Saturday, November 21 2009

Dear Blizzard,

Today I finally converted my World of Warcraft account into your new, one-ring-to-rule-them-all account system. Let’s assume, for the sake of argument, that the email address I gave for my new, unified login name is “”. You sent me a confirmation email that my account had been converted, and that my new login name would be “n***”.

This would be a nice little touch of security, except for the fact that you sent the email to, making it pure theater. Next you’ll be asking me to take off my shoes and empty my water bottle…

[to be clear: the problem is not that they sent email. That was expected and desired. The problem is that the body of the message pretends to “protect” my login name by masking it, in a message sent to the email address that is identical to that login name]