Tuesday, September 22, 2009

Patch 3.2.2 download mirrors

Patch 3.2.2 was released today from Blizzard officially. Having a hard time getting the patch? Then why not get a patch that is hosted at a 3rd party? Let's highlight some of the security reasons this may be a bad idea....

1. 3rd party hosting sites don't have a vested interest in keeping data secure.
Sure they may have the storage and bandwidth to handle the load. But how closely can a 3rd party monitor a single file among 100s of thousands?

2. The file transfer to the 3rd party from Blizzard may not have been encrypted.
If data channels where not encrypted at the time of transfer. Then the data could have been compromised. When else could a key logger programmer have such a time to alter a patch?

3. Malware/spyware has poisoned your DNS.
When you click a link you can see where your downloading data from in the information bar. When your DNS is poisoned (location is really going to bad site) you may think your getting good data, but in fact you may be downloading some nasty malware/spyware.

Having worked in IT security for 10+ years I may just know a thing or three about security. So if you trust 3rd parties to patch the game you play 2 hours a night, have 5 charters on, and it would take days to recover. Then go for it. For myself I will be getting my patch directly from Blizzard.

Don't say I did not warn you.

No comments:

Post a Comment