Author Topic: Anti-Hacking Measures - Coin Lock
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
What do you guys think of this anti-hacking measure Trion put into place for RIFT?

http://rift.ign.com/articles/news/7423/Anti-Hacking-Measures-Coin-Lock

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
Alpha_Swift 
Posts: 5,821
Registered: Jul 16, '02
Extended Info (if available)
Real Post Cnt: 5,744
User ID: 697,744
Subject: Anti-Hacking Measures - Coin Lock
Let's just hope that people don't use the same password for their email as they do for Rift.

Authenticator is safer -- it's something you have.

 

-----signature-----
-
-
-
Can someone please answer Fermi's Paradox?
Link to this post
Ugh_Lancelot 
Title: Ooo...bouncy!
Posts: 5,492
Registered: Jun 17, '02
Extended Info (if available)
Real Post Cnt: 5,446
User ID: 689,383
Subject: Anti-Hacking Measures - Coin Lock
Interesting twist on it, to be sure. Of course, if the security around your registered email address doesn't prevent hackers from changing that, then this seems like spitting upwind.

 

-----signature-----
WoW and DAoC - Too many alts to count
Charter Member - Altaholics Anonymous
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
Alpha_Swift posted:
Let's just hope that people don't use the same password for their email as they do for Rift.

Authenticator is safer -- it's something you have.

That was my concern as well.

They are coming out with Authenticators in addition to this.

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
wowplayer321 
Posts: 288
Registered: May 13, '08
Extended Info (if available)
Real Post Cnt: 285
User ID: 1,296,786
Subject: Anti-Hacking Measures - Coin Lock
I had (e-mail) conversations with several of their Customer Service people and ended up with someone who said they were the head CS person.

To each person I explained what a VPN was and how it worked. Then I asked if there was going to be any problems with logging in from various cities across the US and changing IP's while playing.
Every single person automatically said I would have no problems except the head of department who (said) they checked with the programmers before saying that I would be fine.

So, the next day I set my VPN to normal operation where it changes cities every hour. Sure enough, I was quickly booted from the game with the message, "Your IP has changed since logging in."
I have never played since.

Luckily this was the day before regular release and I was able to cancel both the game and the 3 month collectors edition with little fuss over the phone.

Now, I don't want to call these people lairs. I prefer to think of them as simply ignorant. Except for the head CS person whom I WILL call a bold faced lair.

I can see they have ramped up their obnoxious security efforts to almost Blizzard levels.
Blizzard will freeze your account under these conditions and force a password reset before you can have your account back.

Also, there is no way you can opt out of this monitoring with either company. I asked. The Trion people said that they don't monitor IP's but you can see why I did not believe them.

 

-----signature-----
(none)
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
wowplayer321 posted:

I can see they have ramped up their obnoxious security efforts to almost Blizzard levels.



What are your security recommendations?

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
White_Bunnay 
Posts: 9,930
Registered: Apr 8, '01
Extended Info (if available)
Real Post Cnt: 9,640
User ID: 85,619
Subject: Anti-Hacking Measures - Coin Lock
Sprawl-zero1eye- posted:
What are your security recommendations?


USB Fingerprint scanner would be nice. Though the keychain option seems to work fine.

 

-----signature-----
Asheron's Call, Harvestgain - Gryphon 12/99-02/06
WoW, Korgath, Horde - http://gcguild.net/
Accounts of American Servicemen valor are dismissed as propaganda..
...yet accounts of difficulties are heralded as objectivity.
Link to this post
jojo263 
Posts: 3,846
Registered: Jun 18, '03
Extended Info (if available)
Real Post Cnt: 3,773
User ID: 813,347
Subject: Anti-Hacking Measures - Coin Lock
wowplayer321 posted:
I had (e-mail) conversations with several of their Customer Service people and ended up with someone who said they were the head CS person.

To each person I explained what a VPN was and how it worked. Then I asked if there was going to be any problems with logging in from various cities across the US and changing IP's while playing.
Every single person automatically said I would have no problems except the head of department who (said) they checked with the programmers before saying that I would be fine.

So, the next day I set my VPN to normal operation where it changes cities every hour. Sure enough, I was quickly booted from the game with the message, "Your IP has changed since logging in."
I have never played since.

Luckily this was the day before regular release and I was able to cancel both the game and the 3 month collectors edition with little fuss over the phone.

Now, I don't want to call these people lairs. I prefer to think of them as simply ignorant. Except for the head CS person whom I WILL call a bold faced lair.

I can see they have ramped up their obnoxious security efforts to almost Blizzard levels.
Blizzard will freeze your account under these conditions and force a password reset before you can have your account back.

Also, there is no way you can opt out of this monitoring with either company. I asked. The Trion people said that they don't monitor IP's but you can see why I did not believe them.



After reading this I'm not shocked that you have had account problems.

 

-----signature-----
Get armed
Link to this post
wowplayer321 
Posts: 288
Registered: May 13, '08
Extended Info (if available)
Real Post Cnt: 285
User ID: 1,296,786
Subject: Anti-Hacking Measures - Coin Lock
jojo263 posted:
wowplayer321 posted:
I had (e-mail) conversations with several of their Customer Service people and ended up with someone who said they were the head CS person.

To each person I explained what a VPN was and how it worked. Then I asked if there was going to be any problems with logging in from various cities across the US and changing IP's while playing.
Every single person automatically said I would have no problems except the head of department who (said) they checked with the programmers before saying that I would be fine.

So, the next day I set my VPN to normal operation where it changes cities every hour. Sure enough, I was quickly booted from the game with the message, "Your IP has changed since logging in."
I have never played since.

Luckily this was the day before regular release and I was able to cancel both the game and the 3 month collectors edition with little fuss over the phone.

Now, I don't want to call these people lairs. I prefer to think of them as simply ignorant. Except for the head CS person whom I WILL call a bold faced lair.

I can see they have ramped up their obnoxious security efforts to almost Blizzard levels.
Blizzard will freeze your account under these conditions and force a password reset before you can have your account back.

Also, there is no way you can opt out of this monitoring with either company. I asked. The Trion people said that they don't monitor IP's but you can see why I did not believe them.



After reading this I'm not shocked that you have had account problems.



Who said I was having account problems? Not me.

I will not say Blizzard is behind the times but that is what I am thinking.
All they have to do is add the ability to turn off all this account monitoring and they would be up to date.
To be ahead of the game they would have had to already have this capability.

So, what do you think is going to happen when I start traveling throughout Central America? My account frozen every time I log in from a different location, right?
How about I just set my VPN to make me appear from the same US city each time I login in and not have it change from that city at set time periods?
That would solve this particular problem and yet I will still be accessing my account from multiple locations from multiple different countries.

If an account scammer has your account name and PW then they are going to have the rest of your account information too, like where you live.
The set their VPN (needed to get past the blocked IP addresses of account scammers Blizz keeps) to a city near yours and poof, they are in.

You see how easy and pointless these "security features" really are. All they do is get in the way of legitimate players and do NOTHING to stop scam organizations.

 

-----signature-----
(none)
Link to this post
wowplayer321 
Posts: 288
Registered: May 13, '08
Extended Info (if available)
Real Post Cnt: 285
User ID: 1,296,786
Subject: Anti-Hacking Measures - Coin Lock
I detect scarcasim but I am glad you asked.

A normal player uses one computer and one account. They hardly ever play from a friends place or Internet Cafe (or whatever).

I have 2 accounts and play across three computers. Several times a day I will change servers and accounts depending of whatever task I am working on at that moment. Compiling gets done on one computer, video and audio editing another. Comp 3 has transcoding and a few other things going on most of the time.
One computer is by my feet, another is to the left and the other to the right. The right one is on a 4 way KVM switch along with 1-3 machines I am working on.

The reason I will not use the current Blizz dongle is because I have to read something off it each time I want to login. Even with USB extender cables it's a PITA to be moving it from one machine to another then back then to another all day as I jump on and off WoW. I just am not going to do it no matter how many threatening e-mails they send me.

All they would have to do is make one that simply needs to be plugged into the machine trying to login to WoW. I remember them well from the 80's so it's not like this is new tech. Throw on some 1024 bit encryption and you are GTG.

While this would still be a pain it would be a much less obnoxious intrusion than their current "read a number" model.
No dongle, no play. How is that any different than the current one?

 

-----signature-----
(none)
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
wowplayer321 posted:
The reason I will not use the current Blizz dongle is because I have to read something off it each time I want to login. Even with USB extender cables it's a PITA to be moving it from one machine to another then back then to another all day as I jump on and off WoW. I just am not going to do it no matter how many threatening e-mails they send me.

All they would have to do is make one that simply needs to be plugged into the machine trying to login to WoW. I remember them well from the 80's so it's not like this is new tech. Throw on some 1024 bit encryption and you are GTG.

What is the difference between moving the authenticator from machine-to-machine or a dongle? I remember those from the 80s with 3dsmax, and we used to have such problems getting the computer to load the driver and recognize it was connected. Hopefully, that technology has come a long way, perhaps a USB version would be cool, but probably more expensive than the $6.50 they charge of the authenticator.

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
GutterSludge 
Posts: 4,620
Registered: Nov 6, '05
Extended Info (if available)
Real Post Cnt: 4,545
User ID: 1,091,587
Subject: Anti-Hacking Measures - Coin Lock
It takes like 3 seconds to push the button on the authenticator, and type in the number.

If that is too difficult for you, perhaps WOW is not for you.


If you travel to South America, and login from there, you will not have just logged in from your house, and therefore would probably not set off a flag.

Logging in from 10 different cities over the course of one hour WILL set off a flag. Its about the time between logins, vs. the location of the IP's that flags you.


How about I just set my VPN to make me appear from the same US city each time I login in and not have it change from that city at set time periods?

This seems like your answer, but it appears you would just rather complain...









 

-----signature-----
Guttersludge
People just can't handle the truth.
NeMeFieD said:"Yea I Ucmed for 12 days straight.."
njwCSUS posted:I'm homosexual, so really, its ongoing sexual attraction to my father, not my mother.
Link to this post
vn_cuch 
Posts: ????
Registered: ????
Extended Info (if available)
Real Post Cnt: 0
User ID: 0
Subject: Anti-Hacking Measures - Coin Lock
White_Bunnay posted:
Sprawl-zero1eye- posted:
What are your security recommendations?


USB Fingerprint scanner would be nice. Though the keychain option seems to work fine.





uggh.....fingerprint scanners are NOT good.

<- I work in security industry, and it is known that fingerprint scanners are not reliable. Plam prints are much better.

If you want a bit of a laugh, there is a older vid of a fingerprint scanner being "fooled" by a sausage wink

 

-----signature-----
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
The finger scanner part is really not needed. Once you plugin the device, you've proven it is pretty much you. I doubt a hacker is going to come to your house, kick your butt, and steal your usb finger scanner.

tongue

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
The_Korrigan 
Title: Scrub Buster
Posts: 21,660
Registered: Jul 17, '01
Extended Info (if available)
Real Post Cnt: 21,292
User ID: 255,861
Subject: Anti-Hacking Measures - Coin Lock
Aren't Blizzard already locking accounts when they are logging in very far away from the "usual" connection?

 

-----signature-----
SWTOR: 50 Jedi Shadow (Tank), 50 Sith Marauder (Annihilation).
LOTRO: Lifetime account, playing very casually.
WoW: Both accounts canceled for now.
GW2: Future Warrior.
Link to this post
GutterSludge 
Posts: 4,620
Registered: Nov 6, '05
Extended Info (if available)
Real Post Cnt: 4,545
User ID: 1,091,587
Subject: Anti-Hacking Measures - Coin Lock
Again, it has more to do with the time between those logins vs. the distance between them.

If you log in from France, and then 10 minutes later login from China, you will get locked.

If your last login was 3 days ago, and then you login from China, you probably will not be locked.


I have traveled all over the southeast U.S., from Miami to Atlanta, and never once been locked out.


player is intentionally cycling different cities with the VPN, and is bringing the lock upon himself by doing so, and then complaining about it.

He goes through all of this (supposedly) so that he doesn't have to type in 6 whole digits every time he logs in.

/chuckle









 

-----signature-----
Guttersludge
People just can't handle the truth.
NeMeFieD said:"Yea I Ucmed for 12 days straight.."
njwCSUS posted:I'm homosexual, so really, its ongoing sexual attraction to my father, not my mother.
Link to this post
_Warlucky_ 
Posts: 1,255
Registered: Jul 20, '08
Extended Info (if available)
Real Post Cnt: 1,251
User ID: 1,310,012
Subject: Anti-Hacking Measures - Coin Lock
Trion is using Blizz region based prevention technique but what they are doing different is that rather then lock you out of the account completely they disable features that can cause problems. You can't send coins, shard equipment, sell equipment, etc. But you can gain new equipment and coin. So technically you don't have to reactivate the account until your bags are full.

Probably not perfect but at least they put some thought into it which for MMOs is a nice change.

 

-----signature-----
(none)
Link to this post
GutterSludge 
Posts: 4,620
Registered: Nov 6, '05
Extended Info (if available)
Real Post Cnt: 4,545
User ID: 1,091,587
Subject: Anti-Hacking Measures - Coin Lock
Yah, it is good that they are starting with this type of feature, rather then wait until thousands of accounts are hacked (Blizzardcoughcough)

 

-----signature-----
Guttersludge
People just can't handle the truth.
NeMeFieD said:"Yea I Ucmed for 12 days straight.."
njwCSUS posted:I'm homosexual, so really, its ongoing sexual attraction to my father, not my mother.
Link to this post
jojo263 
Posts: 3,846
Registered: Jun 18, '03
Extended Info (if available)
Real Post Cnt: 3,773
User ID: 813,347
Subject: Anti-Hacking Measures - Coin Lock
GutterSludge posted:
Again, it has more to do with the time between those logins vs. the distance between them.

If you log in from France, and then 10 minutes later login from China, you will get locked.

If your last login was 3 days ago, and then you login from China, you probably will not be locked.


I have traveled all over the southeast U.S., from Miami to Atlanta, and never once been locked out.


player is intentionally cycling different cities with the VPN, and is bringing the lock upon himself by doing so, and then complaining about it.

He goes through all of this (supposedly) so that he doesn't have to type in 6 whole digits every time he logs in.

/chuckle






Yay someone that gets it.

 

-----signature-----
Get armed
Link to this post
Shiba-X 
Posts: 12,185
Registered: May 8, '01
Extended Info (if available)
Real Post Cnt: 11,816
User ID: 94,992
Subject: Anti-Hacking Measures - Coin Lock
jojo263 posted:
GutterSludge posted:
Again, it has more to do with the time between those logins vs. the distance between them.

If you log in from France, and then 10 minutes later login from China, you will get locked.

If your last login was 3 days ago, and then you login from China, you probably will not be locked.


I have traveled all over the southeast U.S., from Miami to Atlanta, and never once been locked out.


player is intentionally cycling different cities with the VPN, and is bringing the lock upon himself by doing so, and then complaining about it.

He goes through all of this (supposedly) so that he doesn't have to type in 6 whole digits every time he logs in.

/chuckle






Yay someone that gets it.






So thats why he does it.. For the life of me I was trying to figure out WHY he has to change the IP from city to city. I remember him bitching about WoW booting him and Rift wouldnt.

 

-----signature-----
Hi, I'm a poster with no social skills who spews constant insults. What server do I play on?Todd_Berkebile
Shiba-X 242 bow. Mahdi 251 Mage William Marshall 170somethig
Anita Heal tells you, "how r ya sweep pea"
Anita Heal tells you, "u intercepting my
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
I was too afraid to ask why. tongue

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
_Taebo_ 
Posts: 18,672
Registered: Feb 28, '01
Extended Info (if available)
Real Post Cnt: 18,201
User ID: 70,868
Subject: Anti-Hacking Measures - Coin Lock
I wouldn't mind a USB dongle, I have had an authenticator since 2008 and will continue to use it, but it would be nice to log in and not have to type in the digits off of crappy tiny LCD. My room doesn't have a lot of light, I have to hold the authenticator under a lamp to see it.

 

-----signature-----
May the best MMORPG win.
VNBoards: Where user speculation and opinion are always facts.
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
Yeah, or even a backlit one for a few extra bucks.

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
LadyGodiva. 
Posts: 3,301
Registered: Nov 8, '08
Extended Info (if available)
Real Post Cnt: 3,300
User ID: 1,336,124
Subject: Anti-Hacking Measures - Coin Lock
GutterSludge posted:
If you travel to South America, and login from there, you will not have just logged in from your house, and therefore would probably not set off a flag.


Yes you will. I travelled from Miami to Buenos Aires and logged in several *days* later and my account was locked. It wasn't a big deal to log into account management and change the password, but they do keep track of your habits a lot longer than just a few hours. I'm not sure why this extra layer of security is necessary when I am already using an authenticator.

I don't like all this tracking technology that I didn't ask for. Facebook was a bigger pain to log into than WoW.

 

-----signature-----
(none)
Link to this post
GutterSludge 
Posts: 4,620
Registered: Nov 6, '05
Extended Info (if available)
Real Post Cnt: 4,545
User ID: 1,091,587
Subject: Anti-Hacking Measures - Coin Lock
Its there to help protect you.

Since account sharing is against the TOS, the only reason an IP should ever be hugely different is if you travel (like to Buenos Aires).

Knowing you were going to travel, a quick phone call would have saved you the lock.



With that said, would you rather have the lock process, or just let some dolt from China ravage your account, and go through the (up to) 2 week restoration process?

Is it overkill if you have an authenticator? Possibly.

If you are traveling, can you communicate this to Blizz, and avoid this? Absolutely.

"Hey blizz, I'm doing study abroad in Spain for 3 months, don't lock me!!"
Blizz: "NP, have a safe trip."

Is intentionally cycling your VPN to cities all over the continent better than a 6 and a half dollar (with free shipping) authenticator? Hell no.


And I must ask this question. When you went to B.A., did someone log into your account from your home? If so, then you should have been locked, and the system worked perfectly, as no person (who doesn't share an account, and violate the TOS), can be in two places at once.







 

-----signature-----
Guttersludge
People just can't handle the truth.
NeMeFieD said:"Yea I Ucmed for 12 days straight.."
njwCSUS posted:I'm homosexual, so really, its ongoing sexual attraction to my father, not my mother.
Link to this post
LadyGodiva. 
Posts: 3,301
Registered: Nov 8, '08
Extended Info (if available)
Real Post Cnt: 3,300
User ID: 1,336,124
Subject: Anti-Hacking Measures - Coin Lock
I just don't see the need to track people when they are supposedly already protected by the authenticator. The chances of someone stealing my authenticator and guessing my login/password are slim to none. And why should I have to call up Blizzard to tell them about my travel plans? I'd rather reset the password - it wasn't that big of a deal, I was just surprised that they do indeed lock you out if you log in overseas even days later.

I don't share my account info, and nobody used my computer at home - I'm just putting it out there that there's a good chance that you'll be locked out if you travel abroad.

 

-----signature-----
(none)
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
They aren't tracking you anymore than a website that records your IP address, and all of them do, including this one. They are merely adding a step that compares the two, and if vastly different, block.

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
Quazimortal 
Title: The One and Only
Posts: 17,806
Registered: Sep 18, '04
Extended Info (if available)
Real Post Cnt: 17,157
User ID: 968,129
Subject: Anti-Hacking Measures - Coin Lock
Sprawl-zero1eye- posted:
They aren't tracking you anymore than a website that records your IP address, and all of them do, including this one. They are merely adding a step that compares the two, and if vastly different, block.


And what is the point of having such a system active on an account that is protected by an authenticator?

 

-----signature-----
“A painter paints his pictures on canvas. But musicians paint their pictures on silence.
We provide the music, and you provide the silence.” ~Leopold Stokowski
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
Why does anyone do it? It's just another layer of protection. The authenticator isn't fool proof, although I would argue "good enough" in most cases.

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
GutterSludge 
Posts: 4,620
Registered: Nov 6, '05
Extended Info (if available)
Real Post Cnt: 4,545
User ID: 1,091,587
Subject: Anti-Hacking Measures - Coin Lock
Authenticator or no, this seems like it would be a good countermeasure for power-leveling services...

 

-----signature-----
Guttersludge
People just can't handle the truth.
NeMeFieD said:"Yea I Ucmed for 12 days straight.."
njwCSUS posted:I'm homosexual, so really, its ongoing sexual attraction to my father, not my mother.
Link to this post
Exodus_The_Mage 
Posts: 2,219
Registered: Oct 29, '00
Extended Info (if available)
Real Post Cnt: 2,116
User ID: 51,602
Subject: Anti-Hacking Measures - Coin Lock
Authenticator is better than a physical token plugged into the machine directly.

In the case where your machine is compromised, a hacker can keylog your login/id and remotely login to your account via your own machine.

For authenticator, the hacker will need to be physically at your place to use the computer and the authenticator to login to your account.

 

-----signature-----
"Like almost everyone, I receive a lot of spam every day, much of it offering to help me get out of debt or get rich quick. It's ridiculous." - Bill Gates

Link to this post
Quazimortal 
Title: The One and Only
Posts: 17,806
Registered: Sep 18, '04
Extended Info (if available)
Real Post Cnt: 17,157
User ID: 968,129
Subject: Anti-Hacking Measures - Coin Lock
Exodus_The_Mage posted:
Authenticator is better than a physical token plugged into the machine directly.

In the case where your machine is compromised, a hacker can keylog your login/id and remotely login to your account via your own machine.

For authenticator, the hacker will need to be physically at your place to use the computer and the authenticator to login to your account.


Exactly, which means if an authenticated account is logged into successfully 300 miles away 2 minutes after you logged off then they had to have done it with your consent and with you providing them with the authentication code. That means there is zero need for your account to be temporarily locked because they logged in from far away and yet sure enough you will be. Stupid redundancy is stupid.

 

-----signature-----
“A painter paints his pictures on canvas. But musicians paint their pictures on silence.
We provide the music, and you provide the silence.” ~Leopold Stokowski
Link to this post
GutterSludge 
Posts: 4,620
Registered: Nov 6, '05
Extended Info (if available)
Real Post Cnt: 4,545
User ID: 1,091,587
Subject: Anti-Hacking Measures - Coin Lock
Quazimortal posted:
Exodus_The_Mage posted:
Authenticator is better than a physical token plugged into the machine directly.

In the case where your machine is compromised, a hacker can keylog your login/id and remotely login to your account via your own machine.

For authenticator, the hacker will need to be physically at your place to use the computer and the authenticator to login to your account.


Exactly, which means if an authenticated account is logged into successfully 300 miles away 2 minutes after you logged off then they had to have done it with your consent and with you providing them with the authentication code. That means there is zero need for your account to be temporarily locked because they logged in from far away and yet sure enough you will be. Stupid redundancy is stupid.



Which is a violation of the TOS and EULA.

I guess they could step it up to an outright ban, and skip the "lock/password change" procedure altogether.

 

-----signature-----
Guttersludge
People just can't handle the truth.
NeMeFieD said:"Yea I Ucmed for 12 days straight.."
njwCSUS posted:I'm homosexual, so really, its ongoing sexual attraction to my father, not my mother.
Link to this post
The_Korrigan 
Title: Scrub Buster
Posts: 21,660
Registered: Jul 17, '01
Extended Info (if available)
Real Post Cnt: 21,292
User ID: 255,861
Subject: Anti-Hacking Measures - Coin Lock
Exodus_The_Mage posted:
Authenticator is better than a physical token plugged into the machine directly.

In the case where your machine is compromised, a hacker can keylog your login/id and remotely login to your account via your own machine.

For authenticator, the hacker will need to be physically at your place to use the computer and the authenticator to login to your account.
If your computer is compromised to the point that someone can remotely use it to log into a WoW account, then you have way more important things to worry about than your WoW account anyway, first thing being to immediately shut down that Internet connection of yours by physically unplugging the cable or disabling the network adapter. Because if someone can control your machine this way, it's not just your WoW account which is at risk.

 

-----signature-----
SWTOR: 50 Jedi Shadow (Tank), 50 Sith Marauder (Annihilation).
LOTRO: Lifetime account, playing very casually.
WoW: Both accounts canceled for now.
GW2: Future Warrior.
Link to this post
Quazimortal 
Title: The One and Only
Posts: 17,806
Registered: Sep 18, '04
Extended Info (if available)
Real Post Cnt: 17,157
User ID: 968,129
Subject: Anti-Hacking Measures - Coin Lock
GutterSludge posted:
Quazimortal posted:
Exodus_The_Mage posted:
Authenticator is better than a physical token plugged into the machine directly.

In the case where your machine is compromised, a hacker can keylog your login/id and remotely login to your account via your own machine.

For authenticator, the hacker will need to be physically at your place to use the computer and the authenticator to login to your account.


Exactly, which means if an authenticated account is logged into successfully 300 miles away 2 minutes after you logged off then they had to have done it with your consent and with you providing them with the authentication code. That means there is zero need for your account to be temporarily locked because they logged in from far away and yet sure enough you will be. Stupid redundancy is stupid.



Which is a violation of the TOS and EULA.

I guess they could step it up to an outright ban, and skip the "lock/password change" procedure altogether.


Well if I were someone who did that and was banned they would be losing another customer because I wouldn't be getting a new account. I don't like being told who I can or can't give access to my accounts. Mind you I don't share my information at all, but if I did that is the stance I would take.

 

-----signature-----
“A painter paints his pictures on canvas. But musicians paint their pictures on silence.
We provide the music, and you provide the silence.” ~Leopold Stokowski
Link to this post
GutterSludge 
Posts: 4,620
Registered: Nov 6, '05
Extended Info (if available)
Real Post Cnt: 4,545
User ID: 1,091,587
Subject: Anti-Hacking Measures - Coin Lock
I can respect that, Quasi.

 

-----signature-----
Guttersludge
People just can't handle the truth.
NeMeFieD said:"Yea I Ucmed for 12 days straight.."
njwCSUS posted:I'm homosexual, so really, its ongoing sexual attraction to my father, not my mother.
Link to this post
Exodus_The_Mage 
Posts: 2,219
Registered: Oct 29, '00
Extended Info (if available)
Real Post Cnt: 2,116
User ID: 51,602
Subject: Anti-Hacking Measures - Coin Lock
The_Korrigan posted:
[quote=Exodus_The_Mage]
If your computer is compromised to the point that someone can remotely use it to log into a WoW account, then you have way more important things to worry about than your WoW account anyway, first thing being to immediately shut down that Internet connection of yours by physically unplugging the cable or disabling the network adapter. Because if someone can control your machine this way, it's not just your WoW account which is at risk.


It's not always easy to tell if a machine is compromised these days. Malware can stay stealth with a little manipulation to your anti-virus and firewall tools.

Most online banking sites already offer some form of two-factors authentication (either via physical token or one-time-password via text message), and Gmail added a mobile authenticator option recently as well.

It's a necessary hassle if you want to protect your "valuable" online assets -- banking, trading account, email etc.

 

-----signature-----
"Like almost everyone, I receive a lot of spam every day, much of it offering to help me get out of debt or get rich quick. It's ridiculous." - Bill Gates

Link to this post
Arch_Magi 
Title: The Lord of Chaos
Posts: 106,493
Registered: Oct 31, '02
Extended Info (if available)
Real Post Cnt: 102,020
User ID: 733,498
Subject: Anti-Hacking Measures - Coin Lock
I can't wait for my free Authenticator app for my smart phone that Rift is coming up with.

 

-----signature-----
(none)
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
Quazimortal posted:
Well if I were someone who did that and was banned they would be losing another customer because I wouldn't be getting a new account. I don't like being told who I can or can't give access to my accounts. Mind you I don't share my information at all, but if I did that is the stance I would take.

When you hit agree to EULA, do you cross your fingers behind your back? wink

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
Sprawl-zero1eye- 
Title: IGN Vault Staff
Reziztance iz Futile

Posts: 53,263
Registered: Jun 28, '02
Extended Info (if available)
Real Post Cnt: 52,657
User ID: 692,733
Subject: Anti-Hacking Measures - Coin Lock
Arch_Magi posted:
I can't wait for my free Authenticator app for my smart phone that Rift is coming up with.

WoW has this, and it works pretty decently unless you happen to let your phone's battery die. Then you are on hold with Blizzard/Trion trying to unlock your account.

 

-----signature-----
Mirkwood MUD, OneEye IvoryFang, Lord of the VampireZ (Retired)
AC Frostfell, Clan Z - Lvl 239 Grief Dagger (Retired)
WoW Lightbringer Alliance, Z Guild - Lvl 85 Combat Rogue (Retired)
Making iOS Apps these days at http://zsprawl.com/iOS
Link to this post
Quazimortal 
Title: The One and Only
Posts: 17,806
Registered: Sep 18, '04
Extended Info (if available)
Real Post Cnt: 17,157
User ID: 968,129
Subject: Anti-Hacking Measures - Coin Lock
Sprawl-zero1eye- posted:
Quazimortal posted:
Well if I were someone who did that and was banned they would be losing another customer because I wouldn't be getting a new account. I don't like being told who I can or can't give access to my accounts. Mind you I don't share my information at all, but if I did that is the stance I would take.

When you hit agree to EULA, do you cross your fingers behind your back? wink


Stop telling people you jerk! shhh

 

-----signature-----
“A painter paints his pictures on canvas. But musicians paint their pictures on silence.
We provide the music, and you provide the silence.” ~Leopold Stokowski
Link to this post
-Mithan- 
Title: VNBoard Admin
Posts: 1,000,060,379
Registered: Mar 1, '00
Extended Info (if available)
Real Post Cnt: 56,880
User ID: 13,156
Subject: Anti-Hacking Measures - Coin Lock
Sprawl-zero1eye- posted:
What do you guys think of this anti-hacking measure Trion put into place for RIFT?

[link=http://rift.ign.com/articles/news/7423/Anti-Hacking-Measures-Coin-Lock http://rift.ign.com/articles/news/7423/Anti-Hacking-Measures-Coin-Lock [/l ink]

It is a good idea and something ALL MMO's should implement, immediatly.  However, the Authenticator is #1.

 

-----signature-----
I survived to the end and got nothing out of it, but hey.
Link to this post
heiromancerdrackus 
Title: Is, indeed, a fat ass.
Posts: 17,283
Registered: Dec 24, '01
Extended Info (if available)
Real Post Cnt: 17,007
User ID: 573,741
Subject: Anti-Hacking Measures - Coin Lock
Sprawl-zero1eye- posted:
Arch_Magi posted:
I can't wait for my free Authenticator app for my smart phone that Rift is coming up with.

WoW has this, and it works pretty decently unless you happen to let your phone's battery die. Then you are on hold with Blizzard/Trion trying to unlock your account.


Seriously? I don't remember having that happen with mine. I was actually able to get them to unlock my account because I gave them the key to my old keyfob when I forgot to detach the smartphone app during a flash on the phone.

 

-----signature-----
(none)
Link to this post
The_Korrigan 
Title: Scrub Buster
Posts: 21,660
Registered: Jul 17, '01
Extended Info (if available)
Real Post Cnt: 21,292
User ID: 255,861
Subject: Anti-Hacking Measures - Coin Lock
I don't understand the battery thing either... when the battery is empty on my mobile phone... well, I just reload it.
What's the problem?

As Heiro said, you must just be sure to detach the authenticator if you happen to flash a new ROM on your phone.

One thing is sure though - the account thieves are just as stupid on Rift than they are on WoW. I started receiving "Your Trion account has been changed" emails on my trash email address which was never used for any MMORPG account... same as for WoW.

 

-----signature-----
SWTOR: 50 Jedi Shadow (Tank), 50 Sith Marauder (Annihilation).
LOTRO: Lifetime account, playing very casually.
WoW: Both accounts canceled for now.
GW2: Future Warrior.
Link to this post

Valid XHTML 1.0 Transitional Powered by PHP