Guild Wars Forums - GW Guru
 
 

Go Back   Guild Wars Forums - GW Guru > The Inner Circle > The Riverside Inn

Notices

Poll: Which of the following security measures would you like to see added to Guild Wars?
Poll Options
Which of the following security measures would you like to see added to Guild Wars?

Reply
 
Thread Tools Display Modes
Old Dec 17, 2009, 04:50 AM // 04:50   #181
Jungle Guide
 
AtomicMew's Avatar
 
Join Date: Apr 2005
Profession: N/A
Advertisement

Disable Ads
Default

Quote:
Originally Posted by flubber
you say this to me, as if I care. That had to be directed at Anet/Ncsoft.
as far as too many amazing games, good luck in your ventures, may thee fair well.
You're adding subtext to my post where there is not. I know that you don't care and I don't care that you don't care because it was never my intention to get you to care. Now read that again until you understand it.

I simply stated facts: 1) A.net is being callous at best in their response to the situation. 2) I won't stick around if their behavoir continues. 3) You're a pretty massive schmuck if you stick around in an abusive relationship.

Now since were on the situation of not caring, let me state furthermore that I don't care if A.net cares. I have no ill-will towards them, and if they want to piss on their dedicated player base, that is their prerogative. It won't affect me in the least, because, as I stated, there are a large number of amazing games coming out, and I personally only have a limited amount of free time.

Quote:
GoO-GoO-GA-gA-Ga? see what I did there?
ZOMG. You win the forums. You are so successful and attractive now.
AtomicMew is offline   Reply With Quote
Old Dec 17, 2009, 06:20 AM // 06:20   #182
are we there yet?
 
cosyfiep's Avatar
 
Join Date: Dec 2005
Location: in a land far far away
Guild: guild? I am supposed to have a guild?
Profession: Rt/
Default

Quote:
Originally Posted by Sir Cusfreak View Post
Regina said right out loud that the support team is doing the investigations and the developers are working on solutions. What part of "we're not going to hire IT Security Specialists" did you guys miss?
Now, before we get into the details of these people's job descriptions, I would like to say I am not a chef, but I am also not going to go hungry and my Steaks are pretty damn good; I am not a ship's Captain, but I can paddle a canoe and get where I'm going.
Do we need a security team to press delete on the password reset function of a NCSoft master account? I doubt it. Can the skill-balance specialists create the enhanced security features listed in this poll? I doubt that too, to be honest, but I don't know enough about it to say.
when I go to the doctor I want to make sure they have the credentials, when I have my car fixed I dont ask my sisters-best-friends-brothers-best-friend.
When I have the electrical system put in my new house I have an electrician do it, not my dad (who was a lawyer).
Having a spouse in the IT industry, I would feel a whole lot better knowing that the people writing the codes, doing the upgrades on the security have the qualifications to be doing such.
I was unaware that this may not be the case....I would have hoped that they actually had professionals doing these types of jobs.
__________________
where is the 'all you can eat' cookie bar?
cosyfiep is offline   Reply With Quote
Old Dec 17, 2009, 06:41 AM // 06:41   #183
Frost Gate Guardian
 
unkleanone's Avatar
 
Join Date: Jan 2008
Location: TN
Guild: Semi Automatic Bananas [SEMI]
Profession: R/Mo
Default

I'm a long time player my account is well over 4 years old I believe its around 54-56 months old, I logged in today to check some of my younger characters for birthday gifts and realized my password had been changed. After spending an hour trying to remember my Play NC info I was finally able to change the passwords to something new. Upon logging in I found that pretty much everything that could be sold was gone from all my characters. total worth probably somewhere in the millions. I am always rediculously careful about everything I download and would never even dream of sharing my password wirth anyone so i really have no idea how this happened I have scanned my system with multiple security softwares and have found nothing. This leaves me to think that one of two things happened here. Either ANET's security was bad and someone hacked there way into my account that way or my account was somehow Brute forced.

Allowing that most likely this hacking was not my fault there should atleast be some way to restore what was lost.

As far as I'm aware nearly every other game can restore lost items. It seems fairly rediculous that ANET can't do so.

Basically I really wish there was the ability to restore lost items and such

Last edited by JR; Dec 17, 2009 at 10:11 AM // 10:11.. Reason: Copied to 'account hacked' thread.
unkleanone is offline   Reply With Quote
Old Dec 17, 2009, 08:50 AM // 08:50   #184
Desert Nomad
 
Burst Cancel's Avatar
 
Join Date: Dec 2006
Location: Domain of Broken Game Mechanics
Default

Anet's jizz must taste like fine wine, the way some of you keep sucking them off.

Honestly, what the **** is wrong with you people? In what twisted, god-forsaken universe is this kind of account security situation okay?
Burst Cancel is offline   Reply With Quote
Old Dec 17, 2009, 10:22 AM // 10:22   #185
Forge Runner
 
Tenebrae's Avatar
 
Join Date: Feb 2007
Location: Spain
Guild: LHV
Profession: R/N
Default

Quote:
Originally Posted by unkleanone View Post
Basically I really wish there was the ability to restore lost items and such
LoL that reminded me to "restore system" ( i dont know if thats how windows names it in english version ) hahaha. Would be great thou , to create some "restoration points" .... not practical i guess.
Forth option still strong , undelete character option seems to be the best ¿?
Tenebrae is offline   Reply With Quote
Old Dec 17, 2009, 01:26 PM // 13:26   #186
Academy Page
 
Cluebag's Avatar
 
Join Date: Jul 2008
Profession: Mo/
Default

Well, I'm not exactly sure what the best options are for prevention/recovery, I'll defer to the expertise of those who do that stuff professionally and seriously. Just like I won't administer my own cancer treatment regimen, I'll defer to the wisdom and expertise of my oncologist. And bear in mind, when I meant professional and serious, I didn't mean Jim-Bob's Bait, Tackle, Hot Wings, and Oncology out in east/west buttf*ck nowhere, I meant something along the lines of the specialists at the Memorial Sloan-Kettering Cancer Center or Johns Hopkins Hospital, since I'm on the east coast.


And I'm surprised that this hasn't come up, unless these types of posts are edited/deleted, but no one has mentioned the fact that NCsoft scores an F rating from the Better Business Bureau. I know there are a lot of criticisms of the BBB out there, and that data has to be taken with a grain of salt sometimes (not unlike our own determinations of merit-worthiness of some of the "complaints" from "consumers" we see posting on these boards). However, when you view NCsoft's competitor's ratings on the BBB, and see significantly better scores, and given a similar customer base (gamers, just generalizing here people, please bear with), you have to stop and assess for a moment whether or not there is an element of credibility to the scores they each receive. To ArenaNet's credit, they themselves score an A-, so it stands to reason that NCsoft is functioning as the boat anchor around the neck in this aspect, with respect to customer (dis)service.


I originally was looking for an email address for the NCsoft CEO Taek Jin Kim (never found it, but I did find a plenty of interesting phone numbers ) so that I could send a polite email/shittygram, to express some thoughts and concerns. You know, squeaky wheel getting the grease and all that, especially considering that it is apparent that the normal channels thru which we'd seek to have issues addressed and corrected are giant time wasters. This first tier support equivalent foolishness has gone on long enough. I'm not above going over/around/thru obstacles that are deliberately thwarting my attempts to have my particular problems resolved.

You'd be surprised how effective it can be when you have the attention of the person at the top, and are explaining to them why and how all their people that are supposed to be handling things aren't. Trust me, it's amazing how quickly something that you are led to believe is an impossiblility all of a sudden becomes reality when you are speaking to the right people.
Cluebag is offline   Reply With Quote
Old Dec 17, 2009, 08:44 PM // 20:44   #187
ArenaNet
 
Regina Buenaobra's Avatar
 
Join Date: Apr 2008
Profession: Me/
Default

I understand people's concerns, and sympathize with those who have had their accounts stolen. Many games have been targeted by hackers recently. They're using information taken from other games and other websites and trying that account information in Guild Wars and other games.

We have an entire team of developers who are continuing to work on this behind the scenes. This is a serious and important issue to us, and we are devoting a lot of resources to addressing the problem. While we are trying all we can on our side, a good way to protect your account is to change your password. As I noted before, the hackers are using account information that they have already harvested via keyloggers and other means, and trying it in Guild Wars and other games.
__________________
Regina Buenaobra
Community Manager
ArenaNet, Inc.
Regina Buenaobra is offline   Reply With Quote
Old Dec 17, 2009, 08:59 PM // 20:59   #188
Desert Nomad
 
Join Date: Apr 2006
Profession: R/
Default

Quote:
Originally Posted by Regina Buenaobra View Post
While we are trying all we can on our side, a good way to protect your account is to change your password.
Damn it woman, stop failing and LISTEN. Look at the poll results.

There are many ways accounts are compromised, singling out one obvious one, which probably only accounts for a small proportion anyway is not going to solve the problem or address people's fears.

Limit the consequence of the hack, implement a no delete on characters, how hard is that?
Fay Vert is offline   Reply With Quote
Old Dec 17, 2009, 09:02 PM // 21:02   #189
Wilds Pathfinder
 
Join Date: Apr 2007
Guild: TSR
Profession: Mo/Me
Default

Quote:
Originally Posted by Regina Buenaobra View Post
I understand people's concerns, and sympathize with those who have had their accounts stolen. Many games have been targeted by hackers recently. They're using information taken from other games and other websites and trying that account information in Guild Wars and other games.

We have an entire team of developers who are continuing to work on this behind the scenes. This is a serious and important issue to us, and we are devoting a lot of resources to addressing the problem. While we are trying all we can on our side, a good way to protect your account is to change your password. As I noted before, the hackers are using account information that they have already harvested via keyloggers and other means, and trying it in Guild Wars and other games.
Would you care to elaborate on what you are doing on your end to help our accounts be safer?

Saying to change our password is the only thing we can do in regards to the game itself since its the only obvious thing we can do, baring all the security we do normally with our PC's etc.

Pol
Polgara Val is offline   Reply With Quote
Old Dec 17, 2009, 09:09 PM // 21:09   #190
Banned
 
Join Date: Sep 2009
Default

Quote:
Originally Posted by Fay Vert View Post
Damn it woman, stop failing and LISTEN. Look at the poll results.

There are many ways accounts are compromised, singling out one obvious one, which probably only accounts for a small proportion anyway is not going to solve the problem or address people's fears.

Limit the consequence of the hack, implement a no delete on characters, how hard is that?
Totally agree.

What we see over and over is someone saying "I just got an email my password was changed". That means they (the hackers) didn't know the guild wars password - they got into NCsoft and changed it. Want to stop at least a big part of the game hacks? LISTEN TO US. Change it so they have to know the existing password, add email conformation before anything can be changed. JUST LISTEN TO US.

Last edited by karlik; Dec 17, 2009 at 09:17 PM // 21:17..
karlik is offline   Reply With Quote
Old Dec 17, 2009, 09:16 PM // 21:16   #191
Lion's Arch Merchant
 
Join Date: Sep 2006
Guild: Alchemy Incorporated
Profession: Mo/E
Default

Thanks Regina,

The posts you've made yesterday and today are the first times I've ever heard that you're working on making changes. It's important to me, and I'm glad to know you're working on it.

I'd also love to know that at least one member of the "entire team" that you have working on it is an expert in security. Can you tell us that too?
Another Felldspar is offline   Reply With Quote
Old Dec 17, 2009, 09:26 PM // 21:26   #192
Krytan Explorer
 
Sir Cusfreak's Avatar
 
Join Date: Nov 2007
Location: In your backline
Guild: No Tags [NONE]
Default

easier option: REMOVE THE ABILITY TO CHANGE A GW PASSWORD FROM THE PLAYNC ACCOUNT. I bet its an easy button to delete, and doesnt need IT security credentials nor a "whole team of developers" to accomplish.

Just take the damn option away.

If we need our GW password changed, we can do it from GW. If we cant do it from GW, then it does not need to be changed. Period.

"but what if someone cant get into thier account, they havent played for months, theyve forgotten it, and need to change it from PlayNC?"
Too bad for them. They can call support. There's no reason for our accounts to continue to be at risk for that person in the meantime, and if they cant prove it's thier account then too bad for them.
PlayNC password reset needs to go, now.

UPSIDE FOR NCSOFT:
once the option to access GW passwords is no longer available through a plaync account, no more blame can be placed your way. If the only way to change a GW password is inside GW itself, then we once again know that every single hack is user fault, no matter what. We like that.
Sir Cusfreak is offline   Reply With Quote
Old Dec 17, 2009, 09:38 PM // 21:38   #193
Lion's Arch Merchant
 
neighto's Avatar
 
Join Date: Nov 2005
Guild: The Heart of Life is [Love]
Default

Quick question, and I'd accept a PM response that I swear to keep confidential: Was GWGuru the site that was hacked?

It is the ONLY Guild Wars fansite I use. You can google my username with "guild wars" and the results are empirical. The passwords are not the same, not even similar, to my GW or PlayNC account.

If it was not GWG that was hacked then explain yourself, ANet. Please explain why my PlayNC account information was changed and I cannot log in or recover either it or my GW account. I would love to know why I did not receive any email notification of the PlayNC account changes, too.

ANet claims to "have established and maintain reasonable security procedures to protect the confidentiality, security and integrity" of my personal information. The past few days have given me the distinct impression that this is a fallacy, and without improved security this game will plummet into obsoletion like so many others while the "I was hacked!" threads continue to grow.
neighto is offline   Reply With Quote
Old Dec 17, 2009, 10:34 PM // 22:34   #194
Site Contributor
 
Join Date: Dec 2004
Default

From last month. I'll just copy and paste.

Announcement on Security

Here at GuildWarsGuru.com we have continually upgraded and adjusted our site, servers and even user profiles in order to better secure our users information. Our priority is providing you a protected environment, so you are able to use this website freely and without worry. For this reason, we have gone ahead and changed character names listed in your profile to private. Recent communication from ArenaNet has stated they feel the availability of character names could contribute to the risk of compromising accounts. We want to cooperate and also protect our users by proactively taking sensible security measures.

We appreciate some of you may feel inconvenienced by the change, as public IGN's are a useful feature and common to many gaming websites. We'd simply ask for your understanding, as no risk is too small at the cost of security.

We would also like to take this opportunity to firmly state that Guild Wars Guru has not been compromised in any way, nor is our security in question. We are in contact with ArenaNet. We routinely monitor and review our server logs and have security measures in place with regular updates. Any issues we may have had (and none have ever involved risk to usernames, emails or passwords) have been openly discussed with our users in our Site Feedback forum.

For your peace of mind, we would also like to clarify that had our security ever been breached the community would have been immediately and openly informed. We've also seen a number of accounts that have signed up on this forum just to post that they've had their account compromised. We are privileged and happy to be a voice of the Guild Wars community. If you have any questions or concerns please feel free to post those in our Site Feedback forum and I can address those.

Stating that, we would also like to remind our users to please read our Security Tips that have been available and to diligently protect their account information. [Guide] Security Tips for Guild Wars players
Inde is offline   Reply With Quote
Old Dec 17, 2009, 11:25 PM // 23:25   #195
Ascalonian Squire
 
Join Date: Apr 2009
Default

Quote:
Originally Posted by Fay Vert View Post
Damn it woman, stop failing and LISTEN. Look at the poll results.

There are many ways accounts are compromised, singling out one obvious one, which probably only accounts for a small proportion anyway is not going to solve the problem or address people's fears.

Limit the consequence of the hack, implement a no delete on characters, how hard is that?
1. Saying "damn it woman" and insulting is a poor way to get a woman's attention.
2. This isn't WoW. There isn't a team of developers sitting around making new shit. You're lucky they even pay attention to these or any forums. ANet isn't going to stop on a dime and develop new security features because stupid people are using the same passwords on everything. The internet's been around for awhile, get savvy.
HBlix is offline   Reply With Quote
Old Dec 17, 2009, 11:31 PM // 23:31   #196
Desert Nomad
 
Shanaeri Rynale's Avatar
 
Join Date: Aug 2005
Guild: DVDF(Forums)
Profession: Me/N
Default

Thanks for the update Regina. I know you can't tell us what measures you are planning but a simple yes or no to the question below would solve a lot of anxiety.

Are you planning to implement damage limitation measures to guild wars 1 and 2?

As I said, a simple yes or no would really help

thanks
Shanaeri Rynale is offline   Reply With Quote
Old Dec 17, 2009, 11:55 PM // 23:55   #197
Grotto Attendant
 
upier's Avatar
 
Join Date: Mar 2006
Location: Done.
Guild: [JUNK]
Default

Quote:
Originally Posted by Fay Vert View Post
Damn it woman, stop failing and LISTEN. Look at the poll results.

There are many ways accounts are compromised, singling out one obvious one, which probably only accounts for a small proportion anyway is not going to solve the problem or address people's fears.

Limit the consequence of the hack, implement a no delete on characters, how hard is that?
Reggie just got spanked!

Quote:
Originally Posted by HBlix View Post
2. This isn't WoW. There isn't a team of developers sitting around making new shit. You're lucky they even pay attention to these or any forums. ANet isn't going to stop on a dime and develop new security features because stupid people are using the same passwords on everything. The internet's been around for awhile, get savvy.
Lets put it this way:
the folks at A.net need us to throw money at them so that they can feed their children. If they don't give us what we want, we won't be starving.
upier is offline   Reply With Quote
Old Dec 18, 2009, 12:04 AM // 00:04   #198
Krytan Explorer
 
Join Date: Sep 2007
Default

To Regina Buenaobra:
Why can't you just make it so when someone resets Guild Wars's password from NCSoft website, it sends an email asking to CONFIRM the password reset before actually doing it?

Short term: DISABLE the ability to reset GW's password until the above feature is implemented.


EDIT:
Just saw the Limited Edition Wintersday Costume Pack from NCSoft store. Unfortunately, I can't buy it because I don't have confidence that your website is secure enough. In the event my account ever get hacked, I'm out and retiring from GW. I don't want to grind titles again just for GWAMM title.

Last edited by JimmyNeutron; Dec 18, 2009 at 12:08 AM // 00:08..
JimmyNeutron is offline   Reply With Quote
Old Dec 18, 2009, 12:08 AM // 00:08   #199
Ascalonian Squire
 
Ambitious's Avatar
 
Join Date: Aug 2009
Profession: E/R
Default

I'm trying to take heed of this warning and change my password, but I'm running into some difficulties.

I registered an NCsoft account, and attempted to add my Guild Wars account to it so I could change my password. However, it needs the "serial code." Where can I find this code?
Ambitious is offline   Reply With Quote
Old Dec 18, 2009, 12:26 AM // 00:26   #200
Banned
 
Join Date: Sep 2009
Default

Quote:
Originally Posted by Ambitious View Post
I'm trying to take heed of this warning and change my password, but I'm running into some difficulties.

I registered an NCsoft account, and attempted to add my Guild Wars account to it so I could change my password. However, it needs the "serial code." Where can I find this code?
I have become one of the group that advises against linking your account to ncsoft, it is starting to look like a possible security issue. Change the password in game instead.
karlik is offline   Reply With Quote
Reply

Share This Forum!  
 
 
           

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 10:42 AM // 10:42.


Powered by: vBulletin
Copyright ©2000 - 2016, Jelsoft Enterprises Ltd.
jQuery(document).ready(checkAds()); function checkAds(){if (document.getElementById('adsense')!=undefined){document.write("_gaq.push(['_trackEvent', 'Adblock', 'Unblocked', 'false',,true]);");}else{document.write("