To sum it up, if have an authenticator, for someone to hack your account, they would have to come to your house/apartment/dorm and STEAL the Keychain/YourPhone/Your iPod to gain access to your account.

This little device (or program) is 100% account security. You and you alone will have access to your account. For the keychain, you push the button, you get a one time number, use it to log in. The iPhone App generates a new 8-digit code every 30 seconds. The other mobile authenticators work in a similar fashion I believe.

If you enter the wrong numbers 3-4 times, your account is locked

If you share an account, this might pose complications.

Have Multiple Accounts? No Problem! Get the keychain, keep in the computer/gaming room!


You can get the Mobile Authenticator for your Phone for $0.99 (USD)! Check the link to see if your phone is on the list of compatible models! http://mobile.blizzard.com/shared/blizz ... us&lang=en

You can get the iPhone/iPodTouch app for FREE! http://itunes.apple.com/us/app/battle-n ... 62897?mt=8

Or you can get a Nifty Keychain http://us.blizzard.com/store/details.xml?id=1100000822
((CANADIANS HAVE TO BUY A DIFFERENT ONE (SAME PRICE THOUGH))) http://us.blizzard.com/store/details.xml?id=1100000823))

Blizzard even gives nice easy to follow instructions on setting up your authenticator! http://us.blizzard.com/support/article. ... ag=ADDAUTH


I'm making this big noisy post cause apparently now, if you get hacked, you might find yourself locked out from it because the HACKERS have added an authenticator to YOUR Account.


I strongly urge ALL OF YOU to get one of these nifty little things. You'll never worry about getting hacked ever again!

If you didn't see it on the Launcher, Blizzard has released a very nice set of Articles on Account Security! and I HIGHLY recommend looking through them!

http://us.battle.net/security/index.html


Topics Covered:
- Blizzard's Security Commitment
- Security Checklist
- Types of Account Thefts
- Help! I Got Hacked!

Just announced today, there is apparently a keylogger that injects itself into the login process and returns a failed login message to you and transmits your auth key to it's home base.

Now, it is still waaaay better to have an authenticator than not. This is one bug that might possibly be able to use your info compared to the thousands that it blocks.

Also, this keylogger WILL be detected by a normal anti-virus scanner (tons avail online for free) , and the data it logs and sends home will only be useful for 30-60 seconds until the login code rolls over. So to get hacked by this, the bad guys have to be actively sitting there waiting for your info to come in, and use your info to login to the game or battle.net within that 30-60 seconds. They then would have to get your pw changed or loot your bank or whatever in less time than it took for you to try to login again after your first attempt failed (another 30-60 seconds).

So overall not a big deal, very little risk. Mostly serves as a reminder to keep your anti-virus up to date, because the jerks will always keep trying new ways to get your info, no matter what.

It would be great if Blizzard would implement an Opt-In system for geo-coding your account as well as the auth protocol. So you could volunteer to have your account only recognized from an IP that traces back to your state or country. That would stop 99% of the stuff the Authenticator can't catch.

In regards to the MitM attack that can circumvent the Authenticator, here's a couple articles with more information and a temporary step to block it:

MMO-Champion.com: http://www.mmo-champion.com/news-2/authenticator-accounts-hacked-icc-quests-crimson-deathcharger/

Curse.com: http://wow.curse.com/articles/wow-en-news/687481.aspx

Drae