-
02-26-2008, 10:51 AM #1
Possible Security Risk?
I figured with the rash of account hacking people have suffered, I figured I'd throw this up.
I noticed that through the wow armoury, you can log in with your account name and pwd to see the guild bank contents. Unfortunately, as far as I can tell, this login procedure does not appear encrypted in any manner (i.e. no https).
Seems like a pretty major oversight on blizz's part to me. I would suggest not entering your account information through the armoury.
*EDIT* There is link to do a secure login on the upper right corner of the armoury page (https://www.wowarmory.com/login.xml), however if you go view the guild bank you will receive a login prompt that is not encrypted/secure (http://www.wowarmory.com/login.xml).Last edited by JAMerica; 02-26-2008 at 02:03 PM.
-
02-26-2008, 10:56 AM #2
Re: Possible Security Risk?
I call conspiracy!
Donate Blood. Ask for a gun and a bucket.




-
02-26-2008, 01:35 PM #3
Re: Possible Security Risk?
It's like the real world banks that designed there websites for IE and locked out competitors with much faster security response like Firefox.
Blizzard makes a lot of noise about security. This suggests that maybe they're not so serious, after all.
You should start a SlashDot story about it. I'll bet that would be a good Clue-by-Four!Dude, seriously, WHAT handkerchief?
snooggums' density principal: "The more dense a population, the more dense a population."
Iliana: "You're a great friend but if we're ever chased by zombies I'm tripping you."
-
02-27-2008, 01:39 PM #4
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)



Reply With Quote






Bookmarks