Security Token shouldn't be required to sign in

[Cream_Soda]

I don't think the security token should be required to access the forums. I use forums not only at home, but also when I take my laptop out. I like to leave my token at home so that I don't misplace it.

I don't like the idea of having to carry it around w/ me everywhere just to access the forums.

Turning the token off for the forums should at least be an option.

[Vold]

You can access the forums, you just can't post. Take away the token log in and I'll bet 100 dollars people are way more likely to troll which I'm sure is a goal for SE here, to prevent that.

[Cream_Soda]

That makes no sense.

"I don't have to type in my one time password, so I guess I'll troll"

[Auriga]

It makes perfect sense, i hereby vote against your idea to remove token use for login.

[Cream_Soda]

Please, tell me the relation of holding a token in your pocket and bringing it with you is less likely to make you troll.

[Auriga]

@ Cream_Soda - owning a token doesn't reduce the chances of you BEING a troll,
though the setup relating to it's use on this forum certainly decreases the "risk" imo.

[Cream_Soda]

People w/o tokens don't need to use them though, they just need their SE info. No reason for people who use them in game to have to use them for forums.

[Auriga]

@ Cream_Soda - The system for which SE accounts were created was to enhance
the users login security an all, the forum is built around that. No matter how much
you disagree no one shares any love for the "troll" and as such it won't be tolerated.

Infact any measure that works against a troll is likely to be kept, I'm sure the tokens
use here isn't solely for this purpose but it has my vote if it keeps them away.

[Cream_Soda]

What you don't understand is tokens have 0 relation to trolling whatsoever.

Let's say I'm going to troll for example.

I'm a forum junkie. I'm going to be on the forums whether I'm home or not. The only difference whatosever is that I'm now bringing my token instead of leaving it at home.

How does this in any way shape or form prevent one from trolling?

[Akary]

I think it should but put a cookie in so if your on that machine you remain logged in if you choose to do so.

[Auriga]

@ Cream_Soda - There is another post on this section where someone asks about
allowing for multiple forum names under one token where their situation is the token
is linked to several accounts in their household, can you begin to see where things
might go if unchecked? Now I'm not saying it's fair to that household but it certainly
proves the tokens effectiveness in forcing ONE user name.

PS: Not to sound off-set but a Beiber signature? seriously? this is just ME but that
signature alone looks/smells like trolling "gear".

[Cream_Soda]

@ Cream_Soda - There is another post on this section where someone asks about
allowing for multiple forum names under one token where their situation is the token
is linked to several accounts in their household, can you begin to see where things
might go if unchecked? Now I'm not saying it's fair to that household but it certainly
proves the tokens effectiveness in forcing ONE user name.
The token has 0 to do with trolling. This is just the number of accounts linked to the specific square enix account.

You get 1 posting name per square enix account, regardless of whether or not you have a token.

Let's say I have 3 accounts tied to my SE account/token. I deactivate my token today. I don't get 2 new posting names for the other 2 FFXi accounts tied to my SE account, regardless of whether or not the token is there.

What you're speaking of is 100% a SE account issue, not a token one.

[Auriga]

@ Cream_Soda - Your missing the part where I said the SE account system was intended for
use with the token. The fact that pre-token you can use this system doesn't intend for it to
be used as such forever. I can't speak for SE here but I'm sure the intention was to have
people using tokens regularly.

In the end it promotes security as your SE account is tied to your game account anyways
why in the world would you NOT want enhanced security considering how much time goes
into some of these accounts/characters?

Besides I'm sure SE doesn't wanna get emails about "my forum account was hacked
blah blah" anymore than they already do. If you don't wanna use a token here you
prolly shouldn't be using one at all if your that annoyed imo.

You can disagree but I'm walking away.. mostly..
because of that signature.. >.> buh-byez.

[Cream_Soda]

The fact that pre-token you can use this system doesn't intend for it to
be used as such forever. I can't speak for SE here but I'm sure the intention was to have
people using tokens regularly.

You MUST have a SE account to use these forums, whether you have a token or not.

Again the token has 0 to do with this argument.

This situation has 100% to deal with square enix accounts and absolutely 0 to deal with the token.'

It has nothing to do with agreeing or disagreeing because I'm not arguing or making any points about security. I'm talking about tokens having 0 to do with trolling, which it absolutely has nothing to deal with.

I'm not sure what part of that you're unable to understand.

[GlobalVariable]

No matter how much you disagree no one shares any love for the "troll" and as such it won't be tolerated.

Did you just troll while taking about trolls? Its equally simple to troll with a token as it is without one.

I hope in the future they have a separate log in process which won't use the same information as my Square Enix account, because having to hit the button just to post is irritating but disabling the token while still using the same login info can be a serious security risk. I say just use it for sign up verification/link the forum account and after that use separate password so that if the forum account becomes compromised my game account isn't.

But trolling has zero to do with the token, that is simply absurd.

[Harnao]

I'm not sure why they made the forums smart phone compatible while making you use the key tolken. Why bother making it work with smart phones when no one will ever be able to log in with one away from home?

[Niakohr]

When I am at my home computer and have my security token, I play the game. When I am away from home, I check forums and do not have my security token.

I only logged in using the security token today to see if it was a one-time thing that you needed to register, but not to log back in. Unfortunately, that is not the case.

Unless it is changed, this will likely be my one and only post on these forums.

P.S. Auriga, that is one of the dumbest arguments I've ever heard.

[kaht]

The troll <=> no-token correlation is one of the most ridiculous things I've ever heard.

As long as you're logging in with your S/E account and password, there is no question about who you are. You, and the character you play will be held accountable for any breach of conduct that you display on these forums. As was said above, the existence or non-existence of a token has 0% bearing on this fact.

Please, get rid of the token login requirement.

[bramble]

I too feel the security token for forum log-in is unnessecary and has no bearing on trolling what-so-ever! If people wanna troll, they' gonna troll, regardless of having a security token or not. I would also like the option to change user name as i stupidly got confused and thought this was the FFXIV forum >_> --my bad, i know but it would still be nice to use my XI character name, rather than my XIV character name.

[Gunit]

@Auriga
I don't think you know what a troll is.
Because a token has nothing to do with it.

[tia]

what r u talking about everyone that i know has the thing on there keys i always have it i can log in here or anywhere with my laptop so i take it everywhere

FFXIV is the same way on both game and forum sites all SE sites use the one time password to log in

its not a big deal

[Starcade]

It makes perfect sense, i hereby vote against your idea to remove token use for login.

As do I.

The Security Token is really the only thing separating you from a hacked account -- in-game and on the forums.

Even then, it might not do it all the time, but we all know that there are people out there who will gladly take what they feel is theirs (read: everything).

[GlobalVariable]

Having the forum use the exact same login as the game is in itself a security risk. Everyone without the token is made that much more vulnerable by it.

[Starcade]

With the exception, though, that the token changes numbers, I believe, every 30 seconds, reducing said risk, GV.

[Claquesous]

Now that I'm home, I can finally respond to this thread. Yes yes yes! Change this now!!!

Arguing that a concern over one's security makes someone less likely to show a modicum of restraint is about the least logical argument I've ever heard. It was also the most pathetic display of "anti-trolling" trolling I've ever seen.

Also, encouraging people to type in sensitive login information on untrusted machines is about the biggest security risk imaginable. I would never EVER login to my SE account from a public computer. However, I would be glad to use my normal forum password from anywhere.

I was pleasantly surprised that I needed my one time password to register. This is an excellent anti-spam defense. However, I was shocked when I found out I needed my one time password to login every time. For my money, this renders the forum virtually useless.

[HFX7686]

I don't take my token with me when I go to work or on holiday. I do take my laptop and read forums.

I would like to be able to sign in from multiple machines without having to use my token.

I don't want to deactivate my token off my FF11 accounts just to be able to do this.

Please change it.

[GlobalVariable]

With the exception, though, that the token changes numbers, I believe, every 30 seconds, reducing said risk, GV.
Having the forum use the exact same login as the game is in itself a security risk. Everyone without the token is made that much more vulnerable by it.

<minimum non quote text requirement here>

[Byrth]

Currently I'm on holiday. I wouldn't be able to post this if I hadn't unlinked my security token. Haven't really missed it.

They're covering themselves and making it harder to get angry at them, because once you put a security token on an account you've accepted personal responsibility for its security, while before (when we lacked the ability to keep our accounts secure) it was ambiguous. By making you go through the same security before you post (and potentially endanger your account), they insure we don't yell at them as much when we get banned.

I deactivated it. My account is less secure, but it's a lot easier to log in. Cost/Benefit. FFXI accounts aren't worth anything anymore and there's no market for them. Pirating accounts is more trouble than it's worth.

The real security issue is saving your password to this site with a deactivated security token. The SE account password/etc info must be stored in a cookie somewhere, and your character account password is stored in your insecure POL files. Anyone with access to your computer (via malware) would have both halves of the code and be able to log in without even using a keylogger.

[Wade]

Are you guys logging out every time you leave? I have been logged in since the 8th. I only had to log in on Tuesday and apparently it saved a cookie or something because whether I am at home or at work, it still has me logged in when I come back to the site. I only had to use my token the first time I logged. I am using Chrome, not sure if that has anything to do with it and that when I logged in the first time, I checked the little box to "Remember ID".

[Dantel]

i think it does that already they are one step ahead of you

[Bojack]

@ Cream_Soda - Your missing the part where I said the SE account system was intended for
use with the token. The fact that pre-token you can use this system doesn't intend for it to
be used as such forever. I can't speak for SE here but I'm sure the intention was to have
people using tokens regularly.

They made the token cause it was easy money lol, they don't care how many people use it. Why do you think they threw in the little Mog Satchel with the purchase. It was the perfect combo. 2 things FFXI players would always complain about: getting hacked, and not having enough inventory space. I'm sure half the people that bought a Token paid 9.99 for a Mog Satchel and deactivated their Token as soon as they got their inventory space...I know I did lol.

[Volkai]

I don't think the security token should be required to access the forums. I use forums not only at home, but also when I take my laptop out. I like to leave my token at home so that I don't misplace it.

I don't like the idea of having to carry it around w/ me everywhere just to access the forums.

Turning the token off for the forums should at least be an option.



I wonder if you have noticed that this forum uses the same SE ID Login system as the LSCOM Beta, FFXIV's Lodestone, FFXIV account management, SE Account management, FFXIV Login, and a system very similar to that seen when logging into POL.

In short, because it's a general-purpose login system, there are only two ways to have it not require a security token to log in to this forum: 1) either do not link, or subsequently unlink, a security token to your SE Account, or 2) remove the security token system from the SE ID Login system, rendering them null.

Option 2 is extremely unlikely to occur, since it's safe to assume that security tokens have caused a noticable reduction in the number of hacked FFXI, FFXIV, and by extension SE accounts. Option 1 is a personal choice for you to make.


SO it comes down to this: which is more important to you, not having to hassle with a security token to log into these forums, or having the additional, well, security of a security token protecting your FFXI (and FFXIV, if you play that) account?


In short:

Turning the token off for the forums should at least be an option.
It is an option, it's just a crappy option.

[Cream_Soda]

SO it comes down to this: which is more important to you, not having to hassle with a security token to log into these forums, or having the additional, well, security of a security token protecting your FFXI (and FFXIV, if you play that) account? What do these forums have to do w/ my ffxi account though rly.

If let's say my username/password gets keylogged they can log on as me into the forums. Big deal? They can get that info whether or not I have a token.

If they try to take that and then go to the game or even directly to my squreenix account itself, they still need the token password to get in.


The least they can do is add an option

"Keep me signed in for 30 days" or something like that so I won't have to sign in at all. Then i wouldn't mind the token only having to do it once a month,

[Hinabi]

What do these forums have to do w/ my ffxi account though rly.

If let's say my username/password gets keylogged they can log on as me into the forums. Big deal? They can get that info whether or not I have a token.

I'm not entirely sure about the forum policy and how your actions on here could subsequently effect your Square Enix Account or FFXI characters but if someone had access to your forum account they could post malicious things on here under your name and you could be held accountable. The same link tieing your forum account and SE account together to prevent you from trolling, is the same link that could get you banned if someone hacked you.

I initially agreed with your argument but after some thought I realized I don't know the amount of personal info a hacker would be able to learn about me from my SE account if they seized my forum account. It sucks because I leave my token at home but it's not worth the risk.

[cidbahamut]

I've noticed my browser actually keeps me logged in indefinitely now (or at least multiple days and through reboots).

[Maiev]

It's definitely a little inconvenient. I do have spare time at work and sometime even if I have an idea to post. I just don't have the token with me. Carrying the token is a matter of preference for everyone (some people like to have them, I already have two for work, I don't want to carry a Square-Enix one lol). But options are always nice, to not "require" tokens on Login.

If anything, each account must have an active POL linked to SE account in order to be able to post on the FFXI, plus your forum username is tied with your Square-Enix account so.. trolling is rather hard. Unlike other forums, you can simply sign-up for another name.

[Kari]

I no longer use the annoyance that is a Security Token.
I don't see any good reason to require it every login just to post, either.
If someone wants to make it so they don't have to use the token to use the forums, they should have that option.
It's about the same as someone de-activating their token for this reason.

Also, lol@Auriga. Acting all high and mighty about something that made absolutely no sense.
There's no real reason to troll on these forums anyway. Nobody will notice it, and you only risk your account.
The lack of intelligence around here is already enough of a troll.