What makes it really stupid is that they're doing something without first trying to understand what the problem _is_. And unsurprisingly come up with a "solution" that's only annoying, but doesn't actually solve the problem.
There is fraud in WoW, there are keyloggers aimed at stealing WoW passwords, etc. Yes.
But:
1) If a fraudster got your details that way, he's not going to use it to buy you another month of WoW. He'll try to transfer your money somewhere else, buy something with it, etc.
So blocking transfers to Blizzard is blocking the only thing that a fraudster _won't_ do with your account. But allowing everything else. Heh.
2) There is no indication (so far) that any customer details have been lost by _Blizzard_, nor that any fraudulent transaction has been done through Blizzard. Some people just get scammed into giving someone else their details, or into installing a keylogger.
So basically even blocking people from giving Blizzard their details at all, still solves the wrong problem. That's not how they lose their details. Even if people couldn't physically enter anything on Blizzard's site, those keyloggers and phishing sites would still do the same job anyway. In fact, by virtue of _not_ being Blizzard, the phishing sites are completely safe from this.
3) Requiring people to go through loops each month to get their subscription renewed, actually _lowers_ the security there.
In the normal case, you gave Blizzard or their bank your credit card number, and they'll automatically get some money each month from your account. But that's the important part: there's only one time when you give your credit card number, and only at that time it can be intercepted. if you force users to go through loops each month, you create extra opportunities for that to happen. You also create more opportunities for phishers and the like to masquerade as services that can automate for you, what a stupid bank tried to block. You create opportunities for phishers to pretend they're Blizzard's support checking credit card details, when someone finds their subscription expired because the bank stopped paying, and they haven't yet figured out why. Etc.
Now I'm not saying that it's the end of the world, nor that everyone will get scammed that way. But I can see a few extra people getting scammed... because their bank tried to protect them from the wrong threat.
I don't know... I find it just bloody sad. I know a lot of people are muppets who fake fixing a problem they don't even understand, just to look like they're doing something. But I'd expect a bit more responsibility from a bank. If that's how they respond to security or privacy problems... let's just say, I'd get my money out of there ASAP. I'd want my money handled by less clueless monkeys.
Back to the article
