So I was hacked... my observation so far and tip.

[Dorin]

Here's a fyi for you. If a hacker wanted to hack the most secure nuclear programs in the world they can. Someone's PW on FF 14 or wow or whatever it is can be hacked at any time.

A real hacker wouldn't waste his time trying to hijack a random guy's videogame account for no reason.

Also, cool story. Needs more aliens, but cool story.

[Ershnill]

register it with your account, it will boot them off after 5 mins of confirmation.

I've done the entire process that I am aware of for the Token and it's been way passed the 5 minute mark. They are still logged in the game.

[necrosis]

I thought with no authenticator if you log in from a different IP you are forced to change your password? Happened to a friend of mine who logged in from work then from home later int he day.

And if your going to ask why didn't he have an authenticator... SE does not allow you to add one on accounts in trial or beta.

[AlexiaKidd]

I was under the impression if someone tried to login to your account from a different IP address then it would send you an email to confirm the login before you could actually login? Is this not the case anymore as you had to do something like that in 1.0

[Melithea]

It cant just be unique, it has to be strong. If its not strong, you should make it strong. I mean like airtight government-level security strong.

The standard password strength requirements for an NSA employee are:
Must contain at least two upper-case letters, two lower-case letters, two numbers, two symbols, and be at least 11 characters in length.
Must be changed every six weeks.
Cannot be the same as any of the ten previous passwords.
No names or dictionary words.
Cannot repeat any character more than two times in a row.

I feel like I'm forgetting one and it might be 13 character length. Anyway if you follow those rules you'll be pretty good. Although logging on will be a huge pain the butt. The worst part for me was always needing to change my password as soon as I started to remember it.

[Espon]

A strong password is only the start of keeping a secure account.

• Get yourself an authenticator. The phone app is absolutely free, and if you don't have a phone then buy the physical one. You're going to be wishing you spent that $10 if end up hacked one day.
• Don't use your account ID and password on another site or game. You don't know the security of those sites and if some FF14 forum gets hacked, you can bet they'll be trying every username and password on the game.
• Keep your computer up to date. Anti-virus, firewall, anti-malware, windows update, java, browser, etc. Vulnerabilities are found all the time, so make sure you always have the latest updates to prevent them.
• Don't share your account information. You may trust this person, however, do you know if their computer is secure? They might have a keylogger and the moment they log into your account, they've just given your account away.

[Rekujen]

I was under the impression if someone tried to login to your account from a different IP address then it would send you an email to confirm the login before you could actually login? Is this not the case anymore as you had to do something like that in 1.0

No email, nothing... I was lucky my girlfriend was online when he logged on and she called me straight away.

-

Also, I submit a ticket to Square but it's not showing on the square-support page... there's no ticket history either, does any1 know anything about this?

[HumsterMKX]

All these hackings..Sounds like an inside job. Or someone having knowledge of the inner server workings.

Good luck to capcom's Monster Hunter Online.

[AlexiaKidd]

No email, nothing... I was lucky my girlfriend was online when he logged on and she called me straight away.

-

Also, I submit a ticket to Square but it's not showing on the square-support page... there's no ticket history either, does any1 know anything about this?

I'm sure my friend who moved house had trouble logging in because he had moved house and it wouldn't let him unless he did the password reset through email. I'm just bringing it up as if they do still do this then that must mean they have access to your email too.

[RyuujinZERO]

Here's a fyi for you. If a hacker wanted to hack the most secure nuclear programs in the world they can. Someone's PW on FF 14 or wow or whatever it is can be hacked at any time.

Your FF14 account isn't a government agency, or a nuclear weapons facility - you don't have Mossad or the CIA or some black hat hacker collective trying to steal your gil. It'll be a low budget quasi-illegal RMT organisation using a simply dragnet of techniques - phishing e-mails, trojans, dictionary attacks - and seeing what bites.

Your reasoning is akin to saying that a grocery store robbery might be conducted with a nuclear bomb; afterall such devices exist. But the reality is that organisations who own nuclear weapons usually have bigger plans than holding up a grocery store...