Guild Wars Store: Saftey - Page 2 - Guild Wars Forums

Kuldebar Valiturus · Mar 29, 2007, 08:29 PM // 20:29

Quote:

Originally Posted by Raiin Maker

Anyone know to what this (quoted from Arenanet) applies?

That quote is probably as good as it will get.

Quote:

We use encryption, Secure Socket Layers, and other technical measures (such as off-site backup, security testing, and password protection), and we implement off-line efforts to further protect this information, including limiting employee access to personal information and updating our employees regarding our security practices and privacy policies.

Raiin Maker · Mar 29, 2007, 08:43 PM // 20:43

Quote:

Originally Posted by lakatz

Yeah the secure encryption thing they're talking about IS for their store. I know because their encryption program wasn't well written in the very beginning and caused me a few days' grief.

Even though that's all been fixed since, that won't help make your dad feel more secure about the transaction now will it? So here's a thought. Have you tried to right click on the store browser and see the properties? If you can see the protocol in the properties, you can see if it's https (secure SSL connection) or just http. I have no doubt personally that it's https.

For more information: http://www.boutell.com/newfaq/definitions/ssl.html

Thats a really great reply, thanks! However i cannot right click the store, because its of-course in-game, and not in a browser, and reducing the screen size and then right clicking the window bar doesn't come up with properties.

lakatz · Mar 29, 2007, 08:50 PM // 20:50

did you try to right click anywhere on the screen of the store? It is in essence a browser, the definition of 'a browser' is "a software program used to view and interact with various types of Internet resources available on the World Wide Web," but it's not IE or Firefox, of course, so I don't know how well the right click thing works on it.

I wrote a PS to my previous post. I didn't realize you were searching ANET for security information when I wrote the first one. Then I realized when I read your post quoting ANET. Your transaction is directly with NCSoft, so NCSoft (http://plaync.com) is where you should go for security information, not ANET.

Raiin Maker · Mar 29, 2007, 08:56 PM // 20:56

Quote:

Originally Posted by lakatz

did you try to right click anywhere on the screen of the store?

I wrote a PS to my previous post. Youre transaction is directly with NCSoft, so NCSoft (http://plaync.com) is where you should go for security information, not ANET.

Very true, but Plaync has got to be one of the worst websites I've ever used, not only that but the knowledge database isn't very useful either.

And yeah, right clicking on the screen of the store anywhere doesn't work, guessing because its part of the guild wars client, and not a browser.

Kuldebar Valiturus · Mar 29, 2007, 08:59 PM // 20:59

http://www.plaync.com/us/store/index.html

NCSoft Store has the GoTY Edition but not the add-on upgrade. :/

Raiin Maker · Mar 29, 2007, 09:09 PM // 21:09

Quote:

Originally Posted by Kuldebar Valiturus

http://www.plaync.com/us/store/index.html

NCSoft Store has the GoTY Edition but not the add-on upgrade. :/

Yeah i know, gotta buy it from the store.

Raiin Maker · Mar 29, 2007, 09:13 PM // 21:13

Quote:

Originally Posted by lakatz

did you try to right click anywhere on the screen of the store? It is in essence a browser, the definition of 'a browser' is "a software program used to view and interact with various types of Internet resources available on the World Wide Web," but it's not IE or Firefox, of course, so I don't know how well the right click thing works on it.

Yeah dosen't work, however I'll attempt to use my firewall to see what site Guild Wars is connecting to.

lakatz · Mar 29, 2007, 09:37 PM // 21:37

Quote:

Originally Posted by Raiin Maker

... however I'll attempt to use my firewall to see what site Guild Wars is connecting to.

*slaps forehead* brilliant... glad I thought of that.

EDIT: I'm having a ton of fun here because I just realized what we're doing... globally problem solving in nearly real time. gotta love the internet.

Raiin Maker · Mar 29, 2007, 09:50 PM // 21:50

Quote:

Originally Posted by lakatz

*slaps forehead* brilliant... glad I thought of that.

EDIT: I'm having a ton of fun here hecause I just realized what we're doing... globally problem solving in nearly real time. gotta love the internet.

Hmm just opened command prompt typed in netsat -ab and hit enter.

Guild wars DOES NOT show up being secure...

Really wish Gaile was online so we could get an official answer here.

lakatz · Mar 29, 2007, 10:26 PM // 22:26

Well then here you go. http://help.plaync.com/cgi-bin/playn...nduser/ask.php. I don't remember how long it took to get an answer from them when I tried this, but I don't believe it was more than a day.

I do know the ingame store uses encryption because the day they opened, I tried to buy a couple extra character slots, and they kept rejecting my credit card three-digit security code. I called my bank and asked what the problem was, and they said it was probably that the store's encryption program was not able to read my security code properly. The bank offered to issue a new card with a different security code and that worked. Sometime later (September 6), ANET posted in one of the game updates that a flaw was fixed in the ingame store that had prevented some people from making purchases. I suspect that might have been the same flaw I encountered.

bilateralrope · Mar 30, 2007, 08:21 AM // 08:21

Quote:

Originally Posted by Coloneh

the only way someone could steal your credit card info would be to hack the GW sever. its a connection between your computer and Anet, no one is going to take anything from you. its good to be a little cautious with that info, but something like this from a legitimate company will always be secure.

But if the link isn't encrypted with a decent level of encryption, someone could intercept the packet containing the credit card information on route. Also if its a shoddy encryption algorithm (such as one thats either very quick to brute-force or one thats broken) then it might as well not be there.

So the best way to assure customers is to tell everyone what encryption algorithms(s) are being used. Now before you say that this just lets hackers break it easier, consider that the best encryption algorithms are designed with the assumption that the attacker will know everything about it except the encryption key(s) being used, then the algorithm is made public to show off how good it actually is.

Raiin Maker · Mar 30, 2007, 12:45 PM // 12:45

Just send another email. Waiting for a reply.

c_ras · Mar 30, 2007, 03:46 PM // 15:46

Quote:

Originally Posted by Kuldebar Valiturus

http://www.plaync.com/us/store/index.html

NCSoft Store has the GoTY Edition but not the add-on upgrade. :/

Quote:

Originally Posted by Raiin Maker

Yeah i know, gotta buy it from the store.

I was on the Play NC site and happened to scroll down and go to the Legal Stuff. This is what it said under Privacy:

Quote:

Originally Posted by Play NC.com Website

NCsoft's Privacy Policy applies to use of this Site, and its terms are made a part of these Terms of Use by this reference. To view NCsoft's Privacy Policy, http://www.plaync.com/us/help/privacy.html.

Additionally, by using the Site, you acknowledge and agree that Internet transmissions are never completely private or secure. You understand that any message or information you send to the Site may be read or intercepted by others, even if there is a special notice that a particular transmission (for example, credit card information) is encrypted.

Though I am pretty sure it is safe to order straight from Play NC, when you make transactions over the internet in any case, you will always have that risk. As far as the in-game store, I'm not sure about that one (being secured or not).

Mar 29, 2007, 08:50 PM // 20:50	#23
lakatz Wilds Pathfinder Join Date: Jun 2006	did you try to right click anywhere on the screen of the store? It is in essence a browser, the definition of 'a browser' is "a software program used to view and interact with various types of Internet resources available on the World Wide Web," but it's not IE or Firefox, of course, so I don't know how well the right click thing works on it. I wrote a PS to my previous post. I didn't realize you were searching ANET for security information when I wrote the first one. Then I realized when I read your post quoting ANET. Your transaction is directly with NCSoft, so NCSoft (http://plaync.com) is where you should go for security information, not ANET. Last edited by lakatz; Mar 29, 2007 at 09:00 PM // 21:00..

Mar 29, 2007, 10:26 PM // 22:26	#30
lakatz Wilds Pathfinder Join Date: Jun 2006	Well then here you go. http://help.plaync.com/cgi-bin/playn...nduser/ask.php. I don't remember how long it took to get an answer from them when I tried this, but I don't believe it was more than a day. I do know the ingame store uses encryption because the day they opened, I tried to buy a couple extra character slots, and they kept rejecting my credit card three-digit security code. I called my bank and asked what the problem was, and they said it was probably that the store's encryption program was not able to read my security code properly. The bank offered to issue a new card with a different security code and that worked. Sometime later (September 6), ANET posted in one of the game updates that a flaw was fixed in the ingame store that had prevented some people from making purchases. I suspect that might have been the same flaw I encountered. Last edited by lakatz; Mar 29, 2007 at 11:07 PM // 23:07..

Mar 29, 2007, 08:59 PM // 20:59	#25
Kuldebar Valiturus Desert Nomad Join Date: Nov 2006 Location: Garden City, Idaho Guild: The Order of Relumination (TOoR) Profession: R/	http://www.plaync.com/us/store/index.html NCSoft Store has the GoTY Edition but not the add-on upgrade. :/

Mar 30, 2007, 12:45 PM // 12:45	#32
Raiin Maker Wilds Pathfinder Join Date: Oct 2005 Location: England Guild: Blood On The Worlds Hands Profession: W/	Just send another email. Waiting for a reply.