Rethink getting Authenticators... They've finally been hacked.

http://www.tomshardware.com/news/blizzar...,9821.html

Darn kids...

Well.. the key point here is that they had to have downloaded a keylogger in order for the hackers to have access to their code. Don't be stupid and download random pomegranate and keep an authenticator on your account. The authenticator did not cause them to get hacked, this is simply the fault of the noobs from downloading malware.

No matter how you look at: having an authenticator > having no authenticator. It provides another level of protection, and noobs who download keyloggers should just quit playing online games altogether.

>Keylogger.

It's not the authenticators getting hacked. It's the idiots allowing themselves to go to a website that's pretty much a death sentence to your privacy. There's no real argument here that authenticators are at fault here. No matter the level of security human idiocy will always win.

Finally? That article was published almost a year ago.

Well, if you get a keylogger you should rethink which pages you're browsing. This doesn't make it less secure. Alarmist much?

Sorry if it came a bit harsh.

Finally? That article was published almost a year ago.

Oh, well that's an even weaker argument. Welcome to last year, and WoW accounts are still way better off than 99% of the rest of MMO accounts out there due to authenticators alone.

This is not maple related.

And yes, as it has been said before, it's not the authenticator's fault. It's people downloading malware. How in any way would you rethink getting one? Even IF the authenticator had legitimately been hacked, it would still be more secure than not having one. This was a pretty terrible thread.

Finally? That article was published almost a year ago.

And what's funny is this is the ONLY case in where this kind of "MITM" attack ever happened. There's yet to be another one since that day. Even then, only several dozen players, out of 11.5 million at the time, got hit by this, and it was due to sheer stupidity.

The authenticator itself was completely irrelevant in this case. The keylogger stole their login info, and within the window where the authenticator's key is constant, logged the hacker onto the account.

The authenticator isn't ideal - if you steal the authenticator password you have full access - but it's a lot more secure than not having it.

Closed for being misleading FUD.

Authenticators have not been cracked.
This is like saying someone figured out how to pick the lock to your car because they stole and copied your key.
Not even remotely related concepts.