JAMerica

I figured with the rash of account hacking people have suffered, I figured I'd throw this up.

I noticed that through the wow armoury, you can log in with your account name and pwd to see the guild bank contents. Unfortunately, as far as I can tell, this login procedure does not appear encrypted in any manner (i.e. no https).

Seems like a pretty major oversight on blizz's part to me. I would suggest not entering your account information through the armoury.

*EDIT* There is link to do a secure login on the upper right corner of the armoury page (https://www.wowarmory.com/login.xml), however if you go view the guild bank you will receive a login prompt that is not encrypted/secure (http://www.wowarmory.com/login.xml).

ThaDoctah

I call conspiracy!

__________________

<I don't remember which end the bullets come out>

ScratchMonkey

It's like the real world banks that designed there websites for IE and locked out competitors with much faster security response like Firefox.

Blizzard makes a lot of noise about security. This suggests that maybe they're not so serious, after all.

You should start a SlashDot story about it. I'll bet that would be a good Clue-by-Four!

__________________
snooggums' density principal: "The more dense a population, the more dense a population."

Iliana: "You're a great friend but if we're ever chased by zombies I'm tripping you."

orion808

ouch

__________________