BRAVE FC Letter to FFXIV (Security system glitch)

[Mezzoforte]

why do I have the strange feeling that person never got "hacked" in the first place?

Yeah. Chances are it was a fake "hack" so they could shuffle that money off. If it was a legit occurrence the GMs would likely intervene but based on how long they are waiting they probably talked to said person and he said "nah i stole it" and then the GMs let it go.

[Solarra]

Regardless of whether the hack was genuine, I do feel there is an issue here. I would like to see ranks put on a proper hierarchy so that nobody can promote above their own rank. It would help people running large FCs spread the load a little if they could delegate promotions to their officers (it would also help keep the FC running if the Leader is absent for a while).

As the moment, FC Leaders need to be very careful with permissions and should not allow others to promote or demote. I'd also suggest keeping the following permissions Leader only:
- Ability to buy and relinquish land
- Workshop construction and removal

[iMustafa18]

What is the point of taking donations from members, letting it get to 190m is just asking for trouble, as you found out!


You have to wonder, how said hacker knew this FC had Gil to steal and managed to pick one of only 3 members who had the access, what are the chances of this randomly happening? wouldn't that be like winning the lottery...

I honestly don't understand why you think you are smarter than others, that's first of all. Second, we didn't take donations, people just happen to donate and we were having the gils in use from decoration, to transforming mansions, preparing buffs, food, potions, gears, and just so much. a large amount of the gils came from myself, and the person who's account got hacked and we are actually real life friends btw.

Now again, even to give the fact that our member account didn't get hacked, we are STILL questioning the ability of a possible promotion to be done towards a higher possible rank than your current. If that GLITCH didn't exist this whole mess would be avoided.

So please focus, the issue is FC RANK SYSTEM more than anything else, and we are thinking it is on SE behalf so they will have to make up for it.

[Barraind]

It's not a glitch, it's been like that since day 1. If you can promote someone, you can promote them. It's not a guild system with ranks, it is ONLY a permissions filter.

[MariaArvana]

What is the point of taking donations from members, letting it get to 190m is just asking for trouble, as you found out!


You have to wonder, how said hacker knew this FC had Gil to steal and managed to pick one of only 3 members who had the access, what are the chances of this randomly happening? wouldn't that be like winning the lottery...

Honestly, it 99.9% likely it wasn't any actual hacking. More than likely that FC member wasn't careful and input their login credentials into a phishing website without checking the URL and validity of the page they were putting their info into, which the individuals behind the phishing site used those credentials to login and simply steal any gil the compromised character had access to. It wasn't really a lottery; just simply the phishers getting lucky with the victim who mistakenly put their login info in. It can happen to anyone who's not careful about where they enter their login credentials into on the internet.

Now again, even to give the fact that our member account didn't get hacked, we are STILL questioning the ability of a possible promotion to be done towards a higher possible rank than your current. If that GLITCH didn't exist this whole mess would be avoided.

To be technical it wasn't a glitch; just a badly designed system that is open to exploitation. King Canadane explained how the actual underlying system works in several posts of this thread. Not to say it shouldn't be fixed, but now you're aware of how the actual system works and its ability to be exploited has been known for years now. My only advice is to divy up the gil in your chest among all the people you trust and keep track of who owns how much % of your FC's gil so that if someone gets pissed/angry/reveng-y/their account gets compromised, you don't lose everything in one go, only that person's share. It's the system my old FC used and its the system that prevented them from losing 250mil, only 50mil when the officer wanted revenge on another officer after he got broken up with.