Poll
Question:
Would you like to have a new account security feature added to the game?
Option 1: Yes
votes: 35
Option 2: No
votes: 39
Option 3: Undecided
votes: 2
Hello, the "new account security" would be implemented during account registration, and would require you chose a secondary password to prevent someone from stealing your account, and your items.
Basically, the way this would work, user logs into the game, and the user must enter the command @verify "Secondary Password". Until the user enters this password, he or she will not be able to trade/gift/exit guild/delete bot/sell items to shop/purchase items from shop.
The marketplace on the site would also require someone to use their secondary password during their session time. The only way the user can possibly enter the marketplace is if they enter the secondary password.
The secondary password cannot match the current password, and will give an error message while attempting to set the same. All current users will be forced to set up a secondary password either by logging into the game, and typing @setverify "New Password", or by using the website in their profile area. You would also have to use your account password and secondary password to change the secondary, but if there is none to begin with, you will be allowed to change it without using an old one.
Sorry if this topic doesn't make much sense at the moment, but I just gave a very brief description of what would happen if we do decided to implement this.
~RedEyes.
Yes because people can't seem to keep their accounts safe themselves ;\
Very good ideal Ken.
+1
I like the idea but it doesn't affect the majority of us..
Sooo if there is a major flaw in your account system that's unpatchable, then yeah this should go down.
This should have been implemented ages ago. But it's still not too late, I guess...
~Xeno~
Quote from: Pokeh on November 13, 2011, 02:51:17 AM
I like the idea but it doesn't affect the majority of us..
Sooo if there is a major flaw in your account system that's unpatchable, then yeah this should go down.
Well, it's nothing that points the blame to us. Our servers are very secure. People like to not read the announcements, or choose to ignore them.
This is a very good idea. +1
Waste of Ross' time to retype that every login. Ross gonna lol when some nub miss types and ends up saying their pass in the chat. Just to find out it is similar to their account's pass.
Quote from: Rossbach on November 13, 2011, 03:19:39 AM
Waste of Ross' time to retype that every login. Ross gonna lol when some nub miss types and ends up saying their pass in the chat. Just to find out it is similar to their account's pass.
Quote from: Santa on November 13, 2011, 12:40:53 AM
Hello, the "new account security" would be implemented during account registration, and would require you chose a secondary password to prevent someone from stealing your account, and your items.
What about already created accounts?
already created accounts would be required to set the password with the command @setverify once logging in, or by simply changing it on the forum. I can also make a feature to completely "Opt out" of the verification process, but that would defeat the whole purpose of making this if everyone chose to do that.
Quote from: Santa on November 13, 2011, 03:23:29 AM
Quote from: Rossbach on November 13, 2011, 03:19:39 AM
Waste of Ross' time to retype that every login. Ross gonna lol when some nub miss types and ends up saying their pass in the chat. Just to find out it is similar to their account's pass.
Quote from: Santa on November 13, 2011, 12:40:53 AM
Hello, the "new account security" would be implemented during account registration, and would require you chose a secondary password to prevent someone from stealing your account, and your items.
What about already created accounts?
already created accounts would be required to set the password with the command @setverify once logging in, or by simply changing it on the forum. I can also make a feature to completely "Opt out" of the verification process, but that would defeat the whole purpose of making this if everyone chose to do that.
Ross re read it and noticed that before post. Hurays for opt out. Also unblock Ross from msn or w/e, Ross needs to talk to you.
This is a really good idea to the people who are really naive and just give away their account information. +1, voted yes.
+20 for opt me is rather lazy
I hate this idea. If people are so stupid and give out their passwords, it's their fault.
If they got hacked without giving their password to anyone, they still did something wrong, because if they didn't everyone could get hacked which is not the case.
It's annoying to type that command everytime you log into the game before you can trade/gift/etc.
Also new people, people who lack in english and/or other people could have troubles undestanding it and there would be alot of bug reports like "I can't trade help pls".
What would be the point?
They can simply give out their secondary password along with their id and primary password.
Quote from: hawk5005 on November 13, 2011, 09:02:42 AM
What would be the point?
They can simply give out their secondary password along with their id and primary password.
^Indeed, stop trying to save the ass of stupid people, they only learn it the hard way which is by doing mistakes!
I will not vote until my question is answered. Will the secondary password only be asked on other IP's or will it occur on all IP's. Cause I like the idea if it is from other IP's that you have to use this password.
I agree with what Neo said. However, I know that's not the case all the time. So I say implement this idea as this could really cut back on the account hacking. And this way if people do still get hacked we can probably be sure they gave out the passwords.
Quote from: NeoKiller on November 13, 2011, 09:06:31 AM
Quote from: hawk5005 on November 13, 2011, 09:02:42 AM
What would be the point?
They can simply give out their secondary password along with their id and primary password.
^Indeed, stop trying to save the ass of stupid people, they only learn it the hard way which is by doing mistakes!
First of all, you don't even play that much so your opinion is that of someone standing on the outside, second of all if they somehow manage to give out their second password along with their first then they won't be having their accounts restored; thirdly I'm beginning to think you didn't read the thread because kenny mentioned there'd be an opt out option if it pissed you off. No company should leave their customers in the black, and definitely not discriminate on them because of their mental ability. I don't think I've ever heard you sound more arrogant.
Quote from: zepher2211 on November 13, 2011, 02:50:26 PM
Quote from: NeoKiller on November 13, 2011, 09:06:31 AM
Quote from: hawk5005 on November 13, 2011, 09:02:42 AM
What would be the point?
They can simply give out their secondary password along with their id and primary password.
^Indeed, stop trying to save the ass of stupid people, they only learn it the hard way which is by doing mistakes!
First of all, you don't even play that much so your opinion is that of someone standing on the outside, second of all if they somehow manage to give out their second password along with their first then they won't be having their accounts restored; thirdly I'm beginning to think you didn't read the thread because kenny mentioned there'd be an opt out option if it pissed you off. No company should leave their customers in the black, and definitely not discriminate on them because of their mental ability. I don't think I've ever heard you sound more arrogant.
To your first point, yea, I'm inactive atm but I plan to start playing again in some month.
To the third one, you're right I've only read the first post, my bad.
And I didn't want to sound arrogant, I just think people should understand, that giving out their passes is dumb and there is even a rule prohibiting account sharing.
Being inactive means nothing if your idea's make sense.
Says me.
I agree to some peoples' comments here.
It's pointless having two passwords because:
1) It's tedious work doing it over and over for those who aren't stupid enough to hand out their passwords.
2) Who says that this one won't be handed out as well? If someone offered me unlimited bs and I didn't have a brain, I'd give them both regardless.
There's got to be another way to fight account theft and this, in my opinion, isn't the solution.
EDIT: Perhaps you could implement a choice to bring in a 3rd person into the trade. To watch the process and take screenies? ::)
Perhaps you could find a way to block another IP to log-in your account. This would also put a stop to account sharing.
Quote from: antisickness on November 13, 2011, 05:09:00 PM
I agree to some peoples' comments here.
It's pointless having two passwords because:
1) It's tedious work doing it over and over for those who aren't stupid enough to hand out their passwords.
2) Who says that this one won't be handed out as well? If someone offered me unlimited bs and I didn't have a brain, I'd give them both regardless.
There's got to be another way to fight account theft and this, in my opinion, isn't the solution.
EDIT: Perhaps you could implement a choice to bring in a 3rd person into the trade. To watch the process and take screenies? ::)
Yes, the whole idea for this is to protect accounts from other websites and hacking programs. If someone wanted to give their secondary password out, then there's absolutely nothing we can do to protect them. This will save me a lot of time also, because I will not be providing account restorations if this is implemented.
~RedEyes.
Quote from: hawk5005 on November 13, 2011, 05:31:24 PM
Perhaps you could find a way to block another IP to log-in your account. This would also put a stop to account sharing.
Yeah we'd also be ****ed if our IP changes by itself or if we tried to play at a relatives/friends house.
Quote from: hawk5005 on November 13, 2011, 05:31:24 PM
Perhaps you could find a way to block another IP to log-in your account. This would also put a stop to account sharing.
Agreed. but;
Quote from: Yz on November 13, 2011, 05:33:08 PM
Yeah we'd also be ****ed if our IP changes by itself or if we tried to play at a relatives/friends house.
that.
Quote from: Yz on November 13, 2011, 05:33:08 PM
Quote from: hawk5005 on November 13, 2011, 05:31:24 PM
Perhaps you could find a way to block another IP to log-in your account. This would also put a stop to account sharing.
Yeah we'd also be ****ed if our IP changes by itself or if we tried to play at a relatives/friends house.
Then make it so only a "foreign" IP needs to put in the password.
Quote from: hawk5005 on November 13, 2011, 05:34:58 PM
Quote from: Yz on November 13, 2011, 05:33:08 PM
Quote from: hawk5005 on November 13, 2011, 05:31:24 PM
Perhaps you could find a way to block another IP to log-in your account. This would also put a stop to account sharing.
Yeah we'd also be ****ed if our IP changes by itself or if we tried to play at a relatives/friends house.
Then make it so only a "foreign" IP needs to put in the password.
good suggestion. I will do this.
Omfg this is amazing. so basically if someone hacked onto my account all they could do is level me up or unequip my gear? who the hell would vote no!? I'm up for this.
Quote from: Santa on November 13, 2011, 05:35:30 PM
Quote from: hawk5005 on November 13, 2011, 05:34:58 PM
Quote from: Yz on November 13, 2011, 05:33:08 PM
Quote from: hawk5005 on November 13, 2011, 05:31:24 PM
Perhaps you could find a way to block another IP to log-in your account. This would also put a stop to account sharing.
Yeah we'd also be ****ed if our IP changes by itself or if we tried to play at a relatives/friends house.
Then make it so only a "foreign" IP needs to put in the password.
good suggestion. I will do this.
I already thought that's what everyone meant.. >___>
So yeah basically restating it for my own pleasure, a one time secondary password for every IP you log into.
Quote from: hawk5005 on November 13, 2011, 05:34:58 PM
Quote from: Yz on November 13, 2011, 05:33:08 PM
Quote from: hawk5005 on November 13, 2011, 05:31:24 PM
Perhaps you could find a way to block another IP to log-in your account. This would also put a stop to account sharing.
Yeah we'd also be ****ed if our IP changes by itself or if we tried to play at a relatives/friends house.
Then make it so only a "foreign" IP needs to put in the password.
So basically you'll need the password if the IP is different from you're home IP(s)?
Quote from: Toast on November 13, 2011, 05:38:04 PM
Quote from: hawk5005 on November 13, 2011, 05:34:58 PM
Quote from: Yz on November 13, 2011, 05:33:08 PM
Quote from: hawk5005 on November 13, 2011, 05:31:24 PM
Perhaps you could find a way to block another IP to log-in your account. This would also put a stop to account sharing.
Yeah we'd also be ****ed if our IP changes by itself or if we tried to play at a relatives/friends house.
Then make it so only a "foreign" IP needs to put in the password.
So basically you'll need the password if the IP is different from you're home IP(s)?
yep. That should protect the accounts alot more than they currently are. I could also add a timeout for 1 week.
as long as there's an option to turn if off, im 8) with it.
Quote from: BonzoDog on November 13, 2011, 05:36:11 PM
Omfg this is amazing. so basically if someone hacked onto my account all they could do is level me up or unequip my gear? who the hell would vote no!? I'm up for this.
Lazy/Arrogant people who go like "Well since I don't do it anyone that does should be left to rot" then when something happens to their account they turn to kenny and go like "qq save my account plox"
Quote from: zepher2211 on November 13, 2011, 05:49:09 PM
Quote from: BonzoDog on November 13, 2011, 05:36:11 PM
Omfg this is amazing. so basically if someone hacked onto my account all they could do is level me up or unequip my gear? who the hell would vote no!? I'm up for this.
Lazy/Arrogant people who go like "Well since I don't do it anyone that does should be left to rot" then when something happens to their account they turn to kenny and go like "qq save my account plox"
trudat, i've probably restores around 20-30 accounts. Keep in mind there's probably been over 200 stolen accounts. Those users whose accounts were stolen that have not been asked for back, probably quit the game, or just forgot about it, and never sent me a pm, and are using new accounts.
do what hawk said. that way we dont need to enter it every time, and only if we change ips.
only if the option can be disabled if wanted D:
y make it so complicated...
just add the feature. those who dont want to have to keep entering in their pass because they're not stupid can just turn off the feature
This is a great idea. Since it won't take people anytime at all then it's a great extra security.
This is how it works if anyone is having doubts;
QuoteKenneth Bullock says:
well
basically
you login to the game
verify your password
then
unless ur ip changes
it will never ask u again
if your ip changes
it will ask you
Quote from: Santa on November 13, 2011, 12:40:53 AM
Hello, the "new account security" would be implemented during account registration, and would require you chose a secondary password to prevent someone from stealing your account, and your items.
Basically, the way this would work, user logs into the game, and the user must enter the command @verify "Secondary Password". Until the user enters this password, he or she will not be able to trade/gift/exit guild/delete bot/sell items to shop/purchase items from shop.
The marketplace on the site would also require someone to use their secondary password during their session time. The only way the user can possibly enter the marketplace is if they enter the secondary password.
The secondary password cannot match the current password, and will give an error message while attempting to set the same. All current users will be forced to set up a secondary password either by logging into the game, and typing @setverify "New Password", or by using the website in their profile area. You would also have to use your account password and secondary password to change the secondary, but if there is none to begin with, you will be allowed to change it without using an old one.
Sorry if this topic doesn't make much sense at the moment, but I just gave a very brief description of what would happen if we do decided to implement this.
~RedEyes.
+1? O wait this isnt suggestions but i support it. Maybe now you guys wont have to spend hours trying to figure out hacking situations for the stupid people who give out their account info for a cookie.
this wont help for idiots who give there account info out... they'll just have to give out 1 more pass lol.
Quote from: asmit10 on November 13, 2011, 10:30:14 PM
this wont help for idiots who give there account info out... they'll just have to give out 1 more pass lol.
1. How will they be tricked into giving out two passwords? o-o
2. The people that **** up after this probably won't have their accounts restored
I think there should be a pop-up message to verify the 2nd password.
Else the people who don't check forums won't know what to type to enable trades/gifts etc.
It will remind you every time you enter the lobby to verify, if your account is not already verified. What i mean by this is, you enter shop, then back to lobby, then it tells you again. You go into a room, exit to lobby, it will then show it again.
~RedEyes.
Hello, due to the amount of people who do not want this added, we will not be adding it. Maybe we can come up with a better idea for account security later.
~RedEyes.