My account was hacked today, and am now dealing with the account suspension issue and am in queue for live support... yippeee... I have a recommendation though, which is the ip adress check. Steam and blizzard and even trion use a system where if your account is logged in from another ip, it will become locked in case of hackers. This may not be a fool-proof or perfect security system, however im sure it will most certainly help considering this game seems to have NO security features implemented.
Why in the world would you let another ip access my account SE? damn......
A solution against battling hackers
Printable View
-
09-27-2013, 07:19 AMquad01manA solution against battling hackers
-
09-27-2013, 07:25 AMRawanz
It actually does that. Dont get why it dosent work all the time.
-
09-27-2013, 07:26 AMworldofneilAdd a security token, that's all the security you'll need.Quote:
Originally Posted by quad01man
-
09-27-2013, 08:04 AMquad01man
I should not have to purchase a security token after purchasing both the game and subscription.
-
09-27-2013, 08:16 AMKisaiTenshiNo mobile phone?Quote:
Originally Posted by quad01man
-
09-27-2013, 08:17 AMquad01man
you can use ur phone eh? ill check it out once this is fixed
-
09-27-2013, 08:41 AMCrazyCanukkyes ..there is an app.Quote:
Originally Posted by quad01man
But seriously $11.00 is not much money to spend on a physical key to secure your account your going to put 100"s of hours and money into. Its a pittance for a bit of piece of mind. -
09-27-2013, 08:49 AMCirsceI heard after 1.0 they dropped the ip address check, no clue why. Granted there's still ways around an ip address check, but the more annoying you make it for people the better.Quote:
Originally Posted by quad01man
-
09-27-2013, 09:20 AMKisaiTenshiThey should charge a lower subscription rate for people to have an authenticator. That would incentive people use it if it costs them nothing (like the iOS app.)Quote:
Originally Posted by CrazyCanukk
-
09-27-2013, 09:52 AMsquidbunny
Although I agree there's no reason not to add the software token IF you have a smartphone (and don't assume everyone does), there's also no reason for SE not to have basic things in place like an IP check. And there's no reason for their appalling support regardless of whom the blame for a compromised account rests with: if they're unwilling to offer decent support to users without security tokens they should just straight up not allow anyone without a mobile device or unwilling to pay for a hardware token to play the game.
I agree about charging a lower sub for folks with a software token; I also think if the game requires a token it should be free with purchase (i.e. a physical authenticator should be included because, as I said, not everyone has a mobile device.)
My account is safe (for now), I'm using the software token successfully (for now), but I feel for anyone dealing with a suspended account. I am a longtime MMORPG player and I have never seen a thundercloud of botched RMT handling quite like this. -
09-27-2013, 05:01 PMgintoki88how exactly did you not know about the phone app? its only been posted under every topic regarding Security and Authenticators, both here on the forums and on the news articles in the loadstone and the launcher.Quote:
Originally Posted by quad01man
http://na.finalfantasyxiv.com/lodest...b0d7f0b23b3aa1
http://na.finalfantasyxiv.com/lodest...41eaefc2aeef7b
http://na.finalfantasyxiv.com/lodest...004b15d14792c8
http://na.finalfantasyxiv.com/lodest...33498e43afd6f4
All these articles and more appeared on the Launcher and loadstone, some of them even in big bold red letters saying IMPORTANT.
I don't know if this is your first mmo, but most out there have Authenticators, both phone apps and physical, and its common knowledge to get one or the other setted up when you create your account, otherwise it will be prone to hackers.
Not having a authenticator is like not putting a lock on your front door of your house.
Sure you can get in by using the password/turning the door knob but so can everyone else if they know where to look. -
09-27-2013, 05:44 PMSove92You seem to have no idea how consumer IP addresses are assigned.Quote:
Originally Posted by quad01man
They change. -
10-01-2013, 12:21 PMquad01man
Look, you guys seem to not know how other major companies have account security. With steam, blizzard AND rift, whenever you log in to the account from another machine the account is on lockdown IMMEDIATELY and requests verification. Once again ill say that I should NOT have to buy or use an authenticator if SE would just use precautions that have been implemented years ago. This is the responsibility of the company to ensure security first and foremost. Now I will still do the phone app, but I do not appreciate posts from ppl who tell me its my fault that I was hacked. Its rude and untrue.
-
10-01-2013, 12:33 PMkaiyouske
How about try and resolve the problem in 2 days instead of 2+ weeks? Just sayin'....
-
10-01-2013, 01:13 PMFreyarNope. Steam does not lock down the account if you log in from a different IP address. You may have BILLING problems if you change countries, and you may end up with some games locked (this is most notable in Germany and Australia), but they won't lock the account.Quote:
Originally Posted by quad01man
That said, Blizzard and Trion do to differing extents. Blizzard will force you to reset your password. Trion will let you play, but not let you earn or spend currency.
You were likely phished, or used a password from a compromised system. A good chunk of those are a result of reused or non-unique passwords. I find that a lot of complaints like these stem from an unsecured e-mail or game account and rather than taking a long hard look at their own security on their own systems and accounts, they just try to blame the company behind it.Quote:
Once again ill say that I should NOT have to buy or use an authenticator if SE would just use precautions that have been implemented years ago. This is the responsibility of the company to ensure security first and foremost. Now I will still do the phone app, but I do not appreciate posts from ppl who tell me its my fault that I was hacked. Its rude and untrue.
If someone takes your username and password, and uses that to get access to the account, that is YOUR issue because it is YOUR responsibility to keep it confidential. There are cases where people can get into accounts they shouldn't (Path of Exile had a duplicated session ID bug that has since been fixed), but those are rare in comparison.
You don't have to buy an autheticator/token. A phone is an optional free alternative. I will always recommend buying a token though as they last for years and if your phone is ever reformatted or reset you won't lose access to the account. SE's tokens are strangely expensive compared to others, but I'm willing to pay it since it means I've got that extra layer on top of my unique complex password.
That's not to say that SE's customer support for EU/NA is acceptable. Twenty days to sort out an autheticator issue for a Free Company member is ridiculous, especially when turning around and telling him that because of their failure to provide support, they can't reimburse the time he's paid for. A week at most. Seven days, I can understand that, but not twenty days. -
10-01-2013, 01:29 PMdarkvision
i had formated my phone and forgot to remove software token from my account, contacted live chat and got it resolved in mater of mins be never had my account hacked, i been using OTP since FFXI
-
10-01-2013, 01:34 PMFreyarWould be nice if hold times were that quick, but with friends of mine having trouble getting connected to some support agent (be it phone or chat) with waits at 4 hours each for twenty days.. it's a risk.Quote:
Originally Posted by darkvision
-
10-01-2013, 11:58 PMRuprectLike once a month if that, I have had mine for months. They should not be letting other IP addresses access accounts. When your IP address changes they should lock your account and send you an unlock password that you have to enter to access the game.Quote:
Originally Posted by Sove92
-
10-02-2013, 12:02 AMMithrasInvictus
Regarding the security tokens, I think of it like this: a locker doesn't come with a lock, but you keep all of your stuff in it. You buy a lock, attach it to the locker, and your things are kept safe against unwanted intrusion for a minimal one-time fee.
-
10-02-2013, 01:33 AMwolfsspiritAnd is annoying as hell with disconnections.. everytime i need to add my password + the token code , and not only for the game but for mog station , lodestone and anything that's SE.Quote:
Originally Posted by worldofneil
I would want an option where u can set security by adding your IP , it be fine if it gets locked when you change your ip , and unlocked when you confirmed your (new) ip using the token -
10-02-2013, 02:09 AMnecrosisWe should not have to do a lot of things but we do them for security.Quote:
Originally Posted by quad01man
Bet you bitched when you had to put locks on your front door. -
10-02-2013, 02:15 AMRuprectThe front door is not a fun game. RL != fantasy. I am afraid for some of you kids not getting that. Not putting locks on the front door could = death/loss of real items. Getting hacked in a video game could = loss of virtual items/virtual currency or not able to play for a while. There is a very clear distinction here and unfortunately there are far too many people that do not understand the difference.Quote:
Originally Posted by necrosis
-
10-17-2013, 08:45 PMBoretalith
It seems that there have not been any further posts about this concern being an ongoing issue. Because of this, we are considering it to be resolved. If this does continue to be a concern, please create another thread to further discuss resolutions or contact the Support Center at support.na.square-enix.com for assistance.