Password Reset Security Flaw

[gamesmart]

Can't you emulate a smartphone on a computer for the token?

And honestly, if you get hacked and you don't have a token, you're the only one to blame.

[Rendecrow]

And honestly, if you get hacked and you don't have a token, you're the only one to blame.

This. 99% of the gill sellers are probably using hacked accounts. Everyday when I play I get stupid tells from 934759734593479879834753489 of them. If you don't want your account to eventually get hacked and be used by a stupid Chinese gill farmer, you better get a token.

[Rendecrow]

Can't you emulate a smartphone on a computer for the token?

Thought I would add this:

Token on smartphone = Good.

Token on computer emulation = Bad.

The whole point of the token is so that if someone hacks your computer and steals your information they still can't log into your account because they don't have your token. If you put the token on the same computer you play FF 14 on, you effectively are completely getting rid of the added security the token is suppose to give.

[SarcasmMisser]

Thought I would add this:

Token on smartphone = Good.

Token on computer emulation = Bad.

The whole point of the token is so that if someone hacks your computer and steals your information they still can't log into your account because they don't have your token. If you put the token on the same computer you play FF 14 on, you effectively are completely getting rid of the added security the token is suppose to give.

In theory, in practice people aren't going to write exploits that depend on having the multi-factor authorization on the same machine when they have to be a minority of token users, and it's demonstrated that so many people don't even use security tokens. Low hanging fruit and all.

[Rendecrow]

In theory, in practice people aren't going to write exploits that depend on having the multi-factor authorization on the same machine when they have to be a minority of token users, and it's demonstrated that so many people don't even use security tokens. Low hanging fruit and all.

I can agree with that. Though that being said, it still would be dumb to have the token on your computer, lol. That is effectively like hiding your spare house key under your doormat. The door is still locked, but..... :P

If more people would just use the token a LOT of the gill seller issues would go away as they can't hack as many accounts. The 5 second "hassle" of entering the code is totally worth it. I don't understand people who refuse to use it.

[SarcasmMisser]

I can agree with that. Though that being said, it still would be dumb to have the token on your computer, lol. That is effectively like hiding your spare house key under your doormat. The door is still locked, but..... :P

If more people would just use the token a LOT of the gill seller issues would go away as they can't hack as many accounts. The 5 second "hassle" of entering the code is totally worth it. I don't understand people who refuse to use it.

It is dumb because it basically isn't multi-factor authorization anymore. But it is still better than not using a token at all.