SE are you okay with this?

[Obysuca]

3. right, i still had to send a ticket for a rollback, which their est. is 7-10 buisness days

Hate to be that guy, but you'll be waiting for a good while. I was hacked 3 days after I paid in Oct, changed my password, lost all my stuff, except what I was wearing, retainers cleared out etc. Sent in a ticket, nothing, called SE and got told that they do have a 1 time rollback, but they don't have it implemented yet and don't have an estimated time on when it will happen. Then got told to just keep playing and risk a rollback.

I just hope if they ever do plan to add it sometime, that it's not a forced rollback. I want the option to say no to it, considering I did just keep playing (nothing better to do lol)

[Alcyon_Densetsu]

got told that they do have a 1 time rollback, but they don't have it implemented yet and don't have an estimated time on when it will happen. Then got told to just keep playing and risk a rollback.

Seriously?! They actually said that? They can charge us yet, but can't yet provide support on such important issues?!!

Man… That's… I'm wordless.

[C-croft]

Happened just a few days ago, lots of people being hacked while in-game. They shutdown the servers because of that. There are glaring exploits server side in this game, sadly. Security is nowhere near acceptable for AAA MMORPG from one of the biggest companies in the gaming industry.
—> http://forum.square-enix.com/ffxiv/t...ountermeasures
(sticky topic by Yoshi on this very forum)

Complemented by this player-made topic: http://forum.square-enix.com/ffxiv/t...hile-logged-in

Also, authenticators are useless when the SQL/server side is badly secured, and the memory/exe on the client side wasn't even encrypted at all (sessions ID were written in plain without protection for instance, dunno if they changed that yet). An authenticator is just one layer of security, certainly not the be-all and end-all of protecting data or access.

While it is true regarding SE's end of things. I have yet to hear about an authenticator account being hacked. Assuming there was no session id jacking going on.

[Tupsi]

Seriously?! They actually said that? They can charge us yet, but can't yet provide support on such important issues?!!

Man… That's… I'm wordless.

Interesting, I've seen others get reimbursed just fine.

While it is true regarding SE's end of things. I have yet to hear about an authenticator account being hacked. Assuming there was no session id jacking going on.

It's called session hijacking - It happens when you're specifically targeted otherwise no it doesn't "get hacked" in the sense you're thinking of.

[Obysuca]

Interesting, I've seen others get reimbursed just fine.

Just saying what SE told me when I called them about it. I've heard about people getting characters restored, but nothing about rollbacks

[C-croft]

It's called session hijacking - It happens when you're specifically targeted otherwise no it doesn't "get hacked" in the sense you're thinking of.

Oh I know about Session jacking, but to say authenticators are like t-shirts for bullet stopping is incorrect. It adds a layer of security for when an end user doesn't adequately protect themselves. There is nothing you can do about poopy coding, but people can go the extra mile to protect their accounts. Not required, but helps against keyloggers picked up from malicious sites and pr0n.

[Hypnotic13371337]

just thought id put this back on the front page for now, 32 days and counting now D:

[Obysuca]

just thought id put this back on the front page for now, 32 days and counting now D:

If I were you, I'd just keep playing, the time you've waited on SE, you could have gotten back most if not all your stuff. That's what I did, no point waiting around for SE to take their time on this. Sure I'm still missing a few things, but at least they didn't get rid of my relic/dl, so I still had gear to refarm stuff. My biggest issue with it is that they got rid of my moogle cap too, something that can't be gotten back again :/

[DragonFlyy]

snip.

The hack that let people steal gil from inside the game has nothing to do with the authenticator. The session "hack" as far as I know was addressed by making the session inactive as soon as you were in game.

[FF2GO]

Really? I have yet to hear of one person getting hacked that had an authenticator.

I have had an authenticator on several games including Wow, Rift, and now FFXIV and not once was Hacked. I had a friend who was hacked on Wow and they did not have an authenticator. Your statement about authenticators doing about as much for account security as a T-shirt will for bullets is false. It adds an extra layer of security that most hackers will not even try to mess with because it is too much work. They resort to easily/lightly guarded accounts without authenticators because it is less work and easier to hack.

Btw C-croft I was referring to the person who said authenticators provide little to no security, not you, sorry.