Security Question disavantage
The Abuzer
In this week, Anet has brought us an update with a security question witch theoretical, it protect us from hacker's attacks.
All it's good to this point, but they made the mistake to include the remembering of the question included in the e-mail one.
Lemme tell you that about 3/4 players use this option, and now, they can't be protected by this, because they are too lazy to write their e-mail.
My suggestion will be to make separate buttons for these 2 options. It isn't a big programing thing, just 3-4 line codes.
All it's good to this point, but they made the mistake to include the remembering of the question included in the e-mail one.
Lemme tell you that about 3/4 players use this option, and now, they can't be protected by this, because they are too lazy to write their e-mail.
My suggestion will be to make separate buttons for these 2 options. It isn't a big programing thing, just 3-4 line codes.
Arduin
I am not getting your suggestion.
Someone has to be at your computer to view the answer to the security question (character name). From that point the security is your own responsibility.
Someone has to be at your computer to view the answer to the security question (character name). From that point the security is your own responsibility.
The Abuzer
Yea, but checking that box, you get a file in your computer with character name and e-mail, witch can be stolen (hard, but it can).
sunec
Quote:
Yea, but checking that box, you get a file in your computer with character name and e-mail, witch can be stolen (hard, but it can).
|
Arduin is right, if someone can access your computer it's your own responsibility, and no security measures from ANet would help preventing it.
The character name security question is supposed to fix the issue with hackers gaining access to NCSoft Master Accounts and resetting the password of account owners, gaining access without hacking the target's computer.
subarucar
This. If they have access to your computer, there are things I would be far more scared of than my GW account's security.
magao
However, there is the minor issue that many people on the forums have the name of their main character listed on (for example) their profile on this website. Or at least have had (since it seems to be gone from here now).
subarucar
Quote:
However, there is the minor issue that many people on the forums have the name of their main character listed on (for example) their profile on this website. Or at least have had (since it seems to be gone from here now).
|
The only time having my character name here on the forums would worry me is if my GW e-mail was also written on this account.
Bob Slydell
The file you speak of is the GW.dat, which has had the option of holding yours truly, your email address since 2005. Welcome to guildwars.
Tal L
I think we should remove the name of the character because if someone hacks you he intentionaly hacks you because he knows your chracters already, there should be a weekly link to change your password as bellow:
Old password:
Old Password:
New password:
New password:
If you dont, it will say: anet recommand you change your password for your own safty otherwise anet doesnt take any responsiblty for your acount. This is done to promote your safty bla bla bla.
Old password:
Old Password:
New password:
New password:
If you dont, it will say: anet recommand you change your password for your own safty otherwise anet doesnt take any responsiblty for your acount. This is done to promote your safty bla bla bla.
magao
Quote:
Inde removed it due to security concerns. I belive you may re-post it if you wish to.
The only time having my character name here on the forums would worry me is if my GW e-mail was also written on this account. |
Alternatively, if you use the same login name here and somewhere else, and your email address is visible at that other site, and your character name is visible here, it can be matched up (harder, but definitely not impossible).
This is (or was) the situation for many people (not me - email address and passwords are different to my GW login).
Don't get me wrong - I think the additional security is good, and it was a good choice of "something you know" - but it's definitely possible to find it out.
subarucar
Quote:
You supplied an email address to GW Guru when you signed up - that's stored. If that's the address you use as your login, and you have your character name listed here, and you use the same password for GW, bingo - there's a match. Or as another alternative, GW Wiki.
|
The Abuzer
Div
The point of the security question is so that when a random person steals your account from the bugged ncsoft site, they only know the email and password, and wouldn't be able to access it, unless you're the target of a direct theft. Most of the leaks on their website is completely random, which is what the security question is protecting.
Turbo Ginsu
IMO the security question is the best way yet of ensuring that the toon that is highlighted is the one you want to play. Fast login ftw! Better still, if u start favouring another toon, u just change the toon name in ure security question box to correspond to that toon..
Too bloody easy!
Too bloody easy!