Annoying account lockouts?

Quote:

---

Originally Posted by Kilta_Firelotus

ever consisder I did? The last part was frustration from another topic :) Like I said correct my mistakes and be done with it. No need to go above and beyond

---

well source is bad if you did the token cant be worked around, beyond hacking the system it self as for your name calling this just going draw flaming you should edit such comments out.

Quote:

---

Originally Posted by Captaindownsyndrome

well source is bad if you did the token cant be worked around, beyond hacking the system it self as for your name calling this just going draw flaming you should edit such comments out.

---

it isn't name calling actually. Since I'm not point it out to anyone. It is stating people shouldn't act like that. If you wanna see real name calling look at every post claiming that I'm an idiot, just for having a different few or was misinformed. Focus on the corrections, not the errors one person makes.

Quote:

---

Originally Posted by Kilta_Firelotus

it isn't name calling actually. Since I'm not point it out to anyone. It is stating people shouldn't act like that. If you wanna see real name calling look at every post claiming that I'm an idiot, just for having a different few or was misinformed. Focus on the corrections, not the errors one person makes.

---

my self I never called your Intelligence into question just your grasp of the subject as for other name calling take it with grain of salt there just words but with that said it wouldnt hurt for people be a little less harsh.

Quote:

---

Originally Posted by Captaindownsyndrome

my self I never called your Intelligence into question just your grasp of the subject as for other name calling take it with grain of salt there just words but with that said it wouldnt hurt for people be a little less harsh.

---

you do know saying "don't be a jerk" isn't calling that person a jerk right? It is pointing out from a perspective thet do appear to be a jerk. usually this stops the person, and makes them think how their actions look. Which is what I was doing.

There Keylogger that even take a pictrue every few sec but don't know how useful that be if you using the keyboard in the login screen lol. But a keylogger only record what you doing on the keyboard.

Quote:

---

Originally Posted by Zenaku

There Keylogger that even take a pictrue every few sec but don't know how useful that be if you using the keyboard in the login screen lol. But a keylogger only record what you doing on the keyboard.

---

my ex who has a degree in programming said there are various types of keyloggers, or hack tools to get info. People hacked sony and broke psn.... kinda proof there various styles or tools used to hack.

Quote:

---

Originally Posted by Kilta_Firelotus

my ex who has a degree in programming said there are various types of keyloggers, or hack tools to get info. People hacked sony and broke psn.... kinda proof there various styles or tools used to hack.

---

Sony got hack because hacker known as "Anonymous" was attacking there website and all there team was working on that. While other party of hackers took the time to hack PSN and it been said that Sony have not update there firewall or done anything to do for a long time. So this is why they got hack which now there building up there firewall and making PSN 100x better :) which at the end we should thank The hackers :).

I know there a type of keylogger that can hack you even with a token. FFXI got hack with a token when the user log in and put in the code to log in the keylogger or program does not allow you to log in it lock you out and what really happen was. The hacker computer is logging in to FFXI with your info and token code then he enter change password and you still lock out your account. Which this is the reason now FFXIV have such high Security and it a good thing we do :)

Quote:

---

Originally Posted by Altano

You do know I know more than a little bit about internet pc security. But thanks for pretending I don't. I said alphanumeric, fine, let me be more clear: yes, also symbols and caps and whatnot.

It's not a matter of getting in game faster, it's the hassle of having to generate new passwords each time, record those on paper somewhere so I don't have it stored on my computer. Frankly, I can take care of myself, thank you very much. I'm tired of being inconvenienced a lot, as you said, for the sake of security I don't need.

Again, you don't know me. You don't know how well I take care of myself and my private info. Believe me, I belong in the class of semi-paranoid. And that's a completely different story.

But this to me is SE cashing in on hackers activities by making it so that you have to pay them extra to keep your account going smoothly. Thanks, but no thanks. I understand it's not going to change, but I have the right to say it is utterly ridiculous that I cannot decline this feature and assume the risk myself without you walking in and assuming that I "want to be hacked."

---

A keylogger will see that you pressed caps lock/shift, that you hit that random £ key, there are 2 ways to avoid a keylogger getting your passwords, they are to use the on screen keyboard and the security token.

all a strong password does is make it alot harder for somone to brute force a password, however this takes alot of time and it is easy to be noticed, therefore it isnt used much, that is why keyloggers are used, so unless you tell me you use the onscreen keyboard then your account is still vulrable to hacking because of a keylogger, that is why banks either use a security token, or a memorable word that you select certain letters from using drop down boxes, which avoid the problems with keyloggers.

I agree I dont know you, but you are still vulnrable to a keylogger even though you use caps, symbols, letters and numbers and with the options we have all you can do to prevent a keylogger is to use the on-screen keyboard or security token.

I do however agree they should give it to players free, or use a smartphone app, or you could have just bought the CE when it was around, and got a token free

Also there is spyware that can take screenshots and send those to hackers which makes the onscreen keyboard, better than a physical one, but doesnt completly solve the problem.

However the only 2 ways to hack an account that uses a security token is the unlikly event of a successful brute force of a password that is constantly changing or to get hold of the algorithm that caclulates the password (which I assume is based on the serial number of the device) if it is based on the serial number then a hacker would need to hack SE and get all the serial numbers of the tokens off thier database and start guessing the OTP with the algorithm and required information for the algorithm to work.

This will take a long time, and after a few accounts got hacked SE would be wise to it if they correctly audit the network and take counter measures.