Really wish the whole "session hijacker" theory-drivers would drop it.
Authentication + player data is hashed, and clearly undergoes md5 checks when reaching the serverside. Good luck pulling an alleged "GUID" from that data. Another player's GUID isn't even available on the clientside ObjectManager, which is why there are NO posts about this on Owned Core or any of the major Blizzard hacking sites. D3 isn't Average Joe's website, where you can SQL inject into the DB, grab the admin's session ID + salt, and fill in the blanks; session hijacking usually only applies in a web security theatre. We have yet to see any legitimate technical information as to how to session hijack, other than some baseless comments that you steal the other player's GUID, which if you actually loaded up Ethereal with D3 open (and joining a party), you'd know is impossible.
Some noob was phished or they snagged his/her information through some other means of social engineering, started reading up on Google because it couldn't possibly be his/her fault, and applied a web concept to a video game to start a rumor that is NOT possible.
Get an authenticator, or get dominated by farmers if you're so easy to socially engineer, end of story.
I disagree on the first point, because from what I see it's about 1 in every 3 had an authenticator
and again, it is simply impossible for this level of increase of hacked accounts in this small a window to say they are unrelated instances of user error. Like impossible impossible. If you have any understanding of statistics this is glaringly obvious. I can't stress how impossible it is for it to be client side.
It could be Blizzard's problem and still be client side. The forums (Or some popular website) could have something malicious embedded in it. It's happened before.
The client sending out session ids that you can use to bypass log in could be possible, but as someone said before, this isn't Blizzard's first game.
I'd still avoid public games until they release a statement though. I'm fairly sure the AH would be fine.
It hasn't in this scale. It's not possible in this scale. The logistics involved with having something cause an event this large all on the individual client side level are unbelievably staggering. It's a text book instance of Occams Razor- the simpler explanation is usually the correct one. It's definitely on blizzards end here.
What scale? You don't have any statistics backing your claims, only assumptions.
Bash told sixen there would be none, He even said in the blue post where he said "who ever told you that was silly, you should just ask me next time" Joking about how he told sixen that were was not going to be one (and then there was)
No, he said that the F&F beta hadn't started yet, not that there wouldn't be a F&F phase.
I would like to mention one thing. I got off the phone/email with Blizzard Crap Support and found the following:
I was dealing with them regarding my account being hacked and they said the following:
Your account is considered Active if you have LOGGED IN TO A GAME within the last few months.
I haven't logged into my SC2 account in MONTHS, and realized this was part of my problem and how they weren't able to link my b.net forum account to my actual account.
Now I could easily be wrong, but this is what I took from it.
Is if you don't login to an account for X amount of months, your account is put in limbo, you can still login and use it but it may not be considered "Active"
Just something to think about...
They're "crap support" because the answer provided isn't what you want to hear? Nice.
It makes perfect sense from that position, why would they want beta invitations going out to folks who haven't played a Blizzard product in months?
It's probably in the direction "don't spend much time outside of the game, get in and play".
That's what I'm afraid of though. These 'incentives' of theirs somewhat anger me. 'You are supposed to be killing monsters not looking at the menu screens so we made the menu ugly'...'you are supposed to be fighting and completing quests not listening to lore/dialogue/gossip so we make dialogue continue on the run while you are killing stuff'...I won't even go to automatic skill/stat allocation so you don't have to spend time looking at those either... Hm, looks like I just went there anyway. Point is, I'd rather they dedicate sufficient time and effort to all of this instead of minimizing aspects of the game to make room for MOAR combat. Some people just like to take the game nice and slow, enjoy the art and atmosphere of it, soak in some lore and stuff and not just run around and loot. Though it is the core aspect of the game, it's not just that which makes Diablo great. Other ARPGS kill and loot just like Diablo does...but Diablo always was something more as well. I hope they don't streamline it too much.
I agree completely..
I'm worried that blizzard is listening too much to people just wanting epic lootz, and dont give a shit about the story...
A comment from jay in a video interview actually scared me..
he said that when they had story in a game, and forced the character to stop up and listen, they just clicked through it.. cos they wanted to keel keel monsterzlolz... this worries me..
JUST because the core of the gameplay resolves around killing stuff, why does that have to mean that all the other aspects of the game has too be dumbed down, and be added on with lackluster graphics in this case?
Seems like a cop-out to me.
You're complaining about graphics on a game that you haven't played, or a story that you haven't experienced. How about you take a step back and play the game first, then decide.
Honestly in this day and age I don't think it's all that unreasonable.
There is no 'day and age' of which you speak of.
It is unreasonable if you care about your players' convenience, which Blizzard obviously does not.
I'm in a village far away there's no internet here. I got my SCII copy. Install- crap I can't play it.
This is done for supposed (not guaranteed) profit while hurting the players.
Not all of us are stuck in cities with perfect high speed internet 24/7/4/12. Old school gamers especially value freedom a lot, this limits.
You seem to be posting on these forums just fine, maybe you can make the same trip out of your village?
What is the big deal surrounding the auction house? There is still an in-game currency auction house from my understanding. If you can't stand it, use the in-game auction house - like myself and many others will be doing.
It's better than all of the 3rd party websites that sell D2 items moving into D3.
Activision is primarily a publisher, Blizzard is primarily a developer. It's a publishers job to get a developer and a game some press. Activision wouldn't be doing their job if they didn't at least encourage them being there.
Yes, that's precisely why there was a merger of Vivendi Games and Activision. Blizzard got too big for its shoes and needed a publisher that was cost-effective. However, the context of Blizzard making an announcement at E3 does not involve Activision; while Activision takes in role in the logistical role of a publisher, Blizzard handles everything from PR to announcements themselves. That's why all major announcements have historically dropped on the forums, the Blizzard Website, or BlizzCon. I doubt if the relationship with Activision is the same as, for example, Treyarch.
I don't believe Activision has ever had a "heavy hand" or any sway with Blizzard, however as with any company, the shareholders certainly do. As a matter of fact, it's probably the other way around based on the prosperity of Blizzard and the recent lay-offs and slashing of a few IPs at Activision.
Anyways, Blizzard isn't on the exhibitor's list, so I wouldn't hold your breath on a D3 announcement being there.
Rollback Post to RevisionRollBack
To post a comment, please login or register a new account.
Authentication + player data is hashed, and clearly undergoes md5 checks when reaching the serverside. Good luck pulling an alleged "GUID" from that data. Another player's GUID isn't even available on the clientside ObjectManager, which is why there are NO posts about this on Owned Core or any of the major Blizzard hacking sites. D3 isn't Average Joe's website, where you can SQL inject into the DB, grab the admin's session ID + salt, and fill in the blanks; session hijacking usually only applies in a web security theatre. We have yet to see any legitimate technical information as to how to session hijack, other than some baseless comments that you steal the other player's GUID, which if you actually loaded up Ethereal with D3 open (and joining a party), you'd know is impossible.
Some noob was phished or they snagged his/her information through some other means of social engineering, started reading up on Google because it couldn't possibly be his/her fault, and applied a web concept to a video game to start a rumor that is NOT possible.
Get an authenticator, or get dominated by farmers if you're so easy to socially engineer, end of story.
What scale? You don't have any statistics backing your claims, only assumptions.
No, he said that the F&F beta hadn't started yet, not that there wouldn't be a F&F phase.
AV or Firewall, one of the two are causing it. This is similar to an error 134 on WoW.
They're "crap support" because the answer provided isn't what you want to hear? Nice.
It makes perfect sense from that position, why would they want beta invitations going out to folks who haven't played a Blizzard product in months?
You're complaining about graphics on a game that you haven't played, or a story that you haven't experienced. How about you take a step back and play the game first, then decide.
You seem to be posting on these forums just fine, maybe you can make the same trip out of your village?
It's better than all of the 3rd party websites that sell D2 items moving into D3.
Yes, that's precisely why there was a merger of Vivendi Games and Activision. Blizzard got too big for its shoes and needed a publisher that was cost-effective. However, the context of Blizzard making an announcement at E3 does not involve Activision; while Activision takes in role in the logistical role of a publisher, Blizzard handles everything from PR to announcements themselves. That's why all major announcements have historically dropped on the forums, the Blizzard Website, or BlizzCon. I doubt if the relationship with Activision is the same as, for example, Treyarch.
Just my $0.02.
????
I don't believe Activision has ever had a "heavy hand" or any sway with Blizzard, however as with any company, the shareholders certainly do. As a matter of fact, it's probably the other way around based on the prosperity of Blizzard and the recent lay-offs and slashing of a few IPs at Activision.
Anyways, Blizzard isn't on the exhibitor's list, so I wouldn't hold your breath on a D3 announcement being there.