d2jsp
Log InRegister
d2jsp Forums > Diablo II > Diablo 2 Discussion > Has Double Regging Been Patched?
12Next
Add Reply New Topic New Poll
Member
Posts: 104,655
Joined: Oct 24 2009
Gold: 10.00
Nov 6 2016 07:05pm
Has Double Regging Been Patched?

Is there no way accounts can get stolen through password/email changes from previous owners?
Member
Posts: 20,486
Joined: Mar 29 2010
Gold: 39,473.41
Nov 6 2016 07:43pm
no
Member
Posts: 104,655
Joined: Oct 24 2009
Gold: 10.00
Nov 7 2016 02:21am
Quote (bioshocker @ Nov 6 2016 09:43pm)
no


I saw thsi link

http://us.battle.net/forums/en/bnet/topic/20745576199

It sounds like Krown is a noob why would the ability to change your email still allow double registration to take place?
Member
Posts: 69,331
Joined: Nov 28 2007
Gold: 3,621.69
Nov 7 2016 02:58am
Quote (Produce @ 7 Nov 2016 20:21)
I saw thsi link

http://us.battle.net/forums/en/bnet/topic/20745576199

It sounds like Krown is a noob why would the ability to change your email still allow double registration to take place?


because you can sit there with the change email link then click it one day => the account is now regged to your email => submit password recovery => email goes to you => bam into the account

technically no double registration but it's basically the same exploit in the end

This post was edited by Reset on Nov 7 2016 02:59am
Member
Posts: 104,655
Joined: Oct 24 2009
Gold: 10.00
Nov 7 2016 04:57am
Quote (Reset @ Nov 7 2016 04:58am)
because you can sit there with the change email link then click it one day => the account is now regged to your email => submit password recovery => email goes to you => bam into the account

technically no double registration but it's basically the same exploit in the end


There is no change email link.....when u click "Change Email" it's a enter current/enter new" prompt. You never receive a change email email.
Member
Posts: 66,666
Joined: Jan 14 2014
Gold: 7.77
Warn: 10%
Nov 7 2016 05:34am
Afaik double reg works like this:
1 Make account with reg'd email.
2 Let account expire
3 Make same account without mail reg.
4 sell as unreg
5 profit?
6 profit
Member
Posts: 104,655
Joined: Oct 24 2009
Gold: 10.00
Nov 7 2016 06:36am
Quote (liskod2 @ Nov 7 2016 07:34am)
Afaik double reg works like this:
1 Make account with reg'd email.
2 Let account expire
3 Make same account without mail reg.
4 sell as unreg
5 profit?
6 profit


i was under the impression double reg was.....make an account.....send password recovery request......don't touch email with the link.......wait til account expires and some1 remakes.......then use the old link in ur email to Get a new password.

However.....There is no more link when you send a passowrd recovery. When you request a recovery now....they send u an email in which you must "reply to this email with the full body intact". And when you do.....they compare the currently registered email to the email you're responding with.

There is no more password link.

The only way I could think it would still be a problem is that it may still possible from people who still have their old emails with password links.

So I'm pretty sure you can't currently double reg new accounts....but was the patch they used to stop it retroactive.

I don't double reg accounts I want to make a nice account name but I don't want some1 to steal it through double regging is why I'm asking.

This post was edited by Produce on Nov 7 2016 06:39am
Member
Posts: 105,589
Joined: Feb 21 2012
Gold: 1,496.41
Nov 7 2016 08:18am
no
Member
Posts: 19,100
Joined: Dec 19 2013
Gold: 0.00
Nov 7 2016 08:38am
Quote (Produce @ 7 Nov 2016 14:36)
I don't double reg accounts I want to make a nice account name but I don't want some1 to steal it through double regging is why I'm asking.


that is exactly what you should not do :P
Member
Posts: 65,913
Joined: Apr 21 2012
Gold: 175.01
Nov 7 2016 08:42am
Do it. It's very safe. It would be nice to finally be rid of you.
Go Back To Diablo 2 Discussion Topic List
12Next
Add Reply New Topic New Poll