USB Security Token

[Ziyyigo-Tipyigo]

Shouldn't be hard to make something you can plug in that would comunicate directly

Thereby negating its entire purpose.

If your system can communicate with it, malware can communicate with it.

[Zagen]

Thereby negating its entire purpose.

If your system can communicate with it, malware can communicate with it.

If someone really wants to hack your account they'd have it setup so that when PoL attempts to send out your Account info (Token Code, Username, SE name, Passwords) it rejects the connection similar to a firewall blocking access, it then sends the information to the hacker so they can log on before the token key resets and change your password.

False sense of security is what the token really is besides extra in game inventory.

The token was a legal way for SE to charge for inventory space while making people scared of hackers feel safer when they really aren't.

[Ziyyigo-Tipyigo]

If someone really wants to hack your account

Yeah yeah, they can come over to your house and beat your password out of you with a lead pipe. That's no excuse to be low-hanging fruit.

The token was a legal way for SE to charge for inventory space while making people scared of hackers feel safer when they really aren't.

The token is a way to reduce the volume of headache-inducing "my password was 12345 and my account was hacked!" support calls. Even telephone operators in India cost money.

[Laraul]

If someone really wants to hack your account they'd have it setup so that when PoL attempts to send out your Account info (Token Code, Username, SE name, Passwords) it rejects the connection similar to a firewall blocking access, it then sends the information to the hacker so they can log on before the token key resets and change your password.

Actually if someone wanted your account they would break into your house steal the computer and your security token (if you leave it next to the computer). Of course, if someone you did not know broke into your house, your FFXI account would probably be last thing on your mind.

You are much more likely to lose your account to someone you know and see everyday in the real world. You let them in and talk for a bit... the next day your token is missing. Worse yet, your computer login info has changed. Fortunately most people aren't this way. They know that doing that would be wrong.

Look, if you are concerned that your security token is failing, then head to https://secure.square-enix.com/account/app/svc/otpCan. Login, choose "One time password" on the left side of the page. Click Next, and you'll see "security token removal." Follow the instructions and you won't ever need to use the security token again. In fact you can't you'll have to purchase a new one.

[Greatguardian]

SE doesn't make the tokens, they buy them from another company that produces the exact same token for plenty of other online games. Unfortunately, planned obsolescence is a way of life for most tech products, so it's unlikely they'll be adding a recharging station feature for any of these tokens.

If I'm not mistaken, I believe SE just buys you another one if you run the battery out though. Is that incorrect?

[Zagen]

If I'm not mistaken, I believe SE just buys you another one if you run the battery out though. Is that incorrect?

Unless they changed it you have to buy another one yourself or cancel the feature. I haven't kept up with the procedures with the token as I just used it for the inventory space, so that might have changed.

[Wolfe]

Hey guys, here's a simple solution. Make an app for smart phones that allow you to do this. Guess what, WoW already has one for iPhones.

There are also third party programs out there that do this already. I've seen two programs so far that can successfully generate the "secure" code for the security tokens. It uses the same code on the back of your token that SE has you use when you register it. They're safe too, because it's all programmed in already and doesn't require Internet access to use. I have one of these programs on a laptop that has Internet turned off and it generates the code flawlessly. And since FFXI isn't even on the laptop there's no need to worry about security.

SE will never do this though. The reason being, if there's money to be made, (insert derogatory phrase here).

I hate WoW, but the fact that their security token is free on iPhone, and you can do a lot more with their game on smart phones (in general, such as crafting), I'm getting really tempted to switch.

[Laraul]

Hey guys, here's a simple solution. Make an app for smart phones that allow you to do this. Guess what, WoW already has one for iPhones.

Yes... there is. Have you used it? Works but if you delete it before you unlink the Unique ID you will have to call to remove it from your account. It's also much more restrictive as rather than generating a one time password, it generates a password every 60 seconds. You have to enter you email, password, and then a 8 digit code before it expires.

They do sell a token also. It used to be a little more expensive than SE's. In anycase, SE is NOT making money off the sale of security tokens.

Oh and the irony of all this is that why do people worry that a security token with no RAM, OS, or processor is susceptible to malicious code and a powerful smartphone that backs up your installed software. Which doesn't even need USB now. It all wireless.

What I am saying is, both are safe (assuming that you haven't jail broken the phone or anything). Both provide a huge boost in securing your account. They both have their pros and cons.

[Zumi]

You have to call them up to unlink a dead security token, kind of sucks since it long distance and they don't got a 1800 number.

[Alhanelem]

The notion that the security token is just a money-grabbing venture by is nonsense.

The whole reason the token is effective is because it's not connected to anything, thus isn't vulnerable to hacking or anything.
$10 every several years is a trivial expense.