Security question needed!!

ok so that i wont have to retype heres what i sended to GW through their support system after trying to get my lost account back... for the record I NEVER USED 3RD PARTY PROGRAMS NETHIER GAVE MY ACCOUNT TO ANYONE. and to keep things short and subject related let's just consider the suggestion and not how i lost my account:


Discussion Thread
Customer (Ryu Ryo) 07/09/2006 03:21 PM
ok since i don't have my access key anymore and therefore my account will never be mine again... i would like to ask you to take higher security methods regarding the Account's email adress changes. so that cases like mine will not happen again and maybe i can buy the game again and start all over with the feeling that such thing could not happen to me again.

how about adding a Security Question.
this method is probably known to you from other places.

add a security question if an Owner (or in my case a hacker) attempts to change an account email adress. he will have to answer that question before changing the account email adress. if he have the password for the account, that will only allow him to change password (which can be retrieved by "Reset the account password" option.)

the security answer for the securtiy question cannot be retrieved thruogh the email, only through contacting your support directly and supplying access key and other perssonal information that only the REAL owner can possibly have.

this step should prevent further accounts been hacked and safer feeling to the community.

this is more than just a suggestion i ask that you consider to take this step to ensure better feeling for owners of the game.

i'll wait to hear from you if you think this is a good idea and seems affordable or considerable.

i'll also check your website if such change will be made.

thanks alot, Ryu.


i sadly wont be here to reply in the near future (computer power supply broken and currently using a friend's comp to post this) i will see the replies from the email as soon as my comp is fixed.

If I remeber correctly, to change the e-mail, you must first have the password. Now, that means that someone had your password, and I'm almost positive that Guild Wars is un-hackable, therefore you must have either; used a third-party program that was secretly a key-logger, have a password that is super-easy to guess, or you gave your password to a friend, and they stole your account. And in any of those three cases, its still your fault, so don't blame A-net for not having a security question.

If you actually read the post, you'll see that OP is not assigning blame to A.Net, but rather suggesting improvements to prevent ignorance or stupidity from getting peoples accounts stolen.
To some, even basic computer security rules are unknown (like, don't use the same accountname/password two places), and the rest of us can still get unlucky.
Although the suggestion posted may not be an efficient improvement, I see no reason why A.Net shouldn't constantly work on bettering security, which I assume they do. Some users just need protection from themselves..

Yea, ok. My bad then. I guess I misinterpreted the post. Sorry.

I dont see how they got your password then... They had to have had your password to change the e-mail, IF they had the ability to get that, well then they would be able to get the question answer, therefore defeating the purpose right?

No security questions. x_x Gawd I hate that *beep*.

If one of those would be added, make it optional. Nothing like making a more easily guessed 'question' to protect your secure password. I've usually just whacked some random keys to those anyways. :b

respond to last post:

well obviously give the users to think of their own question themslves.

and i didnt used any third progs....

my email password and gw password werent the same one... it's wasnt an easy password to guess (nothing like 12345...)

and i never saw an email request to change my account email in my email...

and for the one before last post:
having the password wont give u the option to see the answer neither to change the email... only to get inside the game account and change the password not the email... (changing pw wont give a stranger much of a thing cause u can still get it back through your email) ONLY to change the email account will you to answer the Secret(Security) question... *and also to confirm it in your email* (which already exist)

more clear now? this will ensure that even if you were to give someone your account or a friend that was in your house saw your password (obviously a friend of that type wouldnt steal your account) will not be able to change the email adress... it's just an addtion, not coming in replace of other things.

Well, if the hacker gets your password, or is able to log into your account, the damage has already happened. They are able to transfer every single piece of gold and items you have, and delete the charas, thus the security question doesn't add any additional "security".

I hold my charas and items I've collected in higher value than the account, anyways.

lol u cant be serious Kaguya a hard earned rank 6+ after months of work is waayy more important than gold even 1241512 GOLD.... and u can always get your char to the max and more money... the point is the UNLOCKED skills and the rank... and the account itself cost real cash ... well u probably one of those that have money in piles :P

Yeah, the account cost some 50 bux, oh ladidaa. The thousand hours I've placed on improving my PvE charas and grinding the titles is worth a lot more than those 50 bux I paid for the account. :P

IIRC, when you change the email you have to click on a confirmation link IN THE ORIGINAL EMAIL ACCOUNT to confirm the change; not just in the new one. So, as long as you keep your email account secure, you should have no problems.

yeah well it was secured... pw for the gmail account (was gmail :P) and the gw account werent the same one... so even if he got in the gw account he couldnt get in the gmail... and i havent seen any request to change the email adress of gw in gmail.. not in the archives not in the inbox not anywhere... it has been changed without my premission and without that i even saw it...