The Blizzard Authenticator - Page 8

Bunni · 07/12/08, 9:04 AM

I can't really imagine why they would be any different between the US/EU but you never know. We ordered ours yesterday and yeah, it is a little screwy that it costs more to ship than the item itself. In the end it's still pretty cheap though and to me at least well worth a little peace of mind.

Treacle · 07/12/08, 10:18 AM

Originally Posted by Bunni

I can't really imagine why they would be any different between the US/EU but you never know.

I suppose the question is whether the activation and authentication process would be aware of the serial numbers of all authenticators or just those sold in the US.

• Rerox · 07/19/08, 5:14 AM

I was just wondering, is there any way to lock more than one Token to one account?
I was hoping of locking a "backup token" to my accounts in case the main token got lost.

Ellere · 07/19/08, 5:17 AM

Originally Posted by Treacle

I wonder if a European player with a US WoW account could use an authenticator bought at the EU store.

I'm using a US WoW account with a Euro store bought authenticator, works fine.

• Chicken · 07/19/08, 6:11 AM

Originally Posted by Rerox

I was just wondering, is there any way to lock more than one Token to one account?
I was hoping of locking a "backup token" to my accounts in case the main token got lost.

It's one token per account, anything else would make the system a lot less secure, you might think "But I need my authenticator to log onto account management" but if any potential hacker is online at the same time as you they'll get a nice timeframe where they could hook up their own authenticator to your account and then log in later. You'll just have to call Blizzard in case your token gets lost.

mikebro · 07/19/08, 2:52 PM

Originally Posted by Blacksen

I got my authenticator 3 days ago and decided to call Blizzard today to "pretend" like I had lost it.

They started by asking my name, account info (including password), credit card #s, address, etc. All of it seemed "fakable" until they sent me an e-mail. Their way of verifying that it's actually you is by sending you an e-mail with a "passphrase" that you're supposed to read back to them.

I was actually incredibly impressed with the quality of the service. I spent about 40 seconds on hold before they picked up. It took about 2 minutes before the authenticator was "deregistered" from my account. I just went back and re-registered it and it's working again fine.

Name, CC#, and Address are all partially hidden in account management. I don't really know how you would 'fake' that unless you knew the person whose account you were trying to compromise very well. You can easily change your e-mail in Account Management so I wouldn't be too impressed by that.

Florrie · 07/20/08, 9:55 AM

I ordered two and got one.

I emailed and asked where my other one was. I was sent a link to "managing my account". I emailed the other suggested link and was sent another reply that suggested I check the support forums.

I'm eagerly awaiting the opening of the phone line on Monday. I will just jab numbers like a rabid monkey until I get somewhere.

Blacksen · 07/24/08, 12:21 PM

Originally Posted by mikebro

You can easily change your e-mail in Account Management so I wouldn't be too impressed by that.

Authenticator is required to login to Account Management. It seems the only way someone could steal your account is by literally stealing the authenticator, and even then, it'd be difficult.

kidgamer · 07/24/08, 5:24 PM

Apparently the authenticator doesn't always work

Authenticator Fails, account hacked

• Chicken · 07/24/08, 5:28 PM

Originally Posted by kidgamer

Apparently the authenticator doesn't work

Authenticator Fails, account hacked

It'll still work pretty well for keylogger protection judging by that article. It won't work against someone whom you personally know trying to get past it for some reason.

Married IRL has more analysis, including a comment that confirms all you really need to get past the Authenticator is the user's secret question answer, usual address information, and the original CD key. If the standard for getting an Authenticator removed really is a Photo ID, it's fairly clear that Blizzard's reps aren't doing their jobs right.

Then again someone else in this thread made it clear it was a lot more involved than just this. Wonder if it's dependant on the region.

Merple · 07/24/08, 5:37 PM

Originally Posted by kidgamer

Apparently the authenticator doesn't always work

Authenticator Fails, account hacked

Technology will always fail to social engineering. This isn't anything new.

Talgog · 07/25/08, 12:53 PM

Originally Posted by kidgamer

Apparently the authenticator doesn't always work

Authenticator Fails, account hacked

This is known as social engineering. With proper use of it and the requisite number of morons, anything can be defeated.

◊ voy1d · 09/10/08, 6:58 PM

Gathering from what was said, if you have an US account and buy one from the EU store (because you live in EU) you can use it.

My question is since I'm from New Zealand, would my account be 'locked' (Oceanic accounts are considered US) to using this device?

The reason I ask is because I could get it shipped to an APO, AE address and then shipped by my brother in law to NZ. I know it would break various export regulations but I don't really -care- about those so to say. I'm tempted to try and see what happens anyway, and I'm sure Binky would want one.

kidgamer · 09/16/08, 5:37 PM

Authenticators are back in stock (for now).

US Only:
Blizzard Store

Wyatt Riot · 09/17/08, 12:30 AM

Originally Posted by kidgamer

Authenticators are back in stock (for now).

US Only:
Blizzard Store

They're sold out again, at least for US users. In stock for Canada, Australia, New Zealand and Latin America users here.

Wolflord · 09/17/08, 1:11 AM

For what its worth the shipping to australia is nearly $80, so beware.

GSH · 09/17/08, 2:19 AM

Originally Posted by Wolflord

For what its worth the shipping to australia is nearly $80, so beware.

Yeah, those International Shipping Costs are crazy. Over $50 to ship to Canada.

julored · 09/17/08, 9:40 PM

Originally Posted by Wyatt Riot

They're sold out again, at least for US users. In stock for Canada, Australia, New Zealand and Latin America users here.

Look to be back in stock (there's even an announcement on worldofwarcraft.com)

Oscarvil · 09/17/08, 10:13 PM

$80 is ridiculous. Does anyone have an idea why it's so much? The website is not very helpful, though they do say it could take 4-6 weeks for delivery, so they're not sending it super-special-deluxe air freight to make sure it's not stolen in transit (being a high-technology security device). Seems like they could be getting a better deal from their shipping company /-:

xiaoxin21 · 09/17/08, 11:28 PM

Originally Posted by Oscarvil

$80 is ridiculous. Seems like they could be getting a better deal from their shipping company /-:

For Oscarvil and any Aussie who might be interested in getting the authenticator, I would suggest that you bulk order and use a courier service like https://www.vpostasia.com/australia/index.html which charge like AUD$40(since it charges a minimum weight of 0.5kg), not cheap but cheaper than $80. Price USA | Shop where you want is another choice

It provides a US mailing address which the item is sent to and it forward the item to Australia.

Desta · 09/18/08, 6:20 AM

Yea, the shipping does seem a bit high.
Just tried to buy one, cost is 6 euros, shipping came to another 16 euros.

This is for Romania.

I'll be fine without one for another while.

Tinwhisker · 09/19/08, 10:55 AM

I'm not sure, but the high price may be partly due to the fact that you're importing/exporting an encryption key device out of the US which up until a few years ago was actually illegal. Blizzard probably has to pay fees to officially export the device. (Shipping costs to Canada are similar to those in Australia.)

Knaughy · 09/19/08, 7:13 PM

Originally Posted by Tinwhisker

I'm not sure, but the high price may be partly due to the fact that you're importing/exporting an encryption key device out of the US which up until a few years ago was actually illegal. Blizzard probably has to pay fees to officially export the device. (Shipping costs to Canada are similar to those in Australia.)

Not correct - I work for Vasco there's no substantial import/export duty or control on the tokens. They use non-controlled algorithms.

The problem is that Blizzard's logistics company is using "International overnight courier" rather than say... sticking it in an airmail envelope. $77 is actually cheap for a courier, US -> Australia... of course, the solution is "Don't ship it via a courier!"

Shipping to Australia via overnight courier: $77.81
Via US Postal service? $1.20 (airmail) Or $11.95 for "Airmail Express"

The token is perfectly capable of being mailed - many of our banking customers stick them in an envelope and whack a stamp on it. Enormously cheaper than a courier.

I'd happily wait a week for it to be airmailed and save $76.61

Also worth nothing that Amazon charge $5 to ship books to Australia

Soralin · 09/26/08, 12:37 AM

I would imagine the reason they are using couriers is because these are security devices, and simply popping them in the mail could potentially be a security risk?

An RSA Token is fairly different to a book, as far as required mail security goes.

Knaughy · 09/26/08, 3:19 AM

Originally Posted by Soralin

I would imagine the reason they are using couriers is because these are security devices, and simply popping them in the mail could potentially be a security risk?

An RSA Token is fairly different to a book, as far as required mail security goes.

There is no security risk in mailing the token. Even if someone opens the letter, examines the token in great detail, notes serial number, and writes down a few token codes before mailing it on to you.

No security risk.

Most banks use the postal service to deliver them.

No security risk to mailing an RSA OTP token either.