Curse

SilintNinjya · Sep 26, 2006, 05:30 AM // 05:30

/signed

how bout an option to lock down IP too? make it so that hackers cant even access your account with out the right IP =P. of course, an email incase of change is what would be needed.

Zui · Sep 26, 2006, 05:37 AM // 05:37

/not signed

By no means do I mean to blame people who've been hacked but... If you actually had a good password and not just "password" as your password, and kept a 'public' and a 'private' email adress... Then the odds of you being hacked are very, very slim. Using different passwords for different services is also a good idea, and so is changing your passwords reguarly...

Sure, if no one was out there trying to hack your account, you wouldn't have been hacked. However, it's simmilar to leaving your door open at night and hoping no one simply walks in and steals somthing. Anyone with any common sense closes, and even locks their doors. Is it still possible to get in your house if you have a locked door? Sure. It's alot harder though, and it's even harder to do it without making alot of noise, thus making it not worth it for the would be thief. The same goes with account security. It's still possible to get into your account, but it's much, much harder, so much so that it's not worth the trouble to do so unless you desperately hate the person, most likely know them in person, and have ALOT of free time on your hands.

Eragon Dragonslayer · Sep 26, 2006, 07:30 AM // 07:30

Quote:

Originally Posted by TheLordOfBlah

Uh, sorry but.....

....ur point? ud prob only use the password once... and if ur calling someone an idiot plx spell it right..

Bale_Shadowscar · Sep 26, 2006, 07:38 AM // 07:38

Is TheLordOfBlah implying that Black Guinievere (sp?) downloaded cheat bots, and thats how she got hacked, hmm?

I think an additional password is a great idea, however, I do think it needs to be optional. i wouldn't like to have it on every character, forget it, and then not be able to make any more characters.

I also like the idea of emailing the person if someone types the password for the account wrong more than three times or something. I think that would be good.

/signed

BaggyDave · Sep 26, 2006, 10:35 AM // 10:35

I hope it never happens to The LordOfBlah because that last post will come back to haunt him

Even in the most perfect world things can happen if the ability for it not to happen is in place it is not an issue.

I hope Anet see the logic in this

Scavenger Rage · Sep 26, 2006, 02:21 PM // 14:21

Quote:

Originally Posted by Zui

/not signed

By no means do I mean to blame people who've been hacked but... If you actually had a good password and not just "password" as your password, and kept a 'public' and a 'private' email adress... Then the odds of you being hacked are very, very slim. Using different passwords for different services is also a good idea, and so is changing your passwords reguarly...

Sure, if no one was out there trying to hack your account, you wouldn't have been hacked. However, it's simmilar to leaving your door open at night and hoping no one simply walks in and steals somthing. Anyone with any common sense closes, and even locks their doors. Is it still possible to get in your house if you have a locked door? Sure. It's alot harder though, and it's even harder to do it without making alot of noise, thus making it not worth it for the would be thief. The same goes with account security. It's still possible to get into your account, but it's much, much harder, so much so that it's not worth the trouble to do so unless you desperately hate the person, most likely know them in person, and have ALOT of free time on your hands.

SO....if you think this way how the hell could you "/not signed"?!?!?!

Using your own metaphor, the "door" in GW is not even near closed!!! There are SOOO many breaches and SOOO many leaks of information (way to go PlayNC) that getting your hands on your "private e-mail" is easier then access your homepage on daily bases.

ALSO, since there is NOTHING to prevent repetitive trying, people that want to hack someone can just keep trying / use a program to do it maybe endlessly, and you will simply never know if this happened or not because the game simply does not have any means to warn you!!!

ALSO, the "thieves" have 100% chance of getting away since NO MEASUERES AT ALL to detect / track them down, are taken place!!!

So, lets get back to your metaphor: if GW was a house, and your password would act as the key for the front door, what you would have on the current scenario is a closed door with a dozen of different keys (including one right one and eleven wrong) hanging on the door handle and a big glowing red carpet on the entrance showing the way to the door. You would also get ZERO alarms inside the house, witch means that once some one is inside, they can take their time to do whatever they want / steal EVERY SINGLE THING you have....

Wouldn’t it be better if there where the option to put some safes inside the house?!?! Also put an alarm on the front door and maybe some security cameras to actually know if anyone tried to brake in while you where away?!?! And off course, we got to consider the careless people, if a system can help them improve their home security without being a burden for other persons why is it wrong?! You think that someone don't deserve the VERY BASIC security options just because they are a little too careless? And allow me to quote OPTIONAL, meaning if you don't think you need this, you would just not ennable it, and leave it to people who realy think they need it.

Do you REALY think we are secure by any means?!

Do you REALY think these upgrades won't benefit the community?!

Latter.

Thomas.knbk · Sep 26, 2006, 02:41 PM // 14:41

/not signed
My brother, not having an email account of his own and thus using mine, wouldn't be able to delete characters anymore

Scavenger Rage · Sep 26, 2006, 03:01 PM // 15:01

Quote:

Originally Posted by Thomas.knbk

/not signed
My brother, not having an email account of his own and thus using mine, wouldn't be able to delete characters anymore

HOW SO?!?!?!?!?!!?!?!?

What is beeing proposed is OPTIONAL!!!!!!! IF YOU DON'T WANT IT, DO NOT USE IT!!!!!!!!!!

Geee....people don't even bother to read the entire thing before "not signing" away!!!!

And how in EARTH wouldnt he be abble to secure an e-mail account for himself to play?!?! I could count over 1 000 000 free and secure e-mails that he could use so this is REALY not an excuse!

Latter.

Caleb · Sep 26, 2006, 03:10 PM // 15:10

/not signed

I don't feel that adding clunky email verifications is the solution to account security.

And Scavenger Rage's rage against anyone with a differing opinion is just downright funny.

Avarre · Sep 26, 2006, 03:26 PM // 15:26

If you're using a confirmation lock only on main PvE chars, that you don't intend to ever delete anyway... this isn't adding any 'clunky email verification' because you wouldn't be trying to delete it. It simply adds another barrier in preventing any form of accident.

Not even hacking - I have friends who have deleted equipped PvE characters by accident several times, and this would help prevent that while providing no encumbrance to people who don't activate it. It's not a question about hacking, its a question about safety.

/signed

Poison Ivy · Sep 26, 2006, 03:38 PM // 15:38

If this is really going to be implimented, please make them PvE chars with at least 50 hours of gameplay

Also they shouldn't affect PvP chars in my opinion..

Kitharin · Sep 26, 2006, 03:38 PM // 15:38

/signed

Having a second password to delete a character or a conformation email would be a good idea.

glountz · Sep 26, 2006, 03:40 PM // 15:40

/signed.

Knight Othin Of War · Sep 26, 2006, 03:42 PM // 15:42

/Signed

i see she was a great fan of King Arthurs Wife Guinevere Castus

Faer · Sep 26, 2006, 04:01 PM // 16:01

/not signed

Individuals should take more steps to protect themselves before requesting or demanding that a company implement more measures to protect them. If one can be hacked with the current level of security, they can be hacked with an added level of security. To be quite honest, every single person who plays Guild Wars is at risk. However, only those who don't take the steps to properly protect themselves need truly worry. Yes, there are some holes that need to be patched. That does not mean, however, that ArenaNet and PlayNC are completely at fault. It also in no way means that they need to go above and beyond the call of duty and add security after the known holes in the current security system have been filled.

Learn to protect yourselves, rather than relying on others to do it for you.

SaucE · Sep 26, 2006, 04:13 PM // 16:13

/not signed

We all should be using better practices for account security.

Suggestions:

- Change your password every 2-3 weeks.
- Don't use personal information in a password.
- Make sure to use atleast 1 capatial letter, lowercase letters, and numbers.

^^ If you play around with combos like that it is going to take a hacker 10 times longer to hack your account. By then you should notice something is happening.

logan90 · Sep 26, 2006, 04:26 PM // 16:26

/Signed

Sure 9/10 times its the victims own fault if they lose their account and characters, but there are cases where it isnt their fault and they shouldnt have to lose all the time and effort they have invested into the game.

Quote:

Originally Posted by Faer

Individuals should take more steps to protect themselves before requesting or demanding that a company implement more measures to protect them. If one can be hacked with the current level of security, they can be hacked with an added level of security. To be quite honest, every single person who plays Guild Wars is at risk. However, only those who don't take the steps to properly protect themselves need truly worry. Yes, there are some holes that need to be patched. That does not mean, however, that ArenaNet and PlayNC are completely at fault. It also in no way means that they need to go above and beyond the call of duty and add security after the known holes in the current security system have been filled.

Learn to protect yourselves, rather than relying on others to do it for you.

Its all well and good protecting yourself, but when its something out of your control (such as the recent NCSoft security problem) the victim shouldnt have to pay. In such events ArenaNet/PlayNC arent fully to blame, but if they dont add a system to prevent the damage then they are to blame. It is inevitable that people will find ways to steal accounts through vulnerabilities (which arent the customers fault) so a preventative system should be put in place.

boxterduke · Sep 26, 2006, 04:31 PM // 16:31

/signed and I hope BG does not quit GW.

Scavenger Rage · Sep 26, 2006, 04:51 PM // 16:51

*Snip* Edited by mod - Scavenger Rage, watch your hyperbole, you're being a jerk *Snip*

Quote:

Sure 9/10 times its the victims own fault if they lose their account and characters, but there are cases where it isnt their fault and they shouldnt have to lose all the time and effort they have invested into the game.

Knowledge of the problem is enough to take measures to solve it, and as the poster above just said, there is a break point where our fault ends, and their lack of security begins. In either situation it is wise to put counter measures in place, not only to help people learn and care about security, but also to cover the breaches and at the same time making more difficult for hackers to exploit them.

It is also nice to point out that NO METTER what security is taken place, there will be always the ones to surpass them. The problem here is that with the current security level the number of people capable of doing so with ridiculously easy methods is alarming at best.

Almost every single online game has some sort of security measures other then the password / e-mail form. ALL battle.net games have a warning message every time you get the password wrong right on the login screen for instance, so you don’t even have to get into the junk e-mail issue (I also don’t agree with e-mail confirmations for deleting btw). Lets think this way for a second, you put 5000 hours on an account, it have a huge value (time IS money) and protecting all this with such a primitive system is rather doubtful, especially in the times we leave now! I mean, my cell phone have more countermeasures then that and I paid 10US$ for it!!!

Latter.

Faer · Sep 26, 2006, 05:25 PM // 17:25

Quote:

Originally Posted by logan90

Its all well and good protecting yourself, but when its something out of your control (such as the recent NCSoft security problem) the victim shouldnt have to pay. In such events ArenaNet/PlayNC arent fully to blame, but if they dont add a system to prevent the damage then they are to blame. It is inevitable that people will find ways to steal accounts through vulnerabilities (which arent the customers fault) so a preventative system should be put in place.

I agree, in a way, as stated in the following quote.

Quote:

Originally Posted by Faer

Yes, there are some holes that need to be patched. That does not mean, however, that ArenaNet and PlayNC are completely at fault. It also in no way means that they need to go above and beyond the call of duty and add security after the known holes in the current security system have been filled.

Patching the recently exploited security holes would be, in my opinion, fixing the system. There is no need to add a system when a perfectly adequate one is already in place. The current system needs to be fixed; that does not mean that a new system needs to be added. ArenaNet and PlayNC can continue to add more security systems until they run out of funding, but that won't change the fact that people are going to get themselves hacked and/or cracked. Once the current holes are filled, if a new system is added, another individual will have their account stolen, and the entire situation will repeat itself, thereby making the entire process a waste of time, in a sense.

In any event, patching will need to be done every time a problem arises. Just like the game itself, there will be errors and vulnerabilities that can, and will, be exploited over time. ArenaNet and PlayNC's time (and resources, of course) would be better spent repeatedly patching/fixing/buffing the current security measures than creating and implementing more every time a problem does rear it's ugly head.

I will say, however, that replacing the Character Deletion step of entering the character's name with a PIN number entry step would be a welcome and wise idea.