Watch out for weakauras 2 scams.

(Locked)

90 Orc Hunter
11510
12/03/2013 12:19 PMPosted by Tasida
As others have pointed out, the root issue isn't the addons themselves, but rather people writing small scripts that utilize the addons, and functionality that's allowed by the Blizzard client, but not directly accessible to a user who doesn't know how to work with LUA code.


No. The root issue is that the Blizzard scripting API allows a script to send and trade money (and items) without a hardware event. I guarantee you that Blizzard will change this now. This could happen with auctions, trading, and mail.

From reading this thread, the other major issue is that the WeakAuras addon allows execution of arbitrary LUA scripts. It shouldn't do that...at least not by default. Any security expert will tell you that this is a major hole.
Edited by Kathucka on 12/3/2013 3:47 PM PST
Support Forum Agent
The addon author has patched Weakauras2 to v2.0.1 with some code that should help keep this from happening:
http://www.curse.com/addons/wow/weakauras-2


The issue itself is currently under investigation but as mentioned, it seems the author of the AddOn has made some changes. If you use this AddOn please make sure you update as soon as possible.

As always please understand that while AddOns are permitted, they are not directly supported by us and you should always be wary before downloading anything or, in this case, importing a script.

If you believe you were scammed by someone using this method please report it via an in-game ticket.

https://us.battle.net/support/en/help/topic/wow/477

Include the name/realm of the character and what happened. While no restoration is guaranteed, we will investigate the matter and take what actions are appropriate for any violations found.

It is generally best not to discuss possible exploits on the forums as it usually just leads to more people "testing" them. If you encounter a possible exploit please report it to our hacks team by emailing hacks@blizzard.com or using their webform.

~~~~~~~~~*~~~~~~~~~*~~~~~~~~~*~~~~~~~~~*~~~~~~~~~*~~~~~~~~~

How's my driving? Click me.
This topic is locked.

Please report any Code of Conduct violations, including:

Threats of violence. We take these seriously and will alert the proper authorities.

Posts containing personal information about other players. This includes physical addresses, e-mail addresses, phone numbers, and inappropriate photos and/or videos.

Harassing or discriminatory language. This will not be tolerated.

Forums Code of Conduct

Report Post # written by

Reason
Explain (256 characters max)
Submit Cancel

Reported!

[Close]