SE Please start caring about your players privacy.

Quote:

---

Originally Posted by VanillaWafer

I recommend people watch this:

Blackmage Compendium - https://www.youtube.com/watch?v=fGRfLbny4VM

---

people who try to downplay this are seriously bad actors in disguise. the creator literally made this mod because he got pissed at being undercut on the MB and wanted to find out who it was. it was always developed with malicious intentions, and will continue to be developed with malicious intentions. how bizarre can people be.

Quote:

---

Originally Posted by Yodada

Then report it.

I'm fed up with Squares keeps it under the rug BS. Players need to know what those scums are doing and that Square gives a shit about it.

Dont care if they ban me over this topic.

---

Well, you got your wish at least. GG.

Quote:

---

Originally Posted by BristolRuss

Well, you got your wish at least. GG.

---

Worth it. Shows how much they care about hiding the problem and sweeping it under the rug instead of fixing it.

If anything its a bad look for SE not for Yodada lol.

Just a thought, but can't those rmt bot farm hosts also use this program in tandem? Like if I blacklist a rmt bot who is in limsa, is my data also being compromised for doing so? As there is clearly folks with grudges, and there is a subset of folks who would then sell that very same data to malicious actors.

Quote:

---

Originally Posted by Chasingstars

Just a thought, but can't those rmt bot farm hosts also use this program in tandem? Like if I blacklist a rmt bot who is in limsa, is my data also being compromised for doing so? As there is clearly folks with grudges, and there is a subset of folks who would then sell that very same data to malicious actors.

---

Data would already be compromised so to speak, as all account IDs are communicated from server->client, regardless of whether you actually have someone on your blacklist or not, to my understanding.

In theory they could, but the data isn't really worth selling anyway, it's just really a paradise for stalkers and people that want to be upset about other people being able to sell on the market and undercut them.

Quote:

---

Originally Posted by Kaurhz

Data would already be compromised so to speak, as all account IDs are communicated from server->client, regardless of whether you actually have someone on your blacklist or not, to my understanding.

In theory they could, but the data isn't really worth selling anyway, it's just really a paradise for stalkers and people that want to be upset about other people being able to sell on the market and undercut them.

---

Right understood. But that is what I mean with malicious actors. Like lets say I am one and have some hypothetical grudge against you indirectly because of your retainer and you undercutting me. I want the account ID, I go to an illicit place and learn your account ID and what that is connected to. I decide to do more than just stalk, maybe DDOS whenever you are playing on your main or one of your alts in order to hamper your experience while playing.

Again, that is a hypothetical and if I was unhinged. As I am just looking at this from a white-hat approach.

Quote:

---

Originally Posted by Chasingstars

Right understood. But that is what I mean with malicious actors. Like lets say I am one and have some hypothetical grudge against you indirectly because of your retainer and you undercutting me. I want the account ID, I go to an illicit place and learn your account ID and what that is connected to. I decide to do more than just stalk, maybe DDOS whenever you are playing on your main or one of your alts in order to hamper your experience while playing.

Again, that is a hypothetical and if I was unhinged.

---

In theory yeah, and I daresay some people would try and go that far, but honestly if it got to the point where people could.. Connect an account ID to an IP address and/or a specific location, then that would constitute as a personal identifier to my knowledge, especially if that information can then be used to create a log around player, and then do further profiling. But at that point you are looking at something that, to my knowledge, would be a GDPR violation.

Quote:

---

Originally Posted by Kaurhz

In theory yeah, and I daresay some people would try and go that far, but honestly if it got to the point where people could.. Connect an account ID to an IP address and/or a specific location, then that would constitute as a personal identifier to my knowledge, especially if that information can then be used to create a log around player, and then do further profiling. But at that point you are looking at something that, to my knowledge, would be a GDPR violation.

---

Perfectly understood and I agree. I just personally view this whole little 3rd party program as at least a stepping stone toward some form of GDPR violation later.

Especially because of the supposed creation of it over something as petty as marketboard undercutting. Then again, the Etherium cryptocurrency and also NFTs by extension were born because someone got upset over something as minor as Warlock losing the damage component to the Life Syphon ability in world of warcraft.

This thread is a double edge sword and not only alerts SE but Alerts malicious actors who visit the forum. Outside of fixing this issue, a forum section needs to be created for reporting these types of things. Further more all posts placed in said section need to be invisible to everyone except moderators and the poster themselves. It would allow far more detailed info too be provided to SE without making it known too the entire forum.

I like how mods keep deleting the posts without relying the information to the devs or the community manager, I guess they truly don't care about their players huh. Even JP players are pissed.