The lack of an authenticator app is surprising, yeah. The CS expenditures will be so very much higher.

Three months in after a shitload of people get hacked and support tickets are in a three-week queue, I’m sure some VP of something will finally okay two weeks of Android/iOS development.

There is an authenticator token. You get one with the collector’s edition. I would think an app isn’t that far behind.

The physical collector’s edition comes with an authenticator, so it seems reasonable to assume that they’ll be available for general purchase, and a smartphone solution will be available at some point as well. Weird that they haven’t announced anything.

Also, not that anyone cares too much I imagine, but I got a working CE pre-order code from Best Buy yesterday. I still wouldn’t order from them, though, because my sense is that they’re still sending out bad ones on initial purchase at least part of the time.

Actually, there’s an oblique reference to “other ways to obtain The Old Republic Security Key” in their latest security cannouncement:

Another way to ensure a secure account is to get the official custom branded Security Authentication Key, available in the Star Wars: The Old Republic Collector’s Edition. The Collector’s Edition is still available in limited quantities at select retailers. Watch for more information on other ways to obtain The Old Republic Security Key soon!

http://www.swtor.com/news/news-article/20111107

Multi-factor authentication saves them money in support costs and makes customers happy. It’s a win/win. SWTOR will certainly offer the keyfobs to everybody. Frankly, I’m surprised they didn’t include them in every box.

It seems like a lot of people use smartphones instead? Sadly my phone is extremely dumb and I may need a keychain.

How is it that WoW accounts are so famously hackable? Malware, password reuse, brute force (surely not?)? I’ve never been clear why a big huge strong password is fine for my bank but MMOs not so much.

Ah, I’d missed that they have keyfob authenticators already set to come out. Weird indeed that they haven’t said anything about a phone app.

They aren’t particularly hackable, they’re just extremely attractive targets. WoW accounts are worth more than creditcard numbers on the open market.

But it seems like everybody and their dog has been hacked at one time or another at this point. Granted password reuse was pretty bad until recently but I’m sure WoW doesn’t allow brute force password attacks - I guess malware is the likeliest culprit?

I’d guess more phishing than malware.

Well if it’s phishing that makes the whole keychain thing seem a bit less urgent. Even when companies I do business with screw up and send legit emails using a phish-esque I use a proper login route.

It’s not exclusive to either one, I’d just guess that phishing yields more accounts than plain old malware (and I could be completely wrong). Malware is definitely a concern as well, and the two can be used in combination (e.g. a phishing e-mail or message that directs you to a website that installs malware).

Yes, it’s both. They even have malware specifically aimed at WoW players using authenticators that makes use of the 1 minute period when you enter your authenticator PIN to change your password and hijack your account.

52m Gameinformer podcast talking about beta impressions.

Also, beta weekend invites are currently going out and my inbox is forever alone.

The actual post was

Post is listed as having been made at 8:37 pm and it’s now after 11pm forum time, so I daresay the “evening” is pretty much over. No joy. People on another thread are saying to check your swtor.com messages as they seem to have arrived more promptly than emails.

They apparently don’t love me either, Jason.

The downside to these authenticates is that it’s a PITA for a legit friend to log you in to get a rare drop or a flag for a mission win in games where these things matter. So I guess I wonder if they matter in TOR. I’m getting the CE so I’ll get the fob by default, but I don’t -have- to sign up to use it, right?

Hope springs eternal.

Looks like Threevil’s up for guild beta testing. We need four people who’ve preordered the game. Clever. Evil, but clever. I’m one. I’d check our status but, predictably, the website is down.