Topic: Battle.net has been compromised. Change your passwords ASAP

[K-man]

http://us.blizzard.com/en-us/securityupdate.html

[MysterD]

I put it in the D3 thread.
But yeah - actually, much better to make this shit stick out.

All this hacking shit is crazy...

[idolminds]

Having all these accounts is AWESOME! Online security! Woo!

[W7RE]

Ugh, trying to come up with so many passwords that I'll actually remember is such a huge pain.

My dad actually uses a fingerprint scanner on his computer. He uses his own passwords still, but the software can generate passwords for everything and just use his fingerprint so he doesn't have to remember them. The problem is the software is super dodgy and he has to manually type the password in half the time anyway.

[Cobra951]

I've been getting notices in my main email, junk folder, that I'm trying to sell my Diablo 3 account at Blizzard.  These have been coming for a week.  As you know, I don't have a D3 account, and never will.  The Blizzard addresses look legit.  My email itself is fine (I can log in and out at will, and nothing has been tampered with), and it's just a hotmail account with nothing I can't afford to lose or divulge anyway.  But this kind of shit just goes to show how stupid it is to base your digital life on the cloud, at least by itself.

[idolminds]

Heh, checked my junk mail and I got one phony Blizzard phishing attempt from Aug 7 for hacking in Diablo 3. Which I don't have. Its not even a very good attempt. I'm insulted.

Going back a little further theres a fake invite to the next WoW expansion beta. That ones actually a decent attempt.

[Xessive]

Reset my password. I'm using an authenticator anyway.. Useful?

[scottws]

Ugh, trying to come up with so many passwords that I'll actually remember is such a huge pain.

KeePass Password Safe is your friend. I would never be able to remember all of mine. I just remember here, Facebook, Amazon, Gmail, and Charles Schwab.

[Quemaqua]

I've got WoW characters that aren't even mine on my battle.net account. They suspended it for a while. I brought it back for D3. I should really just fucking cancel it and have them remove everything. I'm fucking tired of this shit.

[W7RE]

KeePass Password Safe is your friend. I would never be able to remember all of mine. I just remember here, Facebook, Amazon, Gmail, and Charles Schwab.

I've been thinking about KeePass for a day or two now. I've never heard of it before and don't know if I want to trust all my stuff to one program. I've read people talking about putting the keyfile and database in a dropbox folder (you know, because what if my computer dies with no warning and I lose the db and key file?), but doesn't that just open you up to more vulnerability?

[scottws]

I have my database on Dropbox, but no keyfile.  It's encrypted, but yeah it is a security risk to store it in the cloud.

[sirean_syan]

I feel like the worst part for this is the loss of the security question information. What makes it really bad is Blizzard doesn't seem to let me access the question to at least check to see what it is so I can assess and possibly mitigate the damage. Odds are I set the answer to that question a long time ago when WoW came out which was well before all these mass hackings occured.

[idolminds]

So has anyone received an email from Blizzard about this? It seems like when these breeches happen they expect users to be the type to follow the news.

Also Why hacked Blizzard passwords aren't as hard to crack as company says.