Annoying account lockouts?

Even since the new account lockout security system, I'm getting my account locked-out every other day. I believe the system is based on IP block to determine the "suspicious activity" but my ISP has different IP blocks, and sometimes when my IP changes, I get locked out and need to reset password. I even once D/C cause my DSL rebooted and got a new IP and after waiting the 10 min timeout (which sucks btw) when I tried to relog, bam! Account locked out, reset password.

I mean SE, my credit card sends me an email informing me about suspicious activity when it sees this kind of behavior and learns from it, meaning they save as valid the IP blocks I typically log from, they don't make me reset my password each time and not learn from where I typically log.

Same problem here, i too have dynamic IP. I hope this will be changed soon.

I'd even appreciate the option for me to say "Screw it, I'll take the risk" and turn off the precautionary measures. I reset it also every other day or so. That and I travel a lot and play on my laptop quite often in multiple cities (if not states) in the same day...I've reset my password 4 times in one day before -.-

I don't know if it would interest you at all but just tossing it out there... if you get the key-fobs that give you the 6 digit number that you input into the login screen then you don't get blocked due to IP address change from what I have heard. Since the player has to physically have the key-fob with them to get in IP address changes don't matter because they know it's you.

Yeah it takes an extra 5 seconds to log in, but that seems a small sacrifice if ya'll are having to waste all the time resetting your passwords on a constant basis. I've never had an issue, even when logging in at a friends house on his computer. I can see how your situation would be annoying. :(

Yeah with the security token you do not get locked out

Crappy System but what can you expect from SE. Steam/Ebay/Facebook all seem to get around it nicely even if you go to a completely different system/ip. Theres no excuse for this extremely poor design for a security feature.

It isn't a poor design. MMo accounts get hack daily even if you do not visit suspisous sitres or open junk mail. My aion account was hacked daily (and I changed pw each time) My WoW account was hacked even though at the time it was canceled.

You guys really are cry babies. Do you want a psn issue with ffxiv?
I rather have for knox + secret service + assassins + ninja safe guard my account info instead of getting hacked. Hacked account give people info to stead your ID. So ya. Just use or buy the token. Cuz this security isn't going anywhere.

Like kilta said it's not a poor design in anyway get yourself a token it would fix the problem. Btw kilta if your accounts was hack daily then you really have issue with your computer. All the email saying you got hack by so said "wow" or "rift" it fake to start with lol.

Quote:

---

Originally Posted by Kilta_Firelotus

It isn't a poor design. MMo accounts get hack daily even if you do not visit suspisous sitres or open junk mail. My aion account was hacked daily (and I changed pw each time) My WoW account was hacked even though at the time it was canceled.

---

Friend actually had blizzard permanently freeze his WoW account and signed and faxed a contract to them basically saying that the account could never be reactivated under any circumstance and no WoW was to ever be active on his battlenet account again. A few months later he notices that WoW account was active and now he's had his entire battle.net account frozen until they figure out how it was reactivated considering their agreement. Obvious inside job is obvious, but yeah. (Don't know specific details, but that's basically what he told me, along with showing me the signed contract he had faxed them previously.)

On Topic: I like the security features, but then again I have a security token so I don't get locked out constantly. It's a good thing to have though.

Quote:

---

Originally Posted by Zenaku

Like kilta said it's not a poor design in anyway get yourself a token it would fix the problem. Btw kilta if your accounts was hack daily then you really have issue with your computer. All the email saying you got hack by so said "wow" or "rift" it fake to start with lol.

---

no i found about the hacking while trying to log. And noticed mt wow accont was hacked after calling them.

Quote:

---

Originally Posted by Kilta_Firelotus

no i found about the hacking while trying to log. And noticed mt wow accont was hacked after calling them.

---

Then you went somewhere click something download something for wow to get hack :) sorry you don't get hack by doing noting. This is why you should alway have a good anti virus :)

Everyone LOVES more security features
until it makes them do anything extra

Quote:

---

Originally Posted by viion

Crappy System but what can you expect from SE. Steam/Ebay/Facebook all seem to get around it nicely even if you go to a completely different system/ip. Theres no excuse for this extremely poor design for a security feature.

---

>.>. You know how many times (and on a much worse level) that Steam/Ebay and Facebook has been hacked and some leaks? lol. This system is perfectly fine, even without a token, I have 8 POL IDs linked to my SE account (family accounts) and we all play FFXI..at different IPs at the same time.

No lockouts, no token on this account.

Soo I'm not sure what's triggering it for other people but the system isn't badly designed, but it is CLEARLY designed to take full advantage of the token.

its needed yes its a pain, but just a pain for you rather then for both you and se, it well known that a lot accounts get stolen so its needed, just get damn token people or set your system up with static ip simple fix, you realities that se has to deal with the people that accounts get stolen right this save them time and money hate break to you it not going any were buy token.

My point was simple. I'm not spending money on something I don't need. I don't use cutesy passwords with familiar personal info. They're all annoying random and long alphanumeric combinations (sometimes literally made by smashing my hand on the keyboard). I would like the option to turn the security feature off with the explicit warning from SE that they won't help me if my account is hacked. I'm not going to turn crying to them, I know it's a risk, but frankly, that should be mine to take. I don't need SE holding my damn hand all the way.

Quote:

---

Originally Posted by Altano

My point was simple. I'm not spending money on something I don't need. I don't use cutesy passwords with familiar personal info. They're all annoying random and long alphanumeric combinations (sometimes literally made by smashing my hand on the keyboard). I would like the option to turn the security feature off with the explicit warning from SE that they won't help me if my account is hacked. I'm not going to turn crying to them, I know it's a risk, but frankly, that should be mine to take. I don't need SE holding my damn hand all the way.

---

You do know a keylogger can still get a random alphanumeric password, if you just use those, a website has an add on which downloads a keylogger, absolutly anything you type will be seen, this is what the security token prevents.

The password reset measure is a little extra, which further secures if it looks possible that your account has been compromised.

All security measures incovineance legit users, and the strongest ones will inconvienance users alot.

Also Altano if you think just because you use an alphanumeric password your account is safe, you are asking to be hacked from a keylogger.

Also dont forget if your account is hacked it is not just your char that is compromised, it is every piece of information connected to your account, if SE uses strong security measures then they are not liable for any information stolen.

To be honest Altano looking at your post you want to be hacked by saying you dont want any security on your account except your password just so you can get in the game faster.

Man i got hacked on XI. It was the worst logged in and my PLD was naked NO AEGIS shield the hacker tossed all my items after it looted all the good stuff... after that i was a firm believer in the token

Quote:

---

Originally Posted by Delsus

Delsus

---

You do know I know more than a little bit about internet pc security. But thanks for pretending I don't. I said alphanumeric, fine, let me be more clear: yes, also symbols and caps and whatnot.

It's not a matter of getting in game faster, it's the hassle of having to generate new passwords each time, record those on paper somewhere so I don't have it stored on my computer. Frankly, I can take care of myself, thank you very much. I'm tired of being inconvenienced a lot, as you said, for the sake of security I don't need.

Again, you don't know me. You don't know how well I take care of myself and my private info. Believe me, I belong in the class of semi-paranoid. And that's a completely different story.

But this to me is SE cashing in on hackers activities by making it so that you have to pay them extra to keep your account going smoothly. Thanks, but no thanks. I understand it's not going to change, but I have the right to say it is utterly ridiculous that I cannot decline this feature and assume the risk myself without you walking in and assuming that I "want to be hacked."

Quote:

---

Originally Posted by Zenaku

Then you went somewhere click something download something for wow to get hack :) sorry you don't get hack by doing noting. This is why you should alway have a good anti virus :)

---

nope. did you think that their offices might have got hacked I also didn't dl anything on that pc. When i played i go straight on the game. Similar occurrences happen in Aion ppl would take a week off log on and it said account was blocked.

@Al you basicly confirmed what the dude said. A key logger reads you key strokes. so Anything you type is recorded and can be used. The tokens are $10 and generate a 1 time number code only good for 40secs. They last a while and prevents the IP switch block. I also gives extra security. Hackers now adays go as far as hack game accounts for ID theft not to take your items.

Kilta, I know very well what keyloggers do. I have dealt with them personally in the past. Thank you. Again, I am not concerned about them on my computers.

I'm not in the business of giving SE an extra $10 when they're simply cashing in on the hackers' actions. Rather than "hey, we have this nifty little thing you can use to protect yourself and it's pretty cheap" they take the following approach "hey we have this little device that we want you to buy in addition to the game otherwise we will bug the hell out of you, rather than simply record all the IPs that you legitimately log into so you don't have to keep rerolling your password."

Edit: Just for the sake of pointing out specifically why I'm not concerned about keyloggers. My passwords are never the same for more than one place, and I'm just gonna throw it out there, there is a nifty little on-screen keyboard you can handle with the mouse. I can't be the only person to notice/use this.

Quote:

---

Originally Posted by Altano

You do know I know more than a little bit about internet pc security. But thanks for pretending I don't. I said alphanumeric, fine, let me be more clear: yes, also symbols and caps and whatnot.

It's not a matter of getting in game faster, it's the hassle of having to generate new passwords each time, record those on paper somewhere so I don't have it stored on my computer. Frankly, I can take care of myself, thank you very much. I'm tired of being inconvenienced a lot, as you said, for the sake of security I don't need.

Again, you don't know me. You don't know how well I take care of myself and my private info. Believe me, I belong in the class of semi-paranoid. And that's a completely different story.

But this to me is SE cashing in on hackers activities by making it so that you have to pay them extra to keep your account going smoothly. Thanks, but no thanks. I understand it's not going to change, but I have the right to say it is utterly ridiculous that I cannot decline this feature and assume the risk myself without you walking in and assuming that I "want to be hacked."

---

i will start by saying that the token should be given with every box set hell it is cheaply made but trust me it maybe wrong for them to cash in on it as you say, but the token is needed, to stop the large scale and random hacking of accounts. Security should not be lowered. you may not like it but think of it this way you havent been paying for the game and token $9.99 just suck it up and buy one maybe you shouldn't be making a big deal so much about system in place as much as se should make it were anyone who buys the game gets take the full avenge of the security in place by being given a token in the 1st place this would be a much better argument.

@ AL
You sound like one of those crazy off the grid anarchist. SE isn't cashing in on the hackers. They do not want to be lieable for ID left. Which is why thet put in the extra security. Idk if ppl knew this or forgot. But SE offices were hacked a few years ago taking severly hundrend accounts. Which is why they had those token made for ffxi and now ffxiv. Key loggers record everything you type no matter how you do it, it can record from any site. Honestly dude your cocky attitude is sorta what happen with. Sony got cocky about the security and now psn is shut down with no real sign of turning back on. They delayed it 3 times so far. Well they delayed in telling us a timeline of when it may be back on. Most of the time hackers go after credit card info. Which will be on you.

Quote:

---

Originally Posted by Altano

Edit: Just for the sake of pointing out specifically why I'm not concerned about keyloggers. My passwords are never the same for more than one place, and I'm just gonna throw it out there, there is a nifty little on-screen keyboard you can handle with the mouse. I can't be the only person to notice/use this.

---

lol no i use it even with the token hell i have a virtual keyboard i use type in all my passwords and info on the web.

Quote:

---

Originally Posted by Captaindownsyndrome

i will start by saying that the token should be given with every box set hell it is cheaply made but trust me it maybe wrong for them to cash in on it as you say, but the token is needed, to stop the large scale and random hacking of accounts. Security should not be lowered. you may not like it but think of it this way you havent been paying for the game and token $9.99 just suck it up and buy one maybe you shouldn't be making a big deal so much about system in place as much as se should make it were anyone who buys the game gets take the full avenge of the security in place by being given a token in the 1st place this would be a much better argument.

---

there is an issue with that, and ppl stealing the tokens. Which is Why most mmo sell them on the side or in a limited box set.

Quote:

---

Originally Posted by Kilta_Firelotus

You sound like one of those crazy off the grid anarchist.

---

This made me laugh so hard. You are insanely off the mark, but thanks for playing.

Quote:

---

Originally Posted by Kilta_Firelotus

Key loggers record everything you type no matter how you do it, it can record from any site.

---

I input passwords with on-screen keyboard, as stated above. While a keylogger may pick up mouse clicks, it would have to know what those clicks are to be useful.

Maybe I am cocky. But I have been playing MMOs and dealing with online accounts and information for over a decade without a single hiccup. You can call me lucky, I call myself careful with a track record to prove it.

Quote:

---

Originally Posted by Kilta_Firelotus

there is an issue with that, and ppl stealing the tokens.

---

k who are these people stealing the tokens im not sure how to even start you know what im not im walking away cant think of anything to put that wont make me come off an ass.

Quote:

---

Key loggers record everything you type no matter how you do it, it can record from any site.

---

hate to tell you that your statement is false sorry but you have been misinformed

Quote:

---

Originally Posted by Captaindownsyndrome

k who are these people stealing the tokens im not sure how to even start you know what im not im walking away cant think of anything to put that wont make me come off an ass.



hate to tell you that your statement is false sorry but you have been misinformed

---

ppl who would what to take apart the tokens and see how they would work, maybe figure out a work around. That is why they say toss it and order a new one when batter is low. (only a guess)

Honestly you guys read into what I say too much assuming the worst of me. If i'm wrong I'm wrong no need to be a jerk about it.

Quote:

---

Originally Posted by Kilta_Firelotus

ppl who would what to take apart the tokens and see how they would work, maybe figure out a work around. That is why they say toss it and order a new one when batter is low. (only a guess)

Honestly you guys read into what I say too much assuming the worst of me. If i'm wrong I'm wrong no need to be a jerk about it.

---

how was saying that mean i was just saying someone told you wrong and token cant be worked around they all have different info related to each one. may i be so bold say may be you should go search out this info, for your self that way you have a better understanding of what were speaking of here. being misinformed isnt really all that bad but not taking the steps to cure this informatory is.

Quote:

---

Originally Posted by Captaindownsyndrome

how was saying that mean i was just saying someone told you wrong and token cant be worked around they all have different info related to each one. may i be so bold say may be you should go search out this info, for your self that way you have a better understanding of what were speaking of here. being misinformed isnt really all that bad but not taking the steps to cure this informatory is.

---

ever consisder I did? The last part was frustration from another topic :) Like I said correct my mistakes and be done with it. No need to go above and beyond that and be a dumas jerk (not saying anyone here is)

Quote:

---

Originally Posted by Kilta_Firelotus

ever consisder I did? The last part was frustration from another topic :) Like I said correct my mistakes and be done with it. No need to go above and beyond

---

well source is bad if you did the token cant be worked around, beyond hacking the system it self as for your name calling this just going draw flaming you should edit such comments out.

Quote:

---

Originally Posted by Captaindownsyndrome

well source is bad if you did the token cant be worked around, beyond hacking the system it self as for your name calling this just going draw flaming you should edit such comments out.

---

it isn't name calling actually. Since I'm not point it out to anyone. It is stating people shouldn't act like that. If you wanna see real name calling look at every post claiming that I'm an idiot, just for having a different few or was misinformed. Focus on the corrections, not the errors one person makes.

Quote:

---

Originally Posted by Kilta_Firelotus

it isn't name calling actually. Since I'm not point it out to anyone. It is stating people shouldn't act like that. If you wanna see real name calling look at every post claiming that I'm an idiot, just for having a different few or was misinformed. Focus on the corrections, not the errors one person makes.

---

my self I never called your Intelligence into question just your grasp of the subject as for other name calling take it with grain of salt there just words but with that said it wouldnt hurt for people be a little less harsh.

Quote:

---

Originally Posted by Captaindownsyndrome

my self I never called your Intelligence into question just your grasp of the subject as for other name calling take it with grain of salt there just words but with that said it wouldnt hurt for people be a little less harsh.

---

you do know saying "don't be a jerk" isn't calling that person a jerk right? It is pointing out from a perspective thet do appear to be a jerk. usually this stops the person, and makes them think how their actions look. Which is what I was doing.

There Keylogger that even take a pictrue every few sec but don't know how useful that be if you using the keyboard in the login screen lol. But a keylogger only record what you doing on the keyboard.

Quote:

---

Originally Posted by Zenaku

There Keylogger that even take a pictrue every few sec but don't know how useful that be if you using the keyboard in the login screen lol. But a keylogger only record what you doing on the keyboard.

---

my ex who has a degree in programming said there are various types of keyloggers, or hack tools to get info. People hacked sony and broke psn.... kinda proof there various styles or tools used to hack.

Quote:

---

Originally Posted by Kilta_Firelotus

my ex who has a degree in programming said there are various types of keyloggers, or hack tools to get info. People hacked sony and broke psn.... kinda proof there various styles or tools used to hack.

---

Sony got hack because hacker known as "Anonymous" was attacking there website and all there team was working on that. While other party of hackers took the time to hack PSN and it been said that Sony have not update there firewall or done anything to do for a long time. So this is why they got hack which now there building up there firewall and making PSN 100x better :) which at the end we should thank The hackers :).

I know there a type of keylogger that can hack you even with a token. FFXI got hack with a token when the user log in and put in the code to log in the keylogger or program does not allow you to log in it lock you out and what really happen was. The hacker computer is logging in to FFXI with your info and token code then he enter change password and you still lock out your account. Which this is the reason now FFXIV have such high Security and it a good thing we do :)

Quote:

---

Originally Posted by Altano

You do know I know more than a little bit about internet pc security. But thanks for pretending I don't. I said alphanumeric, fine, let me be more clear: yes, also symbols and caps and whatnot.

It's not a matter of getting in game faster, it's the hassle of having to generate new passwords each time, record those on paper somewhere so I don't have it stored on my computer. Frankly, I can take care of myself, thank you very much. I'm tired of being inconvenienced a lot, as you said, for the sake of security I don't need.

Again, you don't know me. You don't know how well I take care of myself and my private info. Believe me, I belong in the class of semi-paranoid. And that's a completely different story.

But this to me is SE cashing in on hackers activities by making it so that you have to pay them extra to keep your account going smoothly. Thanks, but no thanks. I understand it's not going to change, but I have the right to say it is utterly ridiculous that I cannot decline this feature and assume the risk myself without you walking in and assuming that I "want to be hacked."

---

A keylogger will see that you pressed caps lock/shift, that you hit that random £ key, there are 2 ways to avoid a keylogger getting your passwords, they are to use the on screen keyboard and the security token.

all a strong password does is make it alot harder for somone to brute force a password, however this takes alot of time and it is easy to be noticed, therefore it isnt used much, that is why keyloggers are used, so unless you tell me you use the onscreen keyboard then your account is still vulrable to hacking because of a keylogger, that is why banks either use a security token, or a memorable word that you select certain letters from using drop down boxes, which avoid the problems with keyloggers.

I agree I dont know you, but you are still vulnrable to a keylogger even though you use caps, symbols, letters and numbers and with the options we have all you can do to prevent a keylogger is to use the on-screen keyboard or security token.

I do however agree they should give it to players free, or use a smartphone app, or you could have just bought the CE when it was around, and got a token free

Also there is spyware that can take screenshots and send those to hackers which makes the onscreen keyboard, better than a physical one, but doesnt completly solve the problem.

However the only 2 ways to hack an account that uses a security token is the unlikly event of a successful brute force of a password that is constantly changing or to get hold of the algorithm that caclulates the password (which I assume is based on the serial number of the device) if it is based on the serial number then a hacker would need to hack SE and get all the serial numbers of the tokens off thier database and start guessing the OTP with the algorithm and required information for the algorithm to work.

This will take a long time, and after a few accounts got hacked SE would be wise to it if they correctly audit the network and take counter measures.