TalonBot
01-08-2010, 06:22 PM
http://www.blogcdn.com/www.wow.com/media/2010/01/ah010810blizzard.jpg
WoW.com has learned through sources close to the situation that after our series of posts describing some questionable internal policies at Blizzard concerning account administration and security (http://www.wow.com/2010/01/08/account-administration-told-not-to-restore-hacked-characters/), as well as the likely introduction of mandatory authenticators (http://www.wow.com/2010/01/08/blizzard-giving-serious-consideration-to-mandatory-authenticator/), a few of these policies have been changed this evening.
First, the abilities of billing representatives to directly roll back characters to previous states has been more or less removed, preventing the onioning exploit we spoke about earlier (http://www.wow.com/2010/01/08/how-flaws-in-blizzards-billing-department-are-being-exploited/). Account administrators still have the ability, of course, but it should prevent people from being able to game the system over the phone. We do not know if this ability will be returned when billing representatives obtain the proper training and tools.
Second, the care package (http://www.wow.com/2010/01/08/account-administration-told-not-to-restore-hacked-characters/) deal has been sweetened. We're not exactly sure how, only that it's been improved from what it was this morning. World of Raids (http://www.worldofraids.com/news/1062-care-packages-offered-to-hacked-accounts.html) was tracking the response to these stories on the Customer Service Forums and found a post by CSF blue Syndri (http://forums.worldofwarcraft.com/thread.html?topicId=22419024395&pageNo=1&sid=1#8) detailing some specifics of the care page as it stood earlier today. We cannot be sure Syndri's post applies to the package now or not (given its changes), however it's probably safe to assume that it does. We have also learned that managers are being directed to ensure everyone is presented this care package as an optional alternative to full restoration, something we understand was not consistently happening before.
Syndri's enumerations after the break.
Continue reading Blizzard policy changes in reaction to account security concerns (http://www.wow.com/2010/01/08/blizzard-policy-changes-in-reaction-to-account-security-concerns/)
Filed under: Blizzard (http://www.wow.com/category/blizzard/), News items (http://www.wow.com/category/news-items/), Account Security (http://www.wow.com/category/account-security/)
Blizzard policy changes in reaction to account security concerns (http://www.wow.com/2010/01/08/blizzard-policy-changes-in-reaction-to-account-security-concerns/) originally appeared on WoW.com (http://www.wow.com) on Fri, 08 Jan 2010 20:30:00 EST. Please see our terms for use of feeds (http://www.weblogsinc.com/feed-terms/).
Permalink (http://www.wow.com/2010/01/08/blizzard-policy-changes-in-reaction-to-account-security-concerns/) | Email this (http://www.wow.com/forward/19309804/) | Comments (http://www.wow.com/2010/01/08/blizzard-policy-changes-in-reaction-to-account-security-concerns/#comments)
More... (http://feedproxy.google.com/~r/WowInsider/~3/EeKKIq7AmFI/)
WoW.com has learned through sources close to the situation that after our series of posts describing some questionable internal policies at Blizzard concerning account administration and security (http://www.wow.com/2010/01/08/account-administration-told-not-to-restore-hacked-characters/), as well as the likely introduction of mandatory authenticators (http://www.wow.com/2010/01/08/blizzard-giving-serious-consideration-to-mandatory-authenticator/), a few of these policies have been changed this evening.
First, the abilities of billing representatives to directly roll back characters to previous states has been more or less removed, preventing the onioning exploit we spoke about earlier (http://www.wow.com/2010/01/08/how-flaws-in-blizzards-billing-department-are-being-exploited/). Account administrators still have the ability, of course, but it should prevent people from being able to game the system over the phone. We do not know if this ability will be returned when billing representatives obtain the proper training and tools.
Second, the care package (http://www.wow.com/2010/01/08/account-administration-told-not-to-restore-hacked-characters/) deal has been sweetened. We're not exactly sure how, only that it's been improved from what it was this morning. World of Raids (http://www.worldofraids.com/news/1062-care-packages-offered-to-hacked-accounts.html) was tracking the response to these stories on the Customer Service Forums and found a post by CSF blue Syndri (http://forums.worldofwarcraft.com/thread.html?topicId=22419024395&pageNo=1&sid=1#8) detailing some specifics of the care page as it stood earlier today. We cannot be sure Syndri's post applies to the package now or not (given its changes), however it's probably safe to assume that it does. We have also learned that managers are being directed to ensure everyone is presented this care package as an optional alternative to full restoration, something we understand was not consistently happening before.
Syndri's enumerations after the break.
Continue reading Blizzard policy changes in reaction to account security concerns (http://www.wow.com/2010/01/08/blizzard-policy-changes-in-reaction-to-account-security-concerns/)
Filed under: Blizzard (http://www.wow.com/category/blizzard/), News items (http://www.wow.com/category/news-items/), Account Security (http://www.wow.com/category/account-security/)
Blizzard policy changes in reaction to account security concerns (http://www.wow.com/2010/01/08/blizzard-policy-changes-in-reaction-to-account-security-concerns/) originally appeared on WoW.com (http://www.wow.com) on Fri, 08 Jan 2010 20:30:00 EST. Please see our terms for use of feeds (http://www.weblogsinc.com/feed-terms/).
Permalink (http://www.wow.com/2010/01/08/blizzard-policy-changes-in-reaction-to-account-security-concerns/) | Email this (http://www.wow.com/forward/19309804/) | Comments (http://www.wow.com/2010/01/08/blizzard-policy-changes-in-reaction-to-account-security-concerns/#comments)
More... (http://feedproxy.google.com/~r/WowInsider/~3/EeKKIq7AmFI/)