FYI: check and change login passwords ASAP

[Aurikai]

Convenience and security are ever on opposite sides of a spectrum.

No they aren't, OAuth is easily fixes this, this isn't host based security, doubt you have a clue about IAM systems, so not surprised you would say something that naive.

Lots of banks and other institutions use that same technology to ease logins, even Office 365 does, even Blizzard, so you're just making excuses for SE spending poorly on security because you lack knowledge of how it works.

[SaberMaxwell]

No they aren't, OAuth is easily fixes this, this isn't host based security, doubt you have a clue about IAM systems, so not surprised you would say something that naive.

My guy, I merely stated a pretty standard security adage which holds true almost no matter what. It's why "layered defenses" are better no matter what kind of system you're trying to create. No need to get hostile.

"No authorization or authentication standard is guaranteed to protect your information. If your information is available online, it’s susceptible to being stolen. If hackers breach a server of any service that you use, they could potentially take your login information or personal information, like name, address, and credit card information. [...] What makes OAuth great is that it restricts how many third-parties know your passwords. No, that doesn’t mean your personal information is 100% safe. But, by reducing how many entities have your passwords, you’ll lessen the chance that your passwords will get compromised."

[Aurikai]

My guy, I merely stated a pretty standard security adage which holds true almost no matter what. It's why "layered defenses" are better no matter what kind of system you're trying to create. No need to get hostile.

"No authorization or authentication standard is guaranteed to protect your information. If your information is available online, it’s susceptible to being stolen. If hackers breach a server of any service that you use, they could potentially take your login information or personal information, like name, address, and credit card information. [...] What makes OAuth great is that it restricts how many third-parties know your passwords. No, that doesn’t mean your personal information is 100% safe. But, by reducing how many entities have your passwords, you’ll lessen the chance that your passwords will get compromised."

No you stated a blanket statement that had nothing to do with the topic at hand, which was OAuth would make it easier for users to login. Saying nothing is 100% secure is like saying you should never drive or fly because cars aren't 100% safe, it's pointless thinking and completely dismissive. You can make excuses for SE not implementing that technology all you want, nothing you've said has provided any relevant counter arguments for why they shouldn't.

[VelKallor]

apparently Blizzard can implement this

Blizzard couldnt..sorry make that WOULDNT....implement the appear offline feature they promised for five years ( the fact that they blatantly LIED to their players about it didnt help ), have pathetic privacy controls ingame, have a system that allows ANYONE to add you as a friend and track you anywhere, cant or wont implement an account wide ignore system, ties all games to their launcher and FORCED a mandatory voice app on the launcher that CANT be turned off and until a huge uproar, then fixed that voice app to NOT screw with global volume settings, said app was also tied into the entire system sound settings, caused massive system errors because it was a resource hog.

The fact they they had a/ not tested it to prevent that issue and b/ did not allow players to opt OUT of having it installed in the first place says it all.

[Kyssa]

Blizzard couldnt..sorry make that WOULDNT....implement the appear offline feature they promised for five years ( the fact that they blatantly LIED to their players about it didnt help ), have pathetic privacy controls ingame, have a system that allows ANYONE to add you as a friend and track you anywhere, cant or wont implement an account wide ignore system, ties all games to their launcher and FORCED a mandatory voice app on the launcher that CANT be turned off and until a huge uproar, then fixed that voice app to NOT screw with global volume settings, said app was also tied into the entire system sound settings, caused massive system errors because it was a resource hog.

The fact they they had a/ not tested it to prevent that issue and b/ did not allow players to opt OUT of having it installed in the first place says it all.

All of this. Add the Cosby suite stuff in and the way they treated their staff and Blizzard should never be hailed for anything ever again. Ever.

[Thaciscokidd]

Blizzard couldnt..sorry make that WOULDNT....implement the appear offline feature they promised for five years ( the fact that they blatantly LIED to their players about it didnt help ), have pathetic privacy controls ingame, have a system that allows ANYONE to add you as a friend and track you anywhere, cant or wont implement an account wide ignore system, ties all games to their launcher and FORCED a mandatory voice app on the launcher that CANT be turned off and until a huge uproar, then fixed that voice app to NOT screw with global volume settings, said app was also tied into the entire system sound settings, caused massive system errors because it was a resource hog.

The fact they they had a/ not tested it to prevent that issue and b/ did not allow players to opt OUT of having it installed in the first place says it all.

Besides the voice app we sadly have those exact same problems here. And the best way to deal with it here is an 3rd party app.

[dspguy]

OTP tokens are great. I'm a proponent of the physical token. My original FFXI token from 2008(?) was just replaced a few months ago. One of the original tokens that my wife got from the FFXIV 1.0 release is still working just fine. I have it on a badge pull connected to my monitor. I'll never use it away from my PC, so I keep it there. Doesn't get lost. None of those "I replaced my cell phone and didn't disconnect the app from my FFXIV account" problems either.

I don't like the app since my cell phone leaves the house. I could see that being misplaced, dropped, broken, etc. However, NOT using the OTP is asking for trouble.

[Neri]

OTP tokens are great. I'm a proponent of the physical token. My original FFXI token from 2008(?) was just replaced a few months ago. One of the original tokens that my wife got from the FFXIV 1.0 release is still working just fine. I have it on a badge pull connected to my monitor. I'll never use it away from my PC, so I keep it there. Doesn't get lost. None of those "I replaced my cell phone and didn't disconnect the app from my FFXIV account" problems either.

I don't like the app since my cell phone leaves the house. I could see that being misplaced, dropped, broken, etc. However, NOT using the OTP is asking for trouble.

Mine is about to run out of battery too. How did you actually replace it? What's the procedure? I heard that you need emergency password removal to remove the token, but I think that's only apply to software one, and not physical? As physical token user, I don't remember having seen them at all. It's not the number at the back of the token, is it?

[Payadopa]

There's the SE OTP app, but you can also use third party autenticators now too.
The physical keychain is nice though. But all my XI friends are currently in the process of losing their battery power finally.

Dang. I guess I'm next then. 15 years later and I still use mine.