4 ms·
Blizzard has 2 factor; the secrets for the mobile authenticator seem to have been compromised as well as the hashed passwords.
by NelsonMinar 14y ago
Blizzard has 2 factor; the secrets for the mobile authenticator seem to have been compromised as well as the hashed passwords.
- jrockway 14y agoBut secrets for the mobile authenticator are much less sensitive than passwords, which are prone to reuse. It does, however, defeat the security advantage of two-factor authentication. (I always thought the really smart crackers would break in, modify the application code to weaken the password encryption, and then re-encrypt every password when the user logs in. Come back a few weeks later and collect a bunch of working passwords, with nobody the wiser.)