And You Thought the Brawlers' Club Was the Seedy Underbelly of MMOs

One day last year, I was goofing off in Ratchet while waiting for the BG queue to pop.  Every so often I get the urge to check out the Steamwheedle Cartel's Auction House and see what items people are trying to sneak across the Faction DMZ.  Most of the time they are pets, but once in a while you see some low-priced raw materials or a nice piece of gear go through the WoW Black Market.

Anyway, I'd been perusing the miscellaneous items for a minute or so when I got a whisper from someone.

"Hey, what are you doing here?"

Whatever.  Since I've been known to drop in on low level zones on my max level toons from time to time, I've grown accustomed to such questions.  Some people seem genuinely perplexed that I'd not be spending all of my time in the Firelands or Icecrown Citadel, I suppose.

"Just loitering around, waiting on a BG."

"k."

After a few moments longer, I closed the AH window.

"Yr not waiting on a delivery, are u?"

I blinked.  "No," I replied.  "I'm good."

"U sure?  I've got some gold here for u."

"Yeah, I'm sure."  I then took a flight path to Org and marked the toon as a gold seller while on the way.

***

About a little over a year ago on Age of Conan, I spent a couple of hours teamed up with a pair of players, a Guardian and another Barbarian, while working our way through Conall's Valley.  There are quite a few stretches of the valley where safety in numbers is essential, and I was grateful for the company.  The conversation was good, and we had fun really sticking it to the Vanir.  Over the next couple of weeks, when I'd login to Age of Conan I'd find one or both of them online, and we'd group up and chat.

Then, for a few weeks there was silence, but that didn't surprise me much since the three of us had families and jobs.  I never saw the Barbarian again, but one Friday I logged in and saw the Guardian and whispered a hello.

I was ignored.

Puzzled, I whispered a hello again, and then I saw it.

The account started spewing Gen Chat with gold farmer spam.

***

What exactly is the amount of money that the gold farming industry makes?

Back in 2006, the BBC estimated that the industry made $900 million, but that was well before WoW's current popularity.  I'm not exactly sure whether you can directly translate the increase in WoW subs from 2006 to 2013 to corresponding increase in gold farming, but it seems reasonable to say that MMO gold farming is at least a billion dollar business.

While that's not iPad dollars, it's still a big chunk of change, in the realm of such non-IT brands as Heinz ketchup.  Think about that the next time when you see gold farmer spam in Gen Chat:  gold farming is big business, and people are willing to skirt the law for it.

But at what cost?

Everybody knows somebody who has had a hacked account.  Sure, you may get your virtual stuff back, but you really never get over the sense of violation.  And the company involved has to spend time and money in getting your stuff restored, never mind attempting to prevent it in the first place.

All of that costs money, and affects a company's bottom line.  Security one of those hidden costs that you never see in a company's balance sheet --the lengths a company goes to protect itself from the Black Hats, and the costs involved in successful hacking attempts, user accounts or otherwise-- but it does exist.

MMOs are a game, but you can't say that they are just a game.  That's like saying that the New York Yankees or Manchester United aren't worth much because they both are organizations that play kids' games.  Good luck trying to say that to a sports fan.

***

I suppose I ought to explain the trigger for this post.

A few weeks ago, a dormant account from a fellow WoW guildie who'd passed away from an illness over a year ago suddenly became active and refused to respond to tells.  An alert guildie informed Blizz, who quickly shut the account back down, but the sheer brazenness about it still sticks in my craw.  The Black Hat had to find out about and hack the account, reactivate it with (most likely) a stolen credit card, probably upgrade the account with the same, and only then could they go on their merry way.

Just a game, right?

Security Breach at Blizzard

Okay, I'm putting on my security hat and telling people to go to battle.net and change their passwords.

Why?

Blizz announced (in a roundabout way, via a blog post by the Blizzard President Mike Morhaime) that they've been the victim of a security intrusion.  Hackers apparently made off with passwords and some info regarding the authenticator programs, and there's the potential that your battle.net account has been compromised.

While the passwords are bad enough, it's the authenticator program breach that is the real problem.  Without two factor authentication to rely upon, your account is vulnerable.  If you use authenticator software to get your ID token, make sure it's updated to the current version.  No word yet on those people who have ID Badges (like the ones that RSA sends out), but if the breach included the algorithms necessary to generate the tokens, I presume that those will have to eventually need to be replaced.  However, at the moment Blizzard is only saying to make sure the authenticator software you use is up to date.

Here's the link to the WoW Insider entry on the issue:  Blizzard security breach, no evidence that financial data was compromised

On the bright side, Blizz is saying that they make sure the passwords are properly encrypted, which does make me feel better.  That gives people time to get their passwords changed before the old ones are cracked.