Diablo 3 bug report: "Passwords not case-sensitive."

#1

Post by ryanf » Fri, May 25, 2012, 6:05 AM UTC

Diablo 3 bug report: "Passwords not case-sensitive."
us.battle.net

Re: Diablo 3 bug report: "Passwords not case-sensitive."

#2

Post by gte910h » Fri, May 25, 2012, 6:19 AM UTC

Use a passphrase then if this bothers you?

If you want to be serious about security of your account, use one of the two factor authentication systems available that they offer.

The faster passwords stop looking like: C@tV0m!t

And start looking like: correct battery horse staple

the better for security and actually remembering the phrase rather than writing it down.

(XKCD on this: http://xkcd.com/936/)

Re: Diablo 3 bug report: "Passwords not case-sensitive."

#3

Post by karlshea » Fri, May 25, 2012, 6:27 AM UTC

Facebook does sort of the same thing:

http://www.zdnet.com/blog/facebook/facebook-passwords-are-no...

Yes, it's possibly less secure. But for both Facebook and all of the Blizzard games there are other options if you are concerned.

Re: Diablo 3 bug report: "Passwords not case-sensitive."

#4

Post by chetan51 » Fri, May 25, 2012, 6:28 AM UTC

That seemed like a pretty bad way to handle it by Blizzard, though.

Re: Diablo 3 bug report: "Passwords not case-sensitive."

#5

Post by chetan51 » Fri, May 25, 2012, 6:29 AM UTC

karlshea wrote: post #3

Facebook does sort of the same thing: http://www.zdnet.com/blog/facebook/facebook-passwords-are-no... Yes, it's possibly less secure. But for both Facebook and all of the Blizzard games there are other options if you are concerned.

Makes sense.

Re: Diablo 3 bug report: "Passwords not case-sensitive."

#6

Post by karlshea » Fri, May 25, 2012, 6:33 AM UTC

chetan51 wrote: post #4

That seemed like a pretty bad way to handle it by Blizzard, though.

I agree, the mods on that forum seem like they forgot where their last straw went.

Re: Diablo 3 bug report: "Passwords not case-sensitive."

#7

Post by tylermenezes » Fri, May 25, 2012, 6:34 AM UTC

karlshea wrote: post #3

Facebook does sort of the same thing: http://www.zdnet.com/blog/facebook/facebook-passwords-are-no... Yes, it's possibly less secure. But for both Facebook and all of the Blizzard games there are other options if you are concerned.

Facebook's is a little better - you can't disregard case entirely. Blizzard just cut the search space by a lot.

Then again, it would be pretty difficult to brute force a password in Battle.net, to be honest. I'm assuming they'd lock out the account after just a handful of tries.

Re: Diablo 3 bug report: "Passwords not case-sensitive."

#8

Post by icebraining » Fri, May 25, 2012, 6:35 AM UTC

gte910h wrote: post #2

Use a passphrase then if this bothers you? If you want to be serious about security of your account, use one of the two factor authentication systems available that they offer. The faster passwords stop looking like: C@tV0m!t And start looking like: correct battery horse staple the better for security and actually remembering the phrase rather than writing it down. (XKCD on this: http://xkcd.com/936/ )

Well, in the same forum there's also this: http://us.battle.net/d3/en/forum/topic/5149150816

    I don't understand why there is a 16 character limit on user passwords.

Re: Diablo 3 bug report: "Passwords not case-sensitive."

#9

Post by Bud » Fri, May 25, 2012, 6:35 AM UTC

Although this is a really silly bug, I did already know about it (it's the same in WoW), so frankly at the moment, I'm more concerned about the Diablo 3 bug which is causing a lot of us to not be able to successfully login and play, at all.

Really not good.

Re: Diablo 3 bug report: "Passwords not case-sensitive."

#10

Post by tylermenezes » Fri, May 25, 2012, 6:36 AM UTC

They don't (or didn't, I haven't checked in the last few months) allow special characters, either. Seriously - what? (Then again, my bank does the same thing.)