On August 10 2012 08:17 shin_toss wrote: Ahhh hard to memorize diff passwords. :| . Better be safe than sorry
Write them down on some sheet of paper and put it away safely. I mean yeh, if that paper gets stolen / lost you're fucked but you gotta have it somewhere right? And while there are programs for all that stuff having it on a real-world piece of sheet is nice.
On August 10 2012 07:38 Probe1 wrote: So change your passwords. Got it.
(Before anyone says "Oh no Probe u sux at reading", cryptographically scrambled versions.. do you trust your account and information on that? Do you?")
Not saying you shouldn't change your password just to be completely sure, but if you'd know anything about the hashes used to encrypt passwords and how long it takes to decipher even a single password you would know that it's practically impossible for the people that have stolen the hash to obtain even a single password from that information within a month (and even that is stretching it as they'd need a cluster of powerful machines brute forcing the hash constantly for the duration), let alone retrieving a decent amount of stolen passwords. It's honestly not even close to being worth the power/rental costs of doing so to obtain an account worth maybe 100$. This is obviously assuming Blizzard doesn't use horribly outdated encryption, though.
That's pretty sad. I'm from Europe, so I guess I should'n worry. I'm one of those 'use 1 password for everything' guys. Well different versions of same password, to be more exact :D
For those of you having trouble remembering passwords, use a keyboard pattern instead of a mixture of letters/numbers/symbols that you can memorize. A few of my passwords are literally just patterns that I draw on my keyboard, mix in some Shift-key presses and you're set. I literally cannot tell you what my passwords are unless you put a keyboard in front of me.
On August 10 2012 08:19 MxGStreamA wrote: I was hit by this, someone hacked the account, changed the password, played some ladder games.
Unrelated, you probably had a bad / shared password beforehand. A hacking group advanced enough to break into Blizzard's network isn't really after your SC2 ladder rank.
On August 10 2012 08:06 R1CH wrote: If you used the same password anywhere else, you should change it (and stop re-using passwords!). They have your email and password hash which is more than enough to wreck havoc, especially if it was your email account password. Props to Blizzard though for the announcement.
Have a good password manager thingy that you recommend? My batle net is on a unique password but I tend to be lazy with services (so no battle net/steam/e-mails) I don't really care about.
On August 10 2012 07:43 Hokay wrote: Noooo not my secret questions! A lot of sites ask the same secret security questions :X
This is awkward. I never remember the answer to my secret questions. But some complete stranger might...maybe I can finally access my old XBox Live account if I can find a way to contact this guy...
LOL SO TRUE!
I seriously cannot have a password for each site because I cannot remember that many passwords. I have to change my password at work every 10 weeks, and I'm running out of options, I cannot use ANY password I've previously used... security questions I have a little trick for, that this hacker ruined. I always answer the same 3 things for security questions, and they are complete bullshit, so it doesn't matter what questions are asked, just the random answers i have selected, it makes it hard when sites ask me in random order.
Bleh, I guess I'll have to write down my passwords at home, and start making them different for everything. Luckily I already use seperate password for things i care about, like banking/personal email. Fuck you hackers
On August 10 2012 07:38 Probe1 wrote: So change your passwords. Got it.
(Before anyone says "Oh no Probe u sux at reading", cryptographically scrambled versions.. do you trust your account and information on that? Do you?")
Not saying you shouldn't change your password just to be completely sure, but if you'd know anything about the hashes used to encrypt passwords and how long it takes to decipher even a single password you would know that it's practically impossible for the people that have stolen the hash to obtain even a single password from that information within a month (and even that is stretching it as they'd need a cluster of powerful machines brute forcing the hash constantly for the duration), let alone retrieving a decent amount of stolen passwords. It's honestly not even close to being worth the power/rental costs of doing so to obtain an account worth maybe 100$. This is obviously assuming Blizzard doesn't use horribly outdated encryption, though.
I don't think you're aware of how password hashing works. Do you not think there are millions of people with "password123" or equally terrible passwords in those stolen hashes? Why would you need a month to break that?
On August 10 2012 08:06 R1CH wrote: If you used the same password anywhere else, you should change it (and stop re-using passwords!). They have your email and password hash which is more than enough to wreck havoc, especially if it was your email account password. Props to Blizzard though for the announcement.
Have a good password manager thingy that you recommend? My batle net is on a unique password but I tend to be lazy with services (so no battle net/steam/e-mails) I don't really care about.
On August 10 2012 08:06 R1CH wrote: If you used the same password anywhere else, you should change it (and stop re-using passwords!). They have your email and password hash which is more than enough to wreck havoc, especially if it was your email account password. Props to Blizzard though for the announcement.
Have a good password manager thingy that you recommend? My batle net is on a unique password but I tend to be lazy with services (so no battle net/steam/e-mails) I don't really care about.
I use Keepass personally. It can be configured to login to games too.
On August 10 2012 08:17 shin_toss wrote: Ahhh hard to memorize diff passwords. :| . Better be safe than sorry
Write them down on some sheet of paper and put it away safely. I mean yeh, if that paper gets stolen / lost you're fucked but you gotta have it somewhere right? And while there are programs for all that stuff having it on a real-world piece of sheet is nice.
KeePass guys! :D
Give it a shot, there are portable versions as well (USB flash/iPhone etc)!
Funny, since my SC2/D3 account got hacked and stolen after not playing on either for a week. Someone put on an authentication device....that I've never put on.
I had to get blizzard to roll back my account into my hands, and changed my PW back to normal. Odd.