Ga terug   Lowland Lions Forums > Other games > World of Warcraft

Reageren
 
Discussietools
Oud 1 maart 2010, 18:03   #1
Didis
Guild Leader (LLL)
 
Didis's schermafbeelding
 
Geregistreerd: 21 mei 2006
Berichten: 2.775

IGN: Didis
Blizzard security token beaten

World of Warcraft Security Tokens Beaten with Malware


Security tokens are the latest and greatest in game security for World of Warcraft and other games ... and they have been beaten. Attacks that several people, including myself, have previously speculated about.

The attack is pretty straightforward. Hackers get a piece of malware onto a victim's computer. When the victim player logs into World of Warcraft, the malware intercepts the code and sends it to the crooks who use it to login and loot the account.

There are a couple of problems here. The security token generates "one-time passwords" that are actually good for a short period of time (a matter of minutes due to the sloppiness of clocks).

There are some potential countermeasures that Blizzard can take to thwart this attack, some of which are more fragile and easy to implement than others.

Where there is money on the table, hackers will try to find a way.

While the attack has been described as a "man-in-the-middle", it is actually a "man-on-the-side" attack - it is high tech shoulder surfing.

While this is pretty disturbing for games like World of Warcraft, it is of greater concern for banks and other financial firms using similar security tools.

A. Ziebart (2010), "Man in the middle attacks circumventing authenticators", http://www.wow.com/2010/02/28/man-in...uthenticators/
__________________

Didis is offline   Met citaat reageren
Oud 1 maart 2010, 18:04   #2
Didis
Guild Leader (LLL)
 
Didis's schermafbeelding
 
Geregistreerd: 21 mei 2006
Berichten: 2.775

IGN: Didis
Zucht wanneer en hoe kunnen we nu is normaal zonder dat ik continu achterom moet kijken gamen.

arrrrrrgggghhhhh a corsair bandit....kill kill
__________________

Didis is offline   Met citaat reageren
Oud 1 maart 2010, 21:29   #3
Yammie
LLL Officer
 
Yammie's schermafbeelding
 
Geregistreerd: 12 januari 2008
Berichten: 482

IGN: GW1: Nar Wen GW2: Caelisar
Pfff, en ik was zo ontzettend te spreken over dit stukje hardware
__________________
The 1337 LLL Night Farmer©
Yammie is offline   Met citaat reageren
Reageren

Discussietools

Regels voor berichten
Je mag geen nieuwe discussies starten
Je mag niet reageren op berichten
Je mag geen bijlagen versturen
Je mag niet je berichten bewerken

vB-code is Aan
Smileys zijn Aan
[IMG]-code is Aan
HTML-code is Uit

Forumnavigatie


Alle tijden zijn GMT +1. Het is nu 13:46.


Guild Wars is a trademark of NCsoft Corporation. Copyright © NCsoft Corporation. All right reserved.
© 2003-2012 ArenaNet, Inc. All rights reserved. NCsoft, the interlocking NC logo, ArenaNet, Arena.net, Guild Wars, Guild Wars Factions, Factions, Guild Wars Nightfall, Nightfall, Guild Wars: Eye of the North, Eye of the North, and all associated logos and designs are trademarks or registered trademarks of NCsoft Corporation. All other trademarks are the property of their respective owners.

Powered by vBulletin®
Copyright ©2000 - 2018, vBulletin Solutions, Inc.
Forum uses gwBBcode version 1.8.3
Modified by Kills Less [Lowland Lions]
GFX by NexceveN [Lowland Lions]
Copyright © 2005-2012 www.LowlandLions.nl