I got to thinking... what does it mean that it's information is saved "server-side"? where is it saved? in some kind of database? whereish? should I be worried about that? :-)
I got to thinking... what does it mean that it's information is saved "server-side"? where is it saved? in some kind of database? whereish? should I be worried about that? :-)
Last edited by sajmoonce; 07-05-2010 at 05:03 AM. Reason: grammar ;D
That's what the 'Create Server-Side Backup' feature is for. If it ever "stops working", you can just recover it so that it works again. It won't ever stop working though, unless you delete Authenticator.xml.
Server-Side as in my database, however the password is md5 encrypted if you're ever worried about getting it stolen, and the only information stored on there is your PC Authenticator Username and Password, the Authenticator serial, token, and time difference. None of your WoW account details are stored or even asked for. In short, you and me will be the only ones to ever know the details stored, and I wouldn't dare invade user's privacy, but it's up to you whether you trust me or not.
Last edited by Jadd; 07-05-2010 at 05:12 AM.
this is really good enough for me ;-)
was just being curious that's all
thanks again!
I've been using this for a day now, used it roughly 5 times and have had absolutely no problem with it, so ergo I also have the Core Hound Pup.
I also did a Network Monitor check on it and didn't see anything out of the ordinary- But I'm going to give it a solid week before I give him a +Rep, etc.
I made a little batch file that opens the authenticator and a txt file with the password so you can easily just copy/paste everything. Here's a little review:
1. Make a shortcut of the PC Authenticator.exe (Or rename?) It bugs with the space in the name. (Let's call it "lol.exe")
2. Make a text file with your password on it (Let's call it pass.txt)
3. Open notepad and make type the scripts below and name it something random.BAT
That was pretty much the simplest of scripting there is.. So if you fail at doing this you should go buy a Mac...Code:start /d "C:\Folder\underfolder\...\" lol.exe start /d "C:\Folder\underfolder\...\" pass.txt
dude i love this thank you so much for the hard work. Works great and i got a free core hound pup out of it
works great thanks!
Well, what happens is, say your password is bobby and the authkey generated will be 123456
He runs the script, the script will open up your auth program and display your auth key 123456
It then will open the .txt file so you can just copy/paste your password which is bobby insted of having to type it in, probably useful if your password is like OMGwt*239879jJHASD or some random jibberish.
This is a lot less secure than the actual authenticator. This would allow anyone to log in at any time if they collected authenticator key when you use it.
Last edited by Phygar; 07-06-2010 at 11:47 AM.
WTB mac Version
---------- Post added at 12:30 PM ---------- Previous post was at 12:28 PM ----------
...and it's all in one nice text file for just about any keylogger to snag. While it's tough to "man in the middle" someone, this approach goes a long way to making it a whole lot easier for them to get you.
After using this a couple of days I just received a 24h ban... Didn't get any E-mails tho so I'm not 100% sure if it was this thingy. But I haven't done anything illegal for like 3 months now so I highly doubt that's the cause...
Just a btw, does Blizzard know about this?
EDIT:
Not true. Most of the keyloggers just scan the keystrokes you do so all they'll get to know is that you clicked Ctrl+C and Ctrl+V....and it's all in one nice text file for just about any keylogger to snag. While it's tough to "man in the middle" someone, this approach goes a long way to making it a whole lot easier for them to get you.
A friend of mine actually copy/paste his password to prevent any keyloggers.
Last edited by aribehn; 07-06-2010 at 01:32 PM.
Woah, you're kidding me!
If you want to do me a big favour and if you recieve an email and it's this that caused your ban, I'll remove the file so no one else can download it. If you don't get an email, could you petition a GM for me from your account when you get it back? I'd really like to know if it was this that caused the ban.
Edit:
While it is possible that they would know about this, I wouldn't think they would mind people using it seeing as it makes their jobs easier. And the Authenticator app for the iPhone is free... Hmm...
Last edited by Jadd; 07-06-2010 at 02:20 PM.
Have any of you guys done a network monitor check like I did?
Download it, run it, exit out of everything except the authenticator and if you understand or have someone that understands it (Like I did), than you'll see as did I that nothing unusual is happening.