote: Where did I say I hated bnet? I don't even think this is that big of a deal but I thought people should know...go to one of the "this is why bnet sucks, this is how I could do it better" threads and post there. Post was possibly inspired by lysergic. Not sure why he decided to come in here to tell us how much he hates bnet. I found this bit of info out months ago, but I'm glad you posted about it. | ||
|
Tofugrinder
Austria899 Posts
On July 20 2011 02:12 ApBuLLet wrote: I don't really think this is as big of a deal as people are making it out to be. People tend to panic a bit when they feel like they or their property is at risk, and rightfully so. However, the vast majority of the time people get their accounts stolen is due to some sort of keylogging malware, in which case the a case sensitive password system would not matter, because your hacker would know anyway. The only thing I can see it being good for is if somebody is trying to guess your password or something like that. Case sensitive passwords make that a million times harder I would imagine, as you'd have to guess the password and the patter of lowercase/uppercase. So overall, yes I think it is bad and there is no reason not to have case sensitive passwords for that little bit of extra security, but in reality I don't really think it is that big of a deal. I'm not going to worry about it personally caseinsensitive passwords and without numbers and signs are just as good as to have your password the same as the login. The password should be _always_ more than 10 characters with small/big letters, numbers and signs. So this is in my opinion a real big problem. For sc2 it might just be bad, but for wow this could end desastrous because people have their account data saved up | ||
|
Otolia
France5805 Posts
 | ||
|
windsupernova
Mexico5280 Posts
On July 20 2011 02:12 ApBuLLet wrote: I don't really think this is as big of a deal as people are making it out to be. People tend to panic a bit when they feel like they or their property is at risk, and rightfully so. However, the vast majority of the time people get their accounts stolen is due to some sort of keylogging malware, in which case the a case sensitive password system would not matter, because your hacker would know anyway. The only thing I can see it being good for is if somebody is trying to guess your password or something like that. Case sensitive passwords make that a million times harder I would imagine, as you'd have to guess the password and the patter of lowercase/uppercase. So overall, yes I think it is bad and there is no reason not to have case sensitive passwords for that little bit of extra security, but in reality I don't really think it is that big of a deal. I'm not going to worry about it personally Haha, not even that. Most of the time when they lose control of their accounts its because they fall for some social engineering scheme. Still, I didn´t know about this.Ehhhhh, while it would be nice as long as you follow the rules for a secure password(not using common words,mixing up symbols, letter and numbers, etc) you should be fine. Ehh anyways Blizzard should fix this to give their customers peace of mind, but this isn´t nearly as bad as it seems. | ||
|
Probe1
United States17920 Posts
| ||
|
Phayze
Canada2029 Posts
| ||
|
Bobbias
Canada1373 Posts
Of course, using the same password as somewhere else is FAR worse than either of these risks. Anyone who's been following the LulzSec hacks should be aware of this... | ||
|
Vipsanius
Netherlands708 Posts
| ||
|
Blasterion
China10272 Posts
/downloads Authendicator | ||
|
Glowbox
Netherlands330 Posts
On July 20 2011 03:04 Bobbias wrote: Brute force isn't the only way to break passwords... Cryptoanalasys is a far larger threat, all things considered. It's bad practice to ignore case, but the real question is how blizz stores the passwords,a and which algorithms they use. As far as I know Blizzard uses the SRP6 protocol ( http://en.wikipedia.org/wiki/Secure_remote_password_protocol ) for the login. | ||
|
MyNameIsAlex
Greece827 Posts
I cant believe it... Blizz so stupid once again... | ||
|
Akill_
United Kingdom80 Posts
+ Show Spoiler + joke: they probably have hackers on payroll helping convince authenticator sales too, haha | ||
|
ballasdontcry
Canada595 Posts
| ||
| ||
