Diablo 3 account hackers and blaming the victim

In college I had a roommate who made poor life decisions as a matter of course. I’ll call him Vandal. A Spaniard by heritage, Vandal paid significantly less tuition than his fellow US-born, Euro-descent compatriots, having gotten away with checking the Hispanic minority box on his entrance application.

Vandal’s personal hygiene recalls that of a chimpanzee held in captive isolation at an Uzbek zoo. Stepping into his room was like stepping into a landfill, and the piles of soiled clothes, reams of paper rubbish, and heaps of empty food cartons would engulf you to the knee. I once found in his room a sock that had been reworn without being washed so many times that when I picked it up with a pair of tweezers, the fabric remained rigid, molded as if with papier-mache to the specifications of his foot.

The landfill analogy works on an olfactory level as well.

Vandal had pet geckos that he fed store-bought maggots. The maggots were supposed to be stored in his personal refrigerator, alongside his soda and Red Bull, but they were routinely left out on his desk, forgotten under mounds of shifting refuse, where they would fester. Vandal once used conditioner for three solid months, all the while thinking it was shampoo.

Personal responsibility and accountability weren’t so much a thing for Vandal, either. In Columbus, we lived at E. 12th and High, better known as the epicenter of Ohio State’s student slum, riot residential, crack-den central, where the city’s inveterate poor abutted campus’ itinerant indigent. I witnessed exactly four vehicular immolations in my time at 12th and High, all the product of drunken revelry following some Ohio State-Michigan game or other. I was once woken by a helicopter spotlight, the beam like balefire vaporizing 2 a.m. as it caught my window en route to a 30-boy melee below.

In this environment, Vandal couldn’t quite grasp the gravity of locking our front door, until, of course, we were robbed. The deed was done overnight, as we slept. I lost an Xbox and PS2, my roommate a TV. Vandal his backpack, sans books, presumably to schlep my consoles. Our fourth thought she was spared until, “Hey, has anyone seen my car keys?” Being broke saved her ass on that one, as the thief made it only 20 miles out of the city before the gas gave out.

I distinctly recall the aftermath of that incident, all of Vandal’s finger-pointing. “You didn’t check the door before going to bed.” “You left everything out in the open.” “You knew the risk of living here.” “You knew I couldn’t be trusted.”

I received a handful of emails from Blizzard Entertainment over the past couple of days. Here they are, reprinted as pertinent in the interest of getting to the point:

from: Blizzard Entertainment noreply@blizzard.com
to: me
date: Sat, Jul 14, 2012 at 6:28 PM
Greetings,
Account Name: XXX@gmail.com
A user of the above account has recently been involved in actions deemed inappropriate for Diablo III.
Account Action: 1 Hour Suspension of Chat Privileges
Offense: Spamming
This category includes:
* Excessively communicating the same phrase, similar phrases, or pure gibberish.
* Saying the same phrase more than once in a period of 30 seconds.
Based on a review of the information presented, this Diablo III account has had its chat privileges suspended. While the account has been placed under review, you will be unable to speak to other players using any chat systems in Diablo III. Should spamming behaviour continue we may proceed to apply further penalties, including extended suspension of chat privileges, account suspension, or account closure. Once an account has been closed, any heroes, items, or auctions will be irretrievable.

from: Blizzard Entertainment noreply@blizzard.com
to: me
Sun, Jul 15, 2012 at 3:44 AM
Greetings,
Account Name: XXX@gmail.com
A user of the above account has recently been involved in actions deemed inappropriate for Diablo III.
Account Action: 1 Hour Suspension of Chat Privileges
Offense: Spamming

from: Blizzard Entertainment noreply@blizzard.com
to: me
Sun, Jul 15, 2012 at 6:59 AM
Greetings,
Account Name: XXX@gmail.com
A user of the above account has recently been involved in actions deemed inappropriate for Diablo III.
Account Action: 6 Hour Suspension of Chat Privileges
Offense: Spamming

from: Blizzard Entertainment noreply@blizzard.com
to: me
Sun, Jul 15, 2012 at 7:55 AM
Due to suspicious activity, the Battle.net account XXX@gmail.com has been locked. To restore access to this account, please follow these steps:
Step 1: Secure Your Computer
In the event that your computer has been infected with malicious software such as a keylogger or trojan, simply changing your password may not deter future attacks without first ensuring that your computer is free from these programs. Please visit our Account Security website to learn how to secure your computer from unauthorized access.
Step 2: Secure Your E-mail Account
After you have secured your computer, please create a new password for your e-mail account since it may also be compromised. Be sure to check your e-mail filters and rules and look for any e-mail forwarding rules that you did not create. For more information on securing your e-mail account, visit this Support page.
Step 3: Choose a New Password
You must change your password in order to resume using this Battle.net account. Please click this link to choose a new password: https://us.battle.net/account/support/password-reset.html
*Note that your former password no longer grants access to Battle.net account management, World of Warcraft, or any other login-protected Battle.net account service.
If you still have questions or concerns after following the steps above, feel free to contact Customer Support at http://us.blizzard.com/support/article.xml?locale=en_US&articleId=20606.
Sincerely,
The Battle.net Account Team
Online Privacy Policy

So, a few things here. I haven’t touched Diablo 3 in over a month. I actually don’t even have it installed on my computer, having never brought it over to my new machine. Also of import: Thanks to a delightful bit of formative psychological damage when it comes to trust, no one save my wife has been made privy to my passwords.

All of this being the case, I’m not entirely sure what to make of this statement, from a Blizzard community manager, made in May:

Despite the claims and theories being made, we have yet to find any situations in which a person’s account was not compromised through traditional means of someone else logging into their account through the use of their password.

Is Blizzard suggesting that, perhaps as a means to supplement our income due to my unemployed state, my wife has taken to unauthorized Diablo III item selling and/or general chat-channel griefing? Or perhaps they are suggesting that, in some hypnotic or somnambulant state, I posted my login details to 4chan? Or perhaps it’s simpler than that. Perhaps Blizzard is suggesting I’m careless and gullible, and have simply been taken by someone claiming to be my buddy. And, by extension, that I just lied to you all about having never given anyone, other than my wife, access to my login information. Is that it, Blizzard? Am I liar?

Judging by the automated emails I’ve received from Blizzard, those emails above, that’s the vibe I’m getting. Thus far, Blizzard has done nothing but mete out punishment to me, first suspending my ability to communicate with others and then revoking my access to Diablo 3, as well as Starcraft 2. Incidentally, I paid well over $100 for those two products.

I’m also curious about what in our extensive history together would lead Blizzard to believe, after “a review of the information presented,” that I had suddenly up and turned into some kind of disruptive spammer. What were the words that came out of my mouth? How much thought went into investigating whether these were indeed my words? If the decision was made after only a cursory glance, why and why present it otherwise? Is this situation too pervasive to thoroughly investigate each case, or should we take this Blizzard community manager at face value when he (or she) says, “The number of Diablo III players who’ve contacted customer service to report a potential compromise of their personal account has been extremely small.” (Emphasis in original.)

And just to be clear here: I didn’t volunteer my login information to Blizzard; Blizzard ransomed it out of me. Blizzard issued me an ultimatum: Give us sensitive information, or else no game for you.

The whole ordeal has me flashing back to Vandal, his irresponsibility, his failure to protect what I had entrusted to him, and his blaming of me when a thief sauntered through our front door and walked off with my stuff.

So I guess, like then, Blizzard’s security breach is my fault. I guess since I didn’t pay $6.50 for the Battle.net Authenticator or download the Mobile Authenticator app, this is my fault. And ultimately, I guess in the future, I should exercise better judgment when it comes to whom I entrust sensitive information to, and do a more thorough analysis of whether what I pay for is worth what it may end up costing me.

Gaze into the Brand Eye of Sauron

Think of it, perhaps, this way. You have a mind to swipe a batch of kittens and train them to be apostles for Ramtha’s School of Enlightenment. Now, these kittens are highly skilled at being cute. Indeed, they’ve been being cute for years, and largely that experience is wholly applicable to your transcendental aspirations. However, for these kittens to be truly accomplished apostles, they need to focus that cuteness, in a directed way, with an audience in mind, and a targetable result. If you’re going to do this foul thing to a kitten, you must at least have the decency to give them proper direction.

See, with training kittens, you need to think of their cuteness in terms of maximizing manipulation and mind control, two hallmarks of Ramtha’s School of Enlightenment. You need to think about who’s going to be most—and, importantly, least—susceptible to their cuteness. More, you really need to get a handle on the nature of the cuteness that will be most useful for your quasi-diabolical ends. Is it sassy cute? Playful cute? Lazy cute? Each has its merits, but not all complement the other.

Look, I could probably pursue this kitten analogy for the next 200 years, but I’m going to go ahead and rein it in. The last thing I’ll say about kittens: Without a clear, coherent brand, those kittens would simply, without purpose or direction, be cute, and that would deprive untold individuals the powers of psychokinesis, telepathy, and clairvoyance, among others. The kittens need focus, and the brand is what imparts it to them.

Imagine what this kitten army could accomplish.

Up until recently, my only exposure to branding has been the balls-out idiotic kind. I’ll illustrate my experience with an utterly and entirely invented scenario, where any resemblance to actual people, places, or things is entirely coincidental.

Every nine months or so, Dumb Cump management convenes a quarterly All-Hands meeting, in which about half the available hands file into a conference room. Largely, these meetings take on the aspect of a high school pep rally, where a very small number of individuals enthusiastically pound their chests while the disenfranchised remainder mentally vacate.

The vast majority of the time, these meetings are used to explain why the business isn’t in as bad of shape as direct evidence to the contrary seems to indicate. However, perhaps every other quarterly All-Hands—so, every 18 months or so—those who on a day-to-day basis create content for the business are given a PowerPoint presentation on branding.

(As ab-yx is a gaming website, I’ll orient this wholly fictional situation in the realm of gaming.)

A central component of this presentation is the ceremonial opening of the Brand Eye, a bloodshot ocular that serves as a targeting reticule for all content created at the company. At the center of the Brand Eye is typically a pithy phrase that encapsulates the business, something to the effect of “Jet-fueling up teh games.”

And then in concentric ovals around the Brand Eye, more pithy phrases appear, indicating that the aforementioned content creators should be tailoring their work toward “people who play games.” The eye urges them to be enthusiastic and entertaining. The eye would be grateful if they could be both provocative, but then again respectful. The eye has no opinion on oxford commas, but thinks hardcore, casual, mobile, social, online, offline, PC, console, handheld, free-to-play, enthusiast, consumer, influencer, super influencer, champion, grand marshal, and tween audiences all deserve some attention. The eye sees a future in pro gaming.

The PowerPoint reaches its final slide, which shows a grandmother playing Wii with her sweater vest-wearing son, as well as his mohawk-coiffed daughter. A gorilla queries: “Questions? Questions, anyone?”

“Yeah, so just real quick. What the fuck?”

“I know, pretty awesome, right? Anyone else? No one? Great, we’ll see you in three months.”

Contempt sets in, and the content creators return to their desks to get back to doing what they’ve been doing. Likewise, the gorillas return to their desks, high on the notion that the work they have done has cleared up, in their own minds if nothing else, any and all confusion as to where Dump Cump is headed. The Brand Eye alone stares out from its digital wasteland, blinks once, sheds an inky tear, and then blessedly shuts for good.

I’m here to tell you today that creating a Brand Eye document is wholly recommendable, not because it makes for excellent PowerPoint viewing, but because the thought process will illuminate just how it is you’re going to train kittens to do your bidding. Or something like that.

ab-yx needed focus. I knew that I wanted to play games with developers, make a DIY mod show, and create sophisticated developer profiles, but I realized that launching and then figuring it all out on the fly would lead to a good deal of incoherence and train-wreckedness. And thus, the branding exercise.

The genius of creating a brand is that it helps you figure out exactly who you are, and who you are not; who your audience is, and who your audience is not. It’s about addressing your product’s existential crisis and establishing an ideal. How do people who are supposedly good at this kind of thing do it? No idea. However, as this website is a very personal project, my process drew heavily from my own values. It also involved writing down directional statements—trying out how they felt, as it were—and then either keeping or rejecting them.

We have reached a point in today’s ramblings where a full monty is warranted. Here is the raw thought process, from brain to pen, that led me to creating ab-yx’s mostly final Brand Eye. Bear in mind that what follows is the gooey, unrefined, unedited, unchallenged, inaccurate, self-delusional, stream-of-consciousness bits that served as a first step on the road to somewhere useful. My hope is that seeing my process will help kickstart your own process.

Alright, here we go.

What is it I’m trying to do here? Separate myself from the crowd by not shying away from being intelligent and clever. Constructive is a good word as well. I want to be a thoughtful outsider offering informed feedback on the industry. I want to be read by the development community. Elevate the gaming conversation. Elevate and entertain. I want to break down the wall separating developers from their audiences. I want to serve as a conduit by which creators connect with their audiences.

These guys are creators. They want to revel in their craft. They want to talk about themselves and take pride in their work. All creators are vain in this way. They want to know how well their audiences are getting them. They want to impress people with their work. They want to share their secrets, and they want a safe place to do so. They want to take the credit. They want to be recognized. However, they also want to get better at their jobs. They want to defend their views, and be experts at their craft. Also, they want to sell their games. Recognize gaming greatness.

And for gamers, they want their voices to be heard. They want to work out how they feel about a game. They want to bounce their ideas off of others. I mean, what would I be looking for in a gaming site? Quality writing. Perspective. An accurate portrayal of the conversations developers are having among themselves. I want to know what the issues are that game designers are dealing with everyday. I want to know what’s happening in the trenches. I want people to talk about my work, and weigh the decisions I’m making with me. It’s about being on the cutting edge, and having my voice heard as we shape the future of what this medium becomes. I want to tell the stories behind games. Digging in with developers.

Target Readers: Game developers. I want them reading me to find out what everyone else is doing. Is this core or is this fringe? Somewhere in between? Going indie may limit me on the podcast front, due to the relative dearth of multiplayer. However, it seems like I’d have better access. Mid-size to small studios may offer more access and tend to have more engaged audiences. Is it OK to ignore Call of Duty? It’s leaving a lot of attention on the table. A lot of casual gamers. But really, are these the audiences I want anyway? It seems to me as if these audiences are being overserved.

Brand Personality: constructive, entertaining, insightful, thoughtful, snarky, mature, in touch, intermediary, illuminating, safe, interesting, candid, genuine, analytical, humorous

I want people to come to the site and find out what they should play next. I want them to feel safe geeking out. I want to remove the profit motive so people can speak freely. Make it possible to provide a warts-and-all perspective.

Makes You Feel: Included in something bigger. Illuminated by new perspectives and ideas. In touch with the real situation. Entertained. Safe, supported, and motivated to try it yourself. Challenged to think.

What You Perceive and Benefits To You: Passionate about delivering only the highest quality product. Tenacious pursuit of quality. I’m part of something subversive. I’m getting something deeper and more valuable. I can be playful here. I can share my ideas and I’ll get help making whatever it is I’m working on better. I don’t have to know everything. I feel included. Tom’s kind of a crazy person…but he’s on my side so it’s OK. The people here are like me. This site knows how to put on a good show. My time isn’t being wasted. I’m in good company. The things I learn here are valuable and worthwhile, either because it’s informative or entertaining. I expect ambitious results. I’m inspired. I’m getting the real story. Access is not being squandered. I’m going to have more perspective than I did yesterday. I already know the what; now I want the why.

Says About You: I’m smart. I’m open-minded. I’m intellectually curious. I have more than a passing interest in games. I’m passionate about interesting, innovative, and good games. I want to see how the magician does his tricks. I have something to say that’s worth saying. I want things to be better, and I want to talk about ways to get there. I want to be in the trenches. I want a good-natured, earnest look at the real situation. I have no interest in sensationalism. I don’t like being manipulated, and I don’t want anyone trying. I already know what’s going on, but I want to go deeper. I’m in touch and don’t want to be bothered with the obvious. I can still be suprrised and delighted.

And now, in living color, ab-yx’s Brand Eye, which has undergone additional refinement and clarification.

abyx_brandeye

Up Next: Stick to the plan! Stick to the plan!

Quick, someone find me a For Dummies guide!

3/21, 3:46p
Preliminary plan: You and I playing online game, with podcast style commentary

3/21, 3:47p
All gameplay footage, us voiceover

3/21, 3:48p
Can possibly work contacts to get industry people to join us

3/21, 3:54p
Scratch that, definitely find devs to join us

3/21, 3:55p
Start indie, build from there

3/21, 4:03p
This is happening

3/22, 10:26a
Derp?

The thing about a muse is that they really just do not give a fuck. I’d liken them to a taxi driver with dementia. If you’re outside on the corner, bags packed, ready to go, the muse will give you a lift and get you on the road. But if you’re dallying inside, double checking whether you packed an extra pair of socks, the cab will pull up, the driver will get out, open your door, lean against the car for a minute or two, promptly forget who and where he is and what he’s doing, hop back into the cab, and speed off on his merry way. Or her.

What I’m saying is, always carry a means to record your thoughts, because one day you, like me, may find yourself at the Berkeley downtown Y, working at a Smith press, in a nadir of both squat and spirit, when your addled old muse rolls up and says, “Yo.” Saying “Piss off, I’ve just got two more sets” to your muse is not an option. Saying “Convalescence, you jerk! Convalescence!” to your muse is not an option. Saying anything other than, “Do need pen, holy jesus, must to get out with the thoughts” to your muse is not an option.

Hence, the above text messages, which were sent to an unresponsive friend I’ll call Scooter.

Here’s one problem: As most people are aware, or can at least imagine, getting laid off is pretty much entirely bullshit. D-Day for me hit around 10:15 in the morning on that Monday, and so the wound still felt rather fresh. Truth be told, getting pushed out at GameSpot, I’d liken it to a wild goose winging me in the junk as I strolled down 2nd Street. I was that surprised. Jarring and emotional. Devastating, really, and I’d promised myself and others that it wouldn’t kill me to just hang around my house without pants on for the rest of April.

Also, I went to Mexico. There, I drank a lot, read Jonathan Franzen’s Freedom, largely without a shirt on, and I drank a lot. My brother-in-law (whom you’ll hear more about in Act II) brought his chess board, and reacquainting myself with that game served as a welcome distraction.

Quick tangent into the realm of chess. To be clear, I’m a terrible chess player, and that’s been the truth ever since I learned the game from my brother when I was 10. Staying out of mate? Easy. Mating an opponent? Not so much. Actually, you know what? Fuck quick tangents, let’s do this. I’m going to talk about chess here for an extended period of time.

I’m sitting on a canvas bed with my brother-in-law on a crowded beach in Mexico, topless, plastic travel chess board dividing us as only a man and another man who’s having regular sex with the first man’s sister can be divided. Which is to say, it’s sitting right there between us, and I’m thinking about how there’s this element of never giving ground in chess. And also of trying to steal the advantage.

Say your rook is threatened. You can flee, or you can trump the threat. You raise the stakes so that it becomes less attractive to attack, ideally forcing the other player to react defensively. And if they, like a blind, blundering fool, order a cavalry charge consequences be damned, you position yourself to gain more than you lose. You fall back on that old journalism maxim: Cover Your Ass. And you CYA by always making sure your frontline pieces are protected, that they have back up. A knight guards a bishop’s ass, a rook stands ready and willing to save the queen. What else? Push forward and establish board dominance by having as many pieces in play as possible. You bring the fight to the opponent, so as to make them accommodate you.

What’s interesting is what you do when you’re down, when you’ve got a queen and a rook all up in your business, preventing you from making an aggressive play on the opponent’s king. Two strategies spring to mind: strategic retreat and what I’ll call dynamic flux.

First, strategic retreat, or the idea of backing off your attack to put out the fires in your own backyard. It’s the idea of ignoring the king to put a hit out on the queen, or neutralizing the threat in advance of launching a counter. It’s a tough strategy that only seems applicable when you’re up against an opponent with measurably finite resources. Or, have a lot to lose.

To dynamic flux. The strategy as I see it is essentially where you shift the playfield to undermine the efforts of your opponent and force a change. (This Malcolm Gladwell article informs this idea.) The action has to be substantive, and you have to commit to it completely. It’s essentially a high-risk desperation move that involves making a sacrifice that your opponent believes you’d be unwilling to make, letting go of something with significant perceived value. What is a sacrifice my opponent believes I’m unwilling to make? Traffic, and by extension money. We quit talking about chess awhile ago, by the way.

A day after I get back from Mexico, I head to the Philz on Shattuck and order a Philtered Soul, fixated on the idea of how David takes out Goliath. There’s a common area above the coffee stations that is at all hours of the day inundated with Mac users, granola-crunching hippies, Cal kids of all genetic makeups, and your occasional unemployed purpose-seeker. One thing I’ll say about Phil: The man’s got a deviant’s fascination with the letter “Z,” but a glorious penchant for puns and brews a mean cup of coffee to boot. Do yourself a favor the next time you’re in the Bay Area and drop $3.50 on a cup of coffee at Philz.

Here’s three hours of navel gazing, sampled liberally from my journal: I want to be working on creating something meaningful and beautiful. I don’t want to be working solely for money. I want to be constructive. I don’t want to chase an audience. I want to entertain others. I want to make others’ lives better. I want to create a safe place where people can share ideas in a constructive, candid, non-judgmental way.

And from here: I want to tell good stories, and I have a number of means available to me. Text, video, games. The interesting thing about games is, conceivably, I could record me playing the game that I’ve created, and then post that video online.

Bring me home, Mr. Frog!: An artistic work is defined by the creator’s circumstances. I want to know these circumstances so that I can more fully understand and enjoy the artistic work. I want to know the people who make the games. And I want to write about them in a way that satisfies the intelligent and the curious.

So what have we got? A developer-centric podcast, a mod show, and comprehensive developer profiles. In the medical field, that’s what they’d call an ossature. Now it’s time to put some meat on those bones.

Up Next: Gaze into the Brand Eye of Sauron.