New WoW Security Token now available

Article found at http://www.securityfocus.com/brief/766?ref=rss

World of Warcraft to get bank-like security
Published: 2008-06-30

Players of the massively multiplayer online role-playing game (MMORPG) World of Warcraft can now use two-factor authentication similar to what many banks and investment firms have adopted, developer Blizzard announced last week.

The Blizzard Authenticator, a key fob with a button and small liquid-crystal display, generates a six-digit number every thirty seconds and will display the code when the user presses the button. Once the authenticator is registered to an account, using a unique serial number on the back of the device, a player will have to enter their password and the six-digit code to access their account.

"It's important to us that World of Warcraft offers a safe and enjoyable game environment," Mike Morhaime, CEO and cofounder of Blizzard Entertainment, said in a statement announcing the additional security measure. "One aspect of that is helping players avoid account compromise, so we're pleased to make this additional layer of security available to them."

The news comes a week after Microsoft found an enormous number of PCs infected with Trojan horse programs designed to steal online-game credentials. Online game accounts have been increasingly valuable in the underground economy, especially in the Asia Pacific region.

A number of banks, such as E*TRADE, as well as online payment service PayPal have adopted such physical tokens as a way increasing the security of their services. Such security is not unhackable, but it forces attackers to piggyback on a victim's banking session in real time, limiting the attack window. Moreover, such attacks may not work in an online game such as World of Warcraft.

The authenticator can be bought from the Blizzard Store for $6.50.

Token can be found at the Blizzard store http://www.blizzard.com/store/details.xml?id=1100000182



On a personal note, having two accounts compromised in the past (mine and my wife’s), any security layers for account authentication is definitely worth it (especially for this small price).

Happy gaming!

That sounds like a good idea! I looked at the Blizz store and they are all sold out right now. If you bought one will you share how well it works for you and if it is a good investment?

Thanks!

I will, as soon as I get them and test them. If anyone else hears or reads anything about them, please post a reply.

-GV

I'll be getting one of these. What an awsome idea.

The token is available again . I just placed my order for 2 (one for my wife and one for me) here.

Better order quick. The last batch was out within the first week.

Token? what Token?

Scroll up, you big Orc!!1!!

Isn't there a mage around that can cast an Intel Buff on this guy?!?1

So after ordering the token, and the 2 weeks for it to arrive, I have it associated with my account.

I have to say that the addtional security layer is nice. Once you have one of the security tokens associated with your account, you cannot log into the game or log into the account management section of the WoW website without the token (it can be disassociated with a phone call to Bliz and your secret question stuffs).

The token generates a unique key (is not the same on other keys) for you to log in (tested it with my wife's token).

So....Dear hackers....Try to get in now...Assholes!!1!