UnoriginalGuy

- friends
375 link karma
54,855 comment karma
send messageredditor for
what's this?

TROPHY CASE


  • Two-Year Club

    Verified Email

Huge security flaw? by professorcin Diablo

[–]UnoriginalGuy 0 points1 point ago

okay, that is assuming that they already have access to your computer via whatever method (keylogging).

A fairly good assumption as we are talking about someone "hacking" into your account via your username and password, which they had to get somehow.

Not as fast as Azmodan was but it's leveling me by 3213211in Diablo

[–]UnoriginalGuy 1 point2 points ago

I cannot tell if that is even that fast, with all of the unload and reloading you're doing. Your bar barely moves at all.

Blizzard is literally refusing to take customer's money by lordnikkonin Diablo

[–]UnoriginalGuy 1 point2 points ago

This happened to me.

The order form also has a massive bug in it; if you change your country it resets your payment type, and if you change your payment type it resets your country.

So for example let's say you have a Visa card, you select that, type in the info, and then select your country as Canada, the page reloads and now your payment type is "American Express."

If you go ahead and change it from American Express back to Visa it will reset your country from Canada back to the USA.

I e-mailed Bliz' about this giving them a detailed description and reproduction steps but got a generic "please telephone our billing line for help with orders" response and I just gave up.

I used my browser's developer toolbar to order.

Huge security flaw? by professorcin Diablo

[–]UnoriginalGuy 0 points1 point ago

What would the net effective be if they made it harder to change your password:

  • It would protect your characters: No.
  • It would protect your gold: No.
  • It would protect your items: No.
  • Would it protect your account information: No.
  • Would it force a user on an infected computer to enter their security question? Yes.
  • So the net result: Just give the "hackers" more information for which to take ownership of your account. Or worse: information needed to re-break-in after you secure your account.

Blizzard should add an "auto-pause mode". Whenever someone alt-tabs, Diablo 3 automatically pauses. by Atmozfearsin Diablo

[–]UnoriginalGuy -1 points0 points ago

Diablo 3 cannot be paused at all, ever. It is by design.

I need gold fast, where should I farm? by Teebuin Diablo

[–]UnoriginalGuy 0 points1 point ago

The Act1/Cathedral in the hardest difficulty you have unlocked.

Am I the Unluckiest Soul Ever? Anyone unlucky as me? by zeldaahn2in Diablo

[–]UnoriginalGuy 1 point2 points ago

Saying "gay" doesn't mean homophobia, it's a fad.

Just as saying the N' word isn't racist - right?

By saying the word with negative connotations you're implying that you see being "gay" as a negative.

I really fail to see how there is any way to say the word "gay" to mean "bad" or "shitty" without it being homophobic to be honest.

So I got hacked......i think by herpaderp110in Diablo

[–]UnoriginalGuy 0 points1 point ago

Fair enough. What flags did PSI throw up?

PLEASE HELP! MY ACCOUNT IS LOCKED AND I CAN'T UNLOCK IT!!!! by fugor1103in Diablo

[–]UnoriginalGuy 1 point2 points ago

Use Skype to call the number.

Am I the Unluckiest Soul Ever? Anyone unlucky as me? by zeldaahn2in Diablo

[–]UnoriginalGuy -1 points0 points ago

Damn RNG is so gay

Wow, calling stuff "gay" - it is like 1993 all over again. Glad to see homophobia in gaming is alive and well.

So I got hacked......i think by herpaderp110in Diablo

[–]UnoriginalGuy 0 points1 point ago

You went to a web-site where an advert launched malware abusing some exploit within a browser addon like Flash, Adobe Reader, Quicktime, or Java.

Alternatively your web-browser is out of date, you're still using Windows XP, you ran something nasty, or someone else using your computer did.

I suggest running this: http://secunia.com/products/consumer/psi/

It will flag any out-of-date/end-of-life software on your machine.

Witch doctor skills. Weshould compose a list and properly address to blizzard. Proper feedback helps them more then just saying it sucks. by Gibsonexin Diablo

[–]UnoriginalGuy -4 points-3 points ago

I tried the whole "constructive criticism" thing with Blizzard in WoW and it literally took them two expansions (read: approx 3.5 years) to fix them.

These weren't picky things either, they were glaring flaws, contradictions, or blatant double standards.

So I guess my point is: don't hold your breath. Even when Blizzard does listen as in the above case it can literally take years and years to see a single suggestion hit production.

Blizzard are very quick to nerf, but incredibly slow to alter how something is designed to work for fear of "undoing" all of their previous efforts/nerfs.

Solid colour wallpaper causes massive delays on Windows 7 by abbreviain sysadmin

[–]UnoriginalGuy 13 points14 points ago

How boring - no technical explanation for what causes it.

What a surprise: No Session ID Hacking after all by sandmacin Diablo

[–]UnoriginalGuy 1 point2 points ago

That wasn't my point. My point was that D3 uses TCP/IP in a standard way, therefore almost certainly isn't using sessions like a HTTP connection would.

UDP based messaging protocols often use sessions since much like HTTP it is stateless. TCP/IP is stateful most of the time, HTTP is the exception - not the rule.

What a surprise: No Session ID Hacking after all by sandmacin Diablo

[–]UnoriginalGuy 0 points1 point ago

Somewhat, but the real hackers have seen Hackers 2: Operation Takedown (also called "Takedown").

Hacked! What can I do now to secure my PC, and stop this from happening again? by LameSaladin Diablo

[–]UnoriginalGuy 0 points1 point ago

Yes. Both in the configuration UI and also on the address bar when you visit a page with "blocked" content. It works in practice almost exactly like the popup blocker except you can click to enable individual elements on the page.

What a surprise: No Session ID Hacking after all by sandmacin Diablo

[–]UnoriginalGuy 2 points3 points ago

I said IF D3 used sessions

.

I was never at all saying or implying this was possible in D3

.

likely is handled through a frontend session proxy that hands requests off to whatever backend servers

Well you wrapped up this discussion nicely. Nothing in your post has anything to do with the topic at hand, therefore your post has no purpose.

Hacked! What can I do now to secure my PC, and stop this from happening again? by LameSaladin Diablo

[–]UnoriginalGuy 0 points1 point ago

I've never seen a browser with click to play before. Most browsers have "ask me" which isn't really similar at all.

Might I suggest you try Chrome's implementation. I think you will be pleasantly surprised by how user friendly it is.

What a surprise: No Session ID Hacking after all by sandmacin Diablo

[–]UnoriginalGuy 11 points12 points ago

Session hijacking is totally possible if the server side doesn't have the proper locks on the session.

Wrong. It is impossible. Diablo 3 does NOT use sessions; it uses the TCP/IP stack to "secure" the communication between peer to peer.

Pretty often in web stuff

HTTP has nothing to do with this. HTTP is a stateless protocol that uses sessions to simulate state. TCP/IP connections that persist are stateful.

I mean this as respectfully as I can, but you aren't qualified to have an opinion on this topic.

Hacked! What can I do now to secure my PC, and stop this from happening again? by LameSaladin Diablo

[–]UnoriginalGuy 0 points1 point ago

If you're using Chrome "no-script" is almost built into the browser its self:

  • Tools -> Settings -> (Show Advanced Settings)
  • Content Settings
  • Plug-Ins -> Click to Play

Now I know this doesn't provide every feature the Firefox No-Script addon has, but a large number of people use No Script to exclusively block Plug-Ins from launching without permission.

Setting this is very effective since it blocks Flash, Java, and even the built in PDF reader. It is also extremely user friendly allowing you to one click active them, or to allow them site wide forever.

[S] How to powerlevel to 60 in about 4 hours by lediablo3throwawayin Diablo

[–]UnoriginalGuy 29 points30 points ago

That's actually a legitimate exploit. I think Bliz' will fix this but likely not quickly as they care far more about item "inflation" and less about character levelling (since getting characters to 60 is a foregone conclusion anyway, just a matter of time).

Since every time someone finds an item dup or chest bug it hurts their real-money AH. Buffing characters to level 60 does no such thing - in fact if anything having more level 60s without any gear only helps take items out of the market and therefore increase their price.

I think Blizzard will stop this the second companies start selling level 60 accounts created using this method for real money.

Why can't I lock my skill bar? by DGMavnin Diablo

[–]UnoriginalGuy 0 points1 point ago

As the other post says turn off elective mode.

But also - why are you clicking your skills bar to begin with? It is just the keys 1-4+Q, and the mouse buttons.

What a surprise: No Session ID Hacking after all by sandmacin Diablo

[–]UnoriginalGuy 52 points53 points ago

It has been quite amazing watching technically illiterate people commenting on security and inventing fictional "rumours" which even more technically illiterate people believe. Some examples:

  • Session hacking (on a TCP/IP connection?)
  • SQL Injection (no context given)
  • Database breach (no evidence/proof)

People seem to use names of real security issues as some kind of shield to hide their ignorance. When I enter a discussion and reply to someone repeating "SQL Injection!!" over and over, all they do is infer that just because they have no proof, that their theory is just as good as my "theory" that they're pulling it out of their butt.

It is like everyone put their common sense on hold for 72 hrs and would have these wild circle-jerk discussions where just talking about the "issue" over and over again made everyone more and more sure there was an "issue" to begin with.

Just for one example, that bug report thread where Blizzard said (paraphrasing) "we are looking into all reports" and everyone read that as "there is an issue and we will fix it."

view more: next