I detect an internet vigilante!
Printable View
[NA] Linking Character Data to Forum Profiles
We would like to announce a new function enabling players to link character data to their forum profiles. This feature will go live as part of the FINAL FANTASY XI Forum maintenance scheduled for June 28, 2011.
At present, players are required to use a Square Enix ID when logging into the forums. Characters on the PlayOnline ID associated with this Square Enix ID will now be displayed in forum profiles. Players with more than one character registered to their account may select which character to link.
After logging into the forums following the maintenance, players will be taken to the Profile Settings screen and asked to choose an active character. Forum posts cannot be made until a character has been selected.
Forum profiles will now display the following:
- Character name
- World name
- Up to three jobs and levels of a player's choosing
* The above information cannot be hidden.
Players will retain forum handles.
Since this was the original post about the changes being made, there is nothing mentioned about non Na servers. I assume we will still be able to post to the forums without the character links
Forum profiles will now display the following:
- Character name
- World name
- Up to three jobs and levels of a player's choosing
* The above information cannot be hidden.
Linking personal character information and which server the person is on with their SE account information is a great way of linking hackers information to make it easier to breach security. Yay!!
You're absolutely ignorant if you think hacking works that way at all.
Knowing your Character name, server, and jobs is completely useless and irrelevant information to a hacker. You don't need any of the above to get a Playonline ID or Password.
Furthermore you already log in here with your SE ID and Password so, Nothing new there.
You people must really be new to the internet if you think something like this is going to open floodgates to mass hacking.
Edit: And really, "Personal" Character information? I've been over this. If we're going to assume this is real life information, it would be like saying
*Your first name
*The Country you live in
*Favorite Color
None of these make you more susceptible to hacking. because its vague crap that no hacker needs to get your information.
the only way you're going to get targeted for a hack is if you really really P*ss off the wrong person and they go after you every way they can. Even then, Taking simple steps to protect yourself like the Security Token, and simple Internet programs (NoScript, AdBlock) help.
Why does it matter? If someone's a problem in game his server will already know his character name is a problem. If someone's a problem on the forum people on the forum will already know he is.Quote:
Positive #1: Knowing what server Hordecore is on.
Accountable to WHOM? WE already are held accountable for our actions by Square Enix aren't we? If you're arguing for more accountability start by explaining how we aren't accountable right now and why I should throw away some privacy for this particular method. SE certainly knows all our in game names already.Quote:
Positive #2: Accountability. Even if people side-step it with mules. Better than nothing.
I'm all for accountability but I don't see this increasing accountability at all. If we have problems not being taken care of this won't fix.
I don't even know who/what that is, so no comment.Quote:
Positive #3: No more sock TearValerin BS.
Our login credentials are already the same, showing names can't make it any easier to hack you.Quote:
Linking personal character information and which server the person is on with their SE account information is a great way of linking hackers information to make it easier to breach security. Yay!!
Tell that to Sony playstation........If you give hackers the starting point they will find a way in. I think its actually a good thing to have the information linked but not public. If you want less people to use the forums carry on. you will then end up with a few people making the decisions for the majority who dont care about the forum rules. Sounds just like politics to me. Few loud mouth peoples opinions overriding the majority who dont care less.
No, To completely different situations. I'm sorry..
Your Name, Server, and Jobs are completely irrelevant information for Hackers. They do not need any of the above to hack your account. If you were to get hacked it would not be because of this.
If they wanted you hacked, They wont need your Name, Server, or Jobs. They could do it without.
hence - Irrelevant Information. You will be absolutely no more susceptible to hacking after this update than you are right now, because the only thing being displayed is information hackers DO NOT NEED to hack you. When you log into Playonline do you enter your Character name, Server, and jobs? no.
It is absolutely worthless information to a hacker. Because they don't need it to hack you. They need your Playonline ID, Password, and your SE I.D, The problem is the 1-time Token Password, making it almost impossible to be hacked unless its happening real-time.
Which is even further unlikely if your protect yourself with things like Adblock, Noscript, and safe internet browsing.
So to a Hacker, your Char-Name, Jobs, and Server are useless information, none of it is necessary to hack you.
Edit: Edited for nice-ness.
Oh no, how will I be able to make threads about subjects that I have no clue about now!?
you might want to revise that, because it isn't "if you give hackers a starting point they will find a way in" its "if you piss off a hacker and expose the right starting point they will find a way in"
real hackers are explorers searching for information, they don't just hack without reason, why would they want your account, what makes it so special?
besides, the attack on PSN was the entire network not individuals so as Karbuncle said, your point with that is irrelevant
My concern is more the digital footprints we (unknowingly) leave behind. Someone ambitious enough with a name and server could track down a linkshell forum, from there there might be a thread where people share pictures or other RL information like their job or roughly where they live when it comes to planning good times for LS events. Even an innocuous slip of a first name from someone the person's more intimate with could lead to a clue that would further direct someone to a blog or social networking site where cross-referencing info can help narrow down possibilities. With the existence of sites that attempt to append email addresses to real people, that can also cut down on time needed in investigation.
Is all this possible now? Yes. Is it a guarantee that a poster with Handle Y is using that as their in-game name? No. Are there people who feel "obligated" to preserve some level of "knowledge" or "skill" here and will go to any length to do so? Yeah. It's not too hard to get on their bad side, either, especially when it comes to opinions.
Even so, while the boards might not be the sole instigator of malicious intent, it could later become a point of reference for those digging up dirt on someone. Mules aside, the only option people concerned have with this is to not post, and that's not good business.
Absolutely any information you leave anywhere can become a point of reference for someone digging up dirt on you. There is just nothing significant enough to warrant any fear whatsoever over your virtual character's in-game information being linked to your forum handle. You'd be better off fretting over the fact that you post in language-specific boards and that someone could determine what region you live in that way.
I can't believe how much exaggeration is going on in this topic...
Unless you know and trust everyone on your server (who can see both your in game name and linkshell name), that argument is a chromosome short of normal. You're infinitely more likely to pick up a stalker from your own server, and they already have all the information (and more) that you could get from the system SE is proposing.
Now, with exactly what I've said in mind, try and think about why this information would necessarily not make the system any less secure. Hint: Look at paragraph 1 again, but replace "stalk" with "hack"
You're making public information . . . more public? Don't be idiots. There's essentially no risk involved.
a lot of exaggeration will always happen due to paranoia and it seems we have many who are paranoid if their char info is released it will tell personal information about them, but the truth is it wont, any personal information they are looking for they will need to find some other way
It can work that way. It doesn't always. People suck. Generally? People are just best off not associating with bottomfeeders anyways. Being male and/or pretending to be male helps too. But those are preventative measures rather than solutions.
Byrth hit the nail on the head though. Your 5,000 person server already has all of this information. Who the hell cares if a few more people have it now?
Being on the same server is on some levels more limiting. They won't have access to linkshell/party conversations unless they happen to be in the party/linkshell. Shout wars are one angle, yeah, but that's something I've usually just avoided due to the inane, of unrelated to the game, content being slung around. We're also largely past the days of Kings drama, and while little tiffs inevitably spring up here and there over popping mobs or claim jacking, ego flexing has tapered off significantly. Even then, being on the same server doesn't automatically give them a clue on how any person plays or even when. We're effectively phantoms once we're offline or text scrolls from view.
Not quite the same for boards, where this post and all we've made will remain for however long SE hosts them or google makes a back-up copy. Players don't even have to be on at the same time to pick a fight with one another, and an issue someone dropped weeks back could suddenly be dredged out of necrobump hell just because they thought they were being smart/cute/witty/WINNING!/whatever. I suppose with the average FFXI player being a college male or older these days, the fear of being stalked isn't really there. Regardless, a toggle would not harm while at the same time offering some peace of mind.
Excuse me but knowing my in game name was exactly how it began for me (different game, years ago). Blist doesn't do s*** for you when they keep making new characters (vanishing before a GM bothers to make any kind of record) and eventually pretend to be some friend of a friend long enough to get information from someone you know. Not to mention the potential to get trash talked by random strangers who log out before a GM arrives to say "just blist them" yeah, so they can keep talking crap about me and lie about things to everyone else that I can't see to defend myself from, awesome! Oh we want people to be accountable. Sure. Right. Accountable for that omega ring, accountable for that unpopular opinion, accountable for everything but whats actually against the rules that should already be enforced and thus not need a feature that we'll pretend actually increases accountability for bad behavior. /ramblerantoffrustration
Oh gee. Forums hold people accountable for their actions? You don't say.
Yes. If someone says something really bloody stupid, people are going to be able to dig it up and find it 6 months or 6 years from now.
Solution? Don't be stupid. Be responsible. Keep in mind that everything you say might be remembered forever. Look before you leap and think before you speak. Age-old lessons that everyone here should have learned anyways.
I really can't buy the stalking angle, though. These forums don't even have a bloody PM function. No one is going to start stalking someone because they badmouthed Red Mage while having a female avatar on a forum. If they do? Report their post and they can be potentially banned from the forums / game. Any sort of facebook / real life information that people could garner from the forums was and has already been available to everyone on your server anyways. My personal advice? Don't let things from your online persona link you to your real life any more than you want them to; and always assume that if one person can see it on the internet, everyone can.
Edit: GV, if you care what everyone thinks about you you're not going to have a lot of fun no matter what they do. Do I care that the majority of these forums think I'm a mean-spirited, egotistical, narcissistic son of a biscuit? Nah, not really. I have great friends in game, who I've know for years, and who all know that I'm nice to a fault and fun to hang with. Who cares what rumors some jackhole spreads about me? My friends all know me better. That's all I care about.
Yeah thats totally it /rolleyes. If your being accused of crap like nin lotting groups are going to avoid you. But the most trolltastic jerks are proud to show their in game names.Quote:
Edit: GV, if you care what everyone thinks about you you're not going to have a lot of fun no matter what they do. Do I care that the majority of these forums think I'm a mean-spirited, egotistical, narcissistic son of a biscuit? Nah, not really. I have great friends in game, who I've know for years, and who all know that I'm nice to a fault and fun to hang with. Who cares what rumors some jackhole spreads about me? My friends all know me better. That's all I care about.
That accountability for bad behavior on forums is in your imagination. I've seen people post screenshots of those they've goaded into crap "for the lols". That kind of person is NOT worried about their rep. And don't even try for the "it must suck to not have friends" crap. Yeah sure they'll all sit in PJ at odd hrs for me to defend my name form joe random slanderer who's PO'd about something I said on a forum and just wanst to hassle me, right, sure.
Let's see here. I dare say it's impossible to accuse me of ninja-lotting when I don't do things with people I don't know, Bob.
Protip: No one who you'd actually want grouping with you is going to take some retard's unsubstantiated shouts or /tells seriously. I mean that. So what if a few less random full-aurore pickup groups want to deal with you because some tard made up some story about you kicking his puppy and stealing his Rani? Does that really affect you at all?
I've seen it happen to others.
You feel safe and so dismiss anyones concerns over this change.
You know whats got me riled up? The idiocy of acting like anyone concerned must have been a bad person/poster/player/stupid. Imagined positive effects are a close 2nd.
This thread should have died pages ago.
Just wanted to add: shout groups are the root of all evil. You can't join shouts without encountering stupid and unfortunately some of us do have to join/use shout groups for some things. Example was crappy but I meant to point out you can't all hassles it by blist. And why is my name Bob now o.O?
Accountability is fine, but this doesn't achieve that. Moreover, it's not our job beyond reporting overt offenses (porn/hacks/etc) or the more questionable ones the mods can later judge. If you want the inmates running the asylum approach, just look to Zam. Of course, for the BG regulars, that's just as bad as here.
Do I feel safe? Definitely.
Should anyone feel vulnerable? I really don't think so, bad player or not. Who is going to take some random guy's word at face value these days? Short answer: No one that you'd want to associate with anyways.
If someone you're grouping with is willing to believe what some random Jeuno shouter says about you, what else do you think they're going to believe later down the road? It's not a matter of avoiding the Jeuno shouter, because there will always, always, always be someone else lining up to take a shot at you no matter what is or isn't on these forums.
What matters is who you're grouping with in the first place. Find people who don't take rumors at face value. Who know you as you, and know that you are innocent until proven guilty. Do you want a girlfriend who will take any stranger's word that you're cheating on her? Hell no. You want a woman who trusts you until her private investigator sends her the pictures.
Sorry GG I was starting to direct my irritation where it doesn't belong. Some of my previous points still stand however. As well as just the general "sh** happens" I was aiming for and missed.
Here's something interesting. It took me 5-10 minutes to find a player on Carbuncle Server that potentially has 1.25 million worth of auctionable gear for his/her 90 DNC, and was recently trying to move over 1 mill through bazaar. All I needed was two sites--one was SE's. A simple search on name, picked the one from Carbuncle, and it gave me the LS names as well as bazaar info. Went to SE's site, and pulled up the LS, viewed the profile, and saw additional gear that player has for that job. All I needed was name and server.
So, in other words, while name and server alone isn't enough to technically get you hacked--it can very easily help someone narrow down whether you are a valid target if they happen to farm the rest of your login info. I really don't see how forcing us to provide name, server, and job levels is meant to enhance the forums.
As for the token...it is just a heightened method of security, but it is not entirely full-proof. No matter how it is crafted to work, there is a numeric pattern to it. Granted, it may be a complex algorhythm, but it is mathematical in nature and therefore does have a pattern to it. Granted, it can be an insanely difficult thing to crack, but given enough samples on one cipher, someone may eventually be able to crack the pattern. Fortunately, there simply isn't enough of a market to swipe someone's gear for that kind of thing now, so it is likely no one is even bothering with it. If anyone is still farming login info to steal stuff like in the past, they are likely going after people without the tokens. For those people, once they get the sign-on credentials they can very easily track down some details on the characters on that account to determine if it's worth it to monitor when they log out of the game and then get on that account to swipe stuff.
Back to the issue of forcing us to publish character information, it didn't take me but a few minutes to find out a lot of info on this one person--job levels, crafting levels, two samplings of gear equipped for DNC, and how far they've progressed through most all mission tracks except abyssea. But, seeing they have Twilight gear equipped, they've completed Abyssea. I could have gathered that info from a number of places, including just seeing them in game. So this change really serves no purpose other than to identify people who are using a different handle than their FFXI character name. Once that is determined, what purpose does that serve? Gives you the ability to pimp-slap someone because they don't show they have a job leveled to 90 when they post something about that job? Give someone the info they need to track them down in game and harrass them if they don't agree with them? While these may be extreme...it IS a possibility, and there HAVE been people known to do this kind of thing in the past. Try to spin it any way you want, it IS a real possibillity.
You're really, really reaching. You make the assumption that the RMT/"Hacker" already has someone's login information, and then you say that knowing via FFXIAH that someone has a few million worth of gear is going to make them more likely to use that information?
It's not like the RMT is being backtraced and caught by the FBI when they hack into people's FFXI accounts. They do not need to look you up on FFXIAH to determine whether or not you are a solid target. They can log in, see if there's anything on your account worth a penny, take as much of it as they can grab before you lock it down, and then try to sell off the account if, for some reason, no one locks it in time.
If someone has your login information, they are not going to pass on using it just because they can't see your FFXIAH information. That is all it comes down to in this particular situation. Does this move enhance security? No. Does it inhibit security? No. This change is fundamentally independent of anyone's character security. Besides, so what if someone knows you have a few level 90 jobs? You are creating an identity link between a name on a forum and a name on a server. If you had your information published on FFXIAH, it would be available anyways. If you don't, it will remain unavailable. I cannot tell you how absolutely ridiculous your security argument sounds right now.
Is the security on the site perfect, using our SEID to login? No. Does this change affect that in any way, shape, or form? Absolutely not. It won't be any more or less secure than it was 5 minutes ago. If you don't like your SEID and password being used to log into these forums, don't log into these forums.
I think you more or less just proved GG's argument of this just "Making public information, more public". This Information is out there already, its public information.Quote:
Here's something interesting. It took me 5-10 minutes to find a player on Carbuncle Server that potentially has 1.25 million worth of auctionable gear for his/her 90 DNC, and was recently trying to move over 1 mill through bazaar. All I needed was two sites--one was SE's. A simple search on name, picked the one from Carbuncle, and it gave me the LS names as well as bazaar info. Went to SE's site, and pulled up the LS, viewed the profile, and saw additional gear that player has for that job. All I needed was name and server.
So, in other words, while name and server alone isn't enough to technically get you hacked--it can very easily help someone narrow down whether you are a valid target if they happen to farm the rest of your login info. I really don't see how forcing us to provide name, server, and job levels is meant to enhance the forums.
Think of it this way, if you were going to be targeted by this god-like hacker who could not only target your personal computer with a keylogger/etc, but could get past the Security token, That he couldn't do it without knowing your Char name, Server, or jobs?
I'm only trying to make it clear you're at absolutely no further risk of your account being hacked because of this. every piece of information set to be displayed is 100% worthless to a hacker.
If you're worried he "now knows my in-game name and that makes me more vulnerable!", Honestly, its just wishful thinking. You think a hacker who again, could personally target your PC and log your password is hindered by not knowing your char name? no, he doesn't need it. he could hack you right now if he existed.
Edit: On the "Token" being a heightened security bit yah, i agree. but its a greatly heightened security. its like going from a wooden door to a 10 door hallway with security measures at each door. Its a giant leap. The only real way to hack someone with a Security token is to do it completely in real time. Which again, could only be performed by a good hacker.
That type of hacker does not care about you or your FFXI account as to them its piddly amount of money and not worth their time. The only time you're at risk of this type of hacking is if you really really p*ss off the wrong person. But its probably the same odds as winning the lottery.
They don't login while you are logged in, as that sends up red flags. They do it while you are logged off. All I'm saying is if they catch 15 sets of of credentials, then can quickly and easily scratch off the low priority targets--meaning having that info easily available can bump you up the list. It is a possibility, and it is a device that can be used. Whether or not is used is just your personal opinion--the point is there is the potential for it to work against you.
That wasn't something presented as a security argument, it was meant to demonstrate how readily available all this information is already, and to contrast how pointless it is to force people to publish it here. You even admit that if it is not published elsewhere, then it remains unavailable--here, SE is giving us NO CHOICE in the matter IF we want to participate in the forums here. At least on the LS site, you were given the OPTION TO HIDE THAT INFORMATION. Here, they are not giving us a choice. THAT is the problem. We have the choice to hide our information everywhere else, but not here.
Also, forcing everyone to one central point now does in fact present a security problem. Now, there will be one unified means to login to multiple things. Everyone is being shuffled through one gateway, using one set of credentials--which means there are fewer places that need to be monitored. You will be logging in more often to that single gateway if you are active in those multiple activities, meaning more samples being offered through one single gateway now. This can potentially put those without security tokens at greater risk of compromise simply because there will now be one single point of failure instead of multiple ones, and that single point will be passing that same information more often.
But, that was a sideline argument that somehow got started up about whether it effects security or not. The main points of the debate is that up until this move, we always had a CHOICE in what information was displayed. Various people will have various reasons for displaying or hiding it--the simple fact remains that SE themselves provides us a choice to hide our info on one of their sites, and then they are forcing us to display it here, with no reasonable justification for demanding that it be published.
It really serves no purpose to unite the community or encourage participation, and may potentially create some pockets of division or discourage participation--as evidenced by some saying they will not be logging into the forums after this is implemented.
Quit clouding the issue with the hacking nonsense and an example of someone who obviously didn't have their information hidden.Mine isn't. And btw I get the same "you must have something to hide" drivel about not showing everyone my data on ffxiah and the ls community site.Quote:
This Information is out there already, its public information.
So, I can't comment on an issue someone else brought up and debated for a while?
In case you didn't notice, I was trying to steer it back towards the real issue.
Quote:
But, that was a sideline argument that somehow got started up about whether it effects security or not. The main points of the debate is that up until this move, we always had a CHOICE in what information was displayed. Various people will have various reasons for displaying or hiding it--the simple fact remains that SE themselves provides us a choice to hide our info on one of their sites, and then they are forcing us to display it here, with no reasonable justification for demanding that it be published.
It really serves no purpose to unite the community or encourage participation, and may potentially create some pockets of division or discourage participation--as evidenced by some saying they will not be logging into the forums after this is implemented.
That wasn't at only you. Clarification: isn't "proof" that it doesn't matter.And not working real well is it.Quote:
I was trying to steer it back
And folks...We can use a mule. All this stuff we're talking about isn't a prob because you can use a mule. And since you can use a mule there really isn't a reason to not let us have a hide option, but its still no problem right now since we can use a mule. Jeez. 13 pages.
Why should someone pay an extra fee each month for something they don't need--even if it is only $1? I've been playing for years and never needed a mule....got 10 jobs to 90 and 6 locked at 51, and currently have like 25 slots free to carry junk on me and I logged out on NIN.
Someone shouldn't need to create and pay for an alt if they don't want to display anything about their main. They should have the option to hide that inormation just like they can elsewhere.
Did I not just argue that there is no reason to not have a hide option because of mule use?
Facepalm. We're asking for the same option. I used it as a reason for said option. Direct it at SE not me...Hint: I didn't say they should have to. I said they can.Quote:
Why should someone
my bad... the wording threw me off... post #113 before sounded more like you were saying there is no need to have a hide option because you have the option to use a mule...caused a knee-jerk reaction to the follow up post.
That seems to be the problem with some of the division here... a lot of the really old players are saying "just use a mule", glossing over the fact that many (especially newer players) may not have one. There are many that have been around a reasonable amount of time, but came late enough to have access to more storage and may never have needed one so never created one in the first place.
Likely my fault anyway, a bit distracted atm no time to re-read and I think I skipped part of the middle segment of the thread. I remember the 1st posts had to do with it being silly to require it since we'll use mules, and would also be silly to remove mule use because we'd just stop posting. They are correct.
You come from BG. You have an entire forum devoted to tracking players you don't like. You use their gear to track them from server to server. Naturally you want access to everyone's information so you can use bullying tactics instead of having to learn how to be civil.
BG is not devoted to tracking players they don't like. If you're talking about the "Cross-Server Warning" sub-Section. its not devoted to people BG hates, It tracks people who have performed terrible deeds in their past in an attempt to keep others from falling victim to these players bad deeds.
As they have been shown to repeat said deeds.
Insulting BG in itself simply because you don't enjoy the website is uncivil. the irony is palpable.
Edit: Sorry, On the topic of "People will either use a mule or stop posting".
I wrote this a while back in this thread, But i've been using my In-game name on FFXI related forums and have never been stalked/harassed/etc in Game. The Community as a whole generally does not care about Forums. Very few of the population actually visit/read FFXI Forums.
I'd venture as far to say probably only ~20% of FFXI population regularly read/visit FFXI Forums. Of that % i would say less than 5% of that 20% Will actually insult/harass someone in-game over a forum post.
People might say "Oh, its xxx on the xxx server, lululul" but i bet if you asked anyone who has been "targeted" like that, It probably hasn't effected their in-game play at all. No one on the forums openly act on players in game they recognize from the forum because its harassment, and they care about their characters.
I can see the idea of wanting to remain anonymous if you're afraid people who disagree/don't like you might "Stalk" you, but they wont, if they do blist and GM them for harassment, they're obviously idiots.
Edit2: And all these people talking about "finally knowing who the char behind the forumer is" aren't going to go around harassing people. They just want to know who it is. They don't care about you in game. Its literally just knowledge they seek.
I personally wouldn't care either way. All i need to know about you people is in your posts. That information alone tells me rather you're stupid or not. I don't need to know anything else.