Curse

The Abuzer · Dec 25, 2009, 09:06 AM // 09:06

In this week, Anet has brought us an update with a security question witch theoretical, it protect us from hacker's attacks.

All it's good to this point, but they made the mistake to include the remembering of the question included in the e-mail one.

Lemme tell you that about 3/4 players use this option, and now, they can't be protected by this, because they are too lazy to write their e-mail.

My suggestion will be to make separate buttons for these 2 options. It isn't a big programing thing, just 3-4 line codes.

Arduin · Dec 25, 2009, 09:27 AM // 09:27

I am not getting your suggestion.

Someone has to be at your computer to view the answer to the security question (character name). From that point the security is your own responsibility.

The Abuzer · Dec 25, 2009, 10:03 AM // 10:03

Quote:

Originally Posted by Arduin

I am not getting your suggestion.

Someone has to be at your computer to view the answer to the security question (character name). From that point the security is your own responsibility.

Yea, but checking that box, you get a file in your computer with character name and e-mail, witch can be stolen (hard, but it can).

sunec · Dec 25, 2009, 10:58 AM // 10:58

Quote:

Originally Posted by The Abuzer

Yea, but checking that box, you get a file in your computer with character name and e-mail, witch can be stolen (hard, but it can).

If someone is able to steal a file on your computer, then they have complete access to it most likely, and therefore, could just grab your account details in any way they wish to.

Arduin is right, if someone can access your computer it's your own responsibility, and no security measures from ANet would help preventing it.

The character name security question is supposed to fix the issue with hackers gaining access to NCSoft Master Accounts and resetting the password of account owners, gaining access without hacking the target's computer.

subarucar · Dec 25, 2009, 11:52 AM // 11:52

Quote:

Originally Posted by sunec

If someone is able to steal a file on your computer, then they have complete access to it most likely, and therefore, could just grab your account details in any way they wish to.

This. If they have access to your computer, there are things I would be far more scared of than my GW account's security.

magao · Dec 25, 2009, 11:54 AM // 11:54

However, there is the minor issue that many people on the forums have the name of their main character listed on (for example) their profile on this website. Or at least have had (since it seems to be gone from here now).

subarucar · Dec 25, 2009, 12:00 PM // 12:00

Quote:

Originally Posted by magao

However, there is the minor issue that many people on the forums have the name of their main character listed on (for example) their profile on this website. Or at least have had (since it seems to be gone from here now).

Inde removed it due to security concerns. I belive you may re-post it if you wish to.
The only time having my character name here on the forums would worry me is if my GW e-mail was also written on this account.

Bob Slydell · Dec 25, 2009, 02:52 PM // 14:52

Quote:

Originally Posted by The Abuzer

Yea, but checking that box, you get a file in your computer with character name and e-mail, witch can be stolen (hard, but it can).

The file you speak of is the GW.dat, which has had the option of holding yours truly, your email address since 2005. Welcome to guildwars.

Tal L · Dec 25, 2009, 09:08 PM // 21:08

I think we should remove the name of the character because if someone hacks you he intentionaly hacks you because he knows your chracters already, there should be a weekly link to change your password as bellow:

Old password:
Old Password:
New password:
New password:

If you dont, it will say: anet recommand you change your password for your own safty otherwise anet doesnt take any responsiblty for your acount. This is done to promote your safty bla bla bla.

magao · Dec 25, 2009, 09:12 PM // 21:12

Quote:

Originally Posted by subarucar

Inde removed it due to security concerns. I belive you may re-post it if you wish to.
The only time having my character name here on the forums would worry me is if my GW e-mail was also written on this account.

You supplied an email address to GW Guru when you signed up - that's stored. If that's the address you use as your login, and you have your character name listed here, and you use the same password for GW, bingo - there's a match. Or as another alternative, GW Wiki.

Alternatively, if you use the same login name here and somewhere else, and your email address is visible at that other site, and your character name is visible here, it can be matched up (harder, but definitely not impossible).

This is (or was) the situation for many people (not me - email address and passwords are different to my GW login).

Don't get me wrong - I think the additional security is good, and it was a good choice of "something you know" - but it's definitely possible to find it out.

subarucar · Dec 25, 2009, 10:32 PM // 22:32

Quote:

Originally Posted by magao

You supplied an email address to GW Guru when you signed up - that's stored. If that's the address you use as your login, and you have your character name listed here, and you use the same password for GW, bingo - there's a match. Or as another alternative, GW Wiki.

That's why many people (myself included) have a separate e-mail for GW and other important things.

The Abuzer · Dec 27, 2009, 03:12 PM // 15:12

Quote:

Originally Posted by subarucar

That's why many people (myself included) have a separate e-mail for GW and other important things.

Yep, but this "many" isn't all.

Many people use same e-mail for other things, and the nasty part is that you can't change it.

Div · Jan 02, 2010, 10:41 PM // 22:41

The point of the security question is so that when a random person steals your account from the bugged ncsoft site, they only know the email and password, and wouldn't be able to access it, unless you're the target of a direct theft. Most of the leaks on their website is completely random, which is what the security question is protecting.

Turbo Ginsu · Jan 03, 2010, 05:05 AM // 05:05

IMO the security question is the best way yet of ensuring that the toon that is highlighted is the one you want to play. Fast login ftw! Better still, if u start favouring another toon, u just change the toon name in ure security question box to correspond to that toon..

Too bloody easy!