This isn't a bug at all. I would question the assumption that case sensitivity increases the actual search space significantly, theoretically it does but in practise most users will:
- Uppercase first letter only
- All lowercase
It's a usability decision from Blizzard, not a bug.
> This means they probably store passwords in plain text, unsalted, etc. This is unbelievable.
It absolutely does not make that any more likely. All you have to do is normalize it to upper/lower case before hashing and you have case insensitivity.
- Uppercase first letter only
- All lowercase
It's a usability decision from Blizzard, not a bug.