Forum and game security discussion

[Jarod "Brickwit" McBrickerton]

Zen, I agree with you completely here - not everybody will want to go through extreme measures to log into a game. But some people wouldn't want it any other way, which is why I suggest an optional additional security measure that could be enabled or disabled by each player. Take EU's Gold Card for example: if you purchase it (or have one sent to you based on your deposit total) and enable it, you will be required to use it to log into your account, but if you don't have one or don't enable it you can still log into your account without it.


And the point about email taking a while is probably the best reason not to use it. Many times an email comes through, but more often than you might expect there are long delays between an email being sent and when it is received. The same is true for SMS messages, unfortunately. These facts being the case, I can see why the Secret Question has been the primary way to increase security in other MMOs. The questions are already on the server, all we have to do is provide the answers.


So the best way to provide a combination of extra security and account-owner customization is to require at least one Secret Question, but allow several more. And the best way to answer those questions is with answers that do not make sense for the question to make the SQs even more effective.

[The "Fifth" Entity]

Account tied up to a certain IP or MAC address, and the secret question(s) will pop up only if it's different than last time when you logged in - that seems like reasonably safe solution without too much hassle.
Even if you don't have static IP, the ISP's usually tend to give you the same IP again rather than a new one, especially if it changes while your modem is switched on. Most ppl don't plug off their modem very often anyway... so most likely you won't be bugged with this secret question very often either.

For those people who want extra security (and are happy with the additional hassle) there could be an optional GoldCard-type system (just a file with a list of unique numbers sent to your e-mail) or a security phone-app - sometimes in the future...

[Alyx "Daisy" Johnson]

as long as you define the question yourself.

Unfortunately, there are too many What City Were you born in? type questions, and people answer them honestly. This type of info is fairly easy to find out.
The additional questions are not real 2 factor authentication either - It's just a front, the same as a second password. You should assume it's just as secure as your password is.

[Jarod "Brickwit" McBrickerton]

Exactly, the questions need to be created by the user to get the best security out of such a system.

[Marcelo "Mangucho" Bravo]

hello people wanted to do a query that happened to our characters were deleted the old version or something? all modes this account that the ise haro estoi using my other user recently was fantasmarg if I could answer from Chuchas and thanks.

[Event "Janе" Horizon]

hello people wanted to do a query that happened to our characters were deleted the old version or something? all modes this account that the ise haro estoi using my other user recently was fantasmarg if I could answer from Chuchas and thanks.

Ummm - sorry, cannot work out what you are saying. Perhaps  you should rephrase your post? Maybe using a translator like translate.google.com.

[dale "dalewj" ofj]

You at the moment have 2 avatars.  1 in the old game one in survival.  The old game account is the active account.  IF it gains skill you keep it.  The account in the new game is a test account.  Whatever you do to it will be deleted at some point.

I think that is what you asked.