Curse

Leohan · Jun 14, 2011, 11:40 PM // 23:40

Quote:

Originally Posted by Mokeiro

Will you store passwords and credit card data in plain text like SONY?

What's wrong with plain text? It makes it easier to read...lol

And thank you Regina Buenaobra, always nice to get confirmation about these things. Keep up all the hard work of reading our crap...lol, it is appreciated.

Thot · Jun 14, 2011, 11:45 PM // 23:45

Quote:

Originally Posted by Regina Buenaobra

... a ton of questions which need to be directed to Customer Support (i.e. "I forgot my password")....
Hope that clarifies things for you all.

Thank you very much for theses informations, but how could someone say "I forgot my password" on your forum, if he can't login on this forum ?

A friend of mine is in this exact situation, his account was hacked, he contacted support and they said they will contact him back soon... 2 months ago...

He would love to use this forum, but he can't login...

Should I make a post for him ? Of course he could buy another account to get his first one back but.....it seems crazy

Anyway I think it's a very good news for the community to have such kind of tools

Xenex Xclame · Jun 14, 2011, 11:52 PM // 23:52

Question, It sounds like this is just a secondary way to contact support, Can we still use the old way if we want to? Because you saying that other companies also use this system doesn't really put my concerns completely to rest.

I rather just use the old system if i need your help,where the most they ask for loginwise is the account name and maybe a character name but no password.

FoxBat · Jun 14, 2011, 11:59 PM // 23:59

Quote:

Originally Posted by Xenex Xclame

Question, It sounds like this is just a secondary way to contact support, Can we still use the old way if we want to? Because you saying that other companies also use this system doesn't really put my concerns completely to rest.

I rather just use the old system if i need your help,where the most they ask for loginwise is the account name and maybe a character name but no password.

It's not. It's more like, get help from fellow fans, and maybe the occasional GW dev. if you're lucky.

They suggest contacting support first. So this is more like a secondary resort in the likelihood that support fails.

Stéphane Lo Presti · Jun 15, 2011, 12:22 AM // 00:22

Quote:

Originally Posted by Thot

Thank you very much for theses informations, but how could someone say "I forgot my password" on your forum, if he can't login on this forum ?

A friend of mine is in this exact situation, his account was hacked, he contacted support and they said they will contact him back soon... 2 months ago...

He would love to use this forum, but he can't login...

You can tell your friend to use one of the other methods to contact Customer Support, which would be email and web in the situation you describe:
http://www.guildwars.com/support/default.php

Quote:

Originally Posted by Xenex Xclame

Question, It sounds like this is just a secondary way to contact support, Can we still use the old way if we want to? Because you saying that other companies also use this system doesn't really put my concerns completely to rest.

Yes, you can still use email and web support the same way you could before. ^^

Xenex Xclame · Jun 15, 2011, 01:18 AM // 01:18

Quote:

Originally Posted by Stéphane Lo Presti

Yes, you can still use email and web support the same way you could before. ^^

Ah then I really see no issue with this method,I understand how you are using the login info to login to forum mentioned, but I'm happy you can still use the old method.

Enchanted Krystal · Jun 15, 2011, 01:36 AM // 01:36

Quote:

Originally Posted by Regina Buenaobra

.......We have a lot of knowledgeable people who are experienced in security issues working on these forums, and we take data security very seriously.

Hope that clarifies things for you all.

Sure does, thanks for the info.

As for the SONY comment.....i'm sure the answer is "no".

refer · Jun 15, 2011, 07:21 AM // 07:21

No way in hell I'm posting my login information. They've had account security issues as it is, and why should I even need to provide that issue to provide BUG reports? That doesn't make sense.

This is also a stupid move since the Feedback space was the original place to post and see bugs. I had suggested so many things there but devs don't acknowledge anything or anyone anymore. It's dead. So this forum, they think it might work but it will be abandoned. It's only a matter of time.

Bristlebane · Jun 18, 2011, 10:08 AM // 10:08

Quote:

Originally Posted by Painbringer

https://forum.guildwars.com/

Why is the forum portion first and not guildwars???? where is the link to it from the official guildwars site?

I'm afraid you could be a very easy target for phishing sites, as you believe a link like this would be perfectly legal:
https://guildwars.somehacksite.com

Dami · Jun 21, 2011, 11:15 AM // 11:15

I played Aion a while back and used a NCsoft site to check my character, and some how the e-mail i used was suddenly sending me Aion 'Spam' in a language i didn't know.
So if those details can be found then surely you account details on a forum can be found too. This goes back on what we have been told in the past about using our game account info anywhere apart from the game itself.
Even if this site is real, i just couldn't use it with my account details like that.

Unless Anet find a way to help accounts that have been hacked and give the player some kind of peace of mind, i hope i will never need to use it. Nothing is 100% safe on the internet.

dudemonkey · Jun 21, 2011, 09:34 PM // 21:34

Quote:

Originally Posted by refer

No way in hell I'm posting my login information. They've had account security issues as it is, and why should I even need to provide that issue to provide BUG reports? That doesn't make sense.

Typically, this is a very legitimate concern, however in this case it's possible for ArenaNet to get the security "for free." You already log into their servers every time you log into the game, and you trust that. It's possible, and this would be a reasonable technical architecture but by no means the only way, but it's possible for the forums to validate your username and password against ArenaNet's normal servers and then just store a token that says that you are logged in. If you expire that token after a few minutes, there's virtually no way to steal passwords from the forums because the forums themselves never know it ... they just hand it off to the validation servers and then wait for those servers to tell them whether or not it was correct.

This kind of thing only works because ArenaNet owns the original validation server AND the forums.

Again, I'm not saying that this is the way they did it. It's just one reasonable way to connect the forums to the game in a secure way.

Ximvotn · Jun 24, 2011, 03:37 AM // 03:37

For all those of you worried about "typing" in your information, there is always a virtual keyboard you can use. Make sure you are at the right web address.