Originally posted by Mothanos

Hmm its the Arenanets faulth now you got hacked ?
Stay away from site's who pose a risk.
Make a good pasword.
Dont click links in email.

Account safe !

Dont blame a company for your own mistakes.

Look gw2 is awesome, but something beyond user error seems to be going on. 

Originally posted by thekid1

Originally posted by JeroKane

He probably clicked the link in the phising email, just like thousands of other people who still fall for it.

A lot of (gaming) sites and MMO studios have been hacked lately, with entire databases of data being stolen!

So if you haven't bothered changing your password lately.... then sorry, but then you made it extremely easy for these hackers.

Perhaps a stupid question.

But what is wrong with (just) clicking a link?

I thought as long as you don't type in your account info on a phishing website you are fine..

When a malicious or fishy link is clicked it's highly possible that that link is connected to a phishing website or attack website. What may look like a harmless URL could be a link re-directing a person to a website that may try to re-route their browser URL's by exploits, or  possible viruses and malicious programs that open up because they were allowed "access" by clicking on them. Think of hyperlinks as a gate-way door.

I've known people that clicked on phishing links and they ended up getting redirected to a bad websites. Browsers got  Hijacked. Ended up putting their information on the website they thought was legitimate and next thing known their accounts has been wiped clean.

http://www.antiphishing.org/

http://onguardonline.gov/articles/0003-phishing

It's abolutely ridiculous that after 20 years of commercial internet there are still new kids entering the segment that choose their birthdate or 1234qwer or 1qay2wsx as their passwords on every other occasion.

In 15 years of online gaming I've never ever been hacked. I use a password for random boards that could probably be hacked given enough tries and another one for accounts linked to bank account information (which is considerably longer and uses things like % or ü or #) and then theres MMO accounts.

The password for an MMO account is never ever stored digitally, anywhere. Period. It's in a bound book in a drawer under the desk I'm sitting at. And it's changed every 6 months or so and consists of min 12 characters, randomly generated.

The last one I had for LotRO was "0&et2$8s2!1(" (don't bother, it's already changed).

And for people who are too lazy to spend 20 seconds instead of 3 for entering their password. Well, you guys deserve to be hacked and robbed then.

And well, don't get me started about discarding any email with links in it unless it's from a hand-picked whitelist. EVERYTHING that is remotely important and relevant will be send by postal mail or phone call anyways. At least in Europe that is. There's a law here that forced me to tell the government where I live and what I do for a living, so if someone wants to talk business, I want ink and paper. Period. 

M

Originally posted by Eir_S

Originally posted by Mothanos

Hmm its the Arenanets faulth now you got hacked ?
Stay away from site's who pose a risk.
Make a good pasword.
Dont click links in email.

Account safe !

Dont blame a company for your own mistakes.

That's how my WoW account never got hacked.  I never clicked anything nor filled in any passwords anywhere.  I don't know that ANet is to blame for this anymore than Blizzard is to blame.

Unfortunately I'm going to have to side w/ Blizzard on this one. While they get hacked a lot also, Blizzard most definitely has more security on WoW than Anet has atm w/ GW2.

For starters, WoW has more checks on your account (+authenticators) to make it harder for people to steal your account, even if they phish your email (which happens fairly frequently nowadays). Secondly, WoW has a much quicker response team. When people's account gets hacked in WoW, they usually are talking to a person within a few hours. If their items were stolen, it took Blizzard another week or so on top of that. In GW2, you just get banned (can't play at all), and in some cases people didn't hear a word from Anet for close to a week.

When you do get in contact w/ Anet it's usually pretty smooth. However, their response isn't consistant enough to be considered good. Furthermore, their security is far from flawless, so saying Anet is 'blameless' for blanketly banning 1000s of accounts, many of them innocent, without having a proper response ready for people who got caught in the crossfire, is pretty irresponsible imho. It's not as though they didn't expect this game to be hugely popular, and rampant hacking is not exactly a new problem to MMOs. They should've had a plan just incase this happened (though I know it's kind of tough to expect such a huge attack even before the actual launch.

Even still, a lot of pre-purchases lost most of their headstart gametime while doing absolutely nothing to deserve such a response.

Originally posted by thekid1

Originally posted by JeroKane

He probably clicked the link in the phising email, just like thousands of other people who still fall for it.

A lot of (gaming) sites and MMO studios have been hacked lately, with entire databases of data being stolen!

So if you haven't bothered changing your password lately.... then sorry, but then you made it extremely easy for these hackers.

Perhaps a stupid question.

But what is wrong with (just) clicking a link?

I thought as long as you don't type in your account info on a phishing website you are fine..

Never click a link if you get a suspicious email it could put a trojan, keylogger or worm on you PC. Always go to the site in question manually through google or type in the address in the header. With emails always check the sending address as well to see if its genuine. Also get  web security software that actually scans your emails if you have them downloaded to your PC. 

1st email: The e-mail address for your Guild Wars account has been changed

2nd email: Confirm new e-mail address for your Guild Wars account

You do not click the link. You go to the site manually. Email does not exist.

ANet sends two emails to an email that does not exist, eh?

For some, they've commented that the email address is not even tied to GW/GW2.  In which case, why exactly did ANet send those emails out?  For some, they've commented that they may have registered for the GW2 beta - but never got in or never used it.  In which case, why does the email exist for the emails but not for an account?  For some, they're just wondering WTF happened - since they received two emails, where the second is asking for confirmation...something they do not confirm...yet they're no longer able to get into their account.

There's all sorts fun to be had in discussing this.  The curious discussions are involved in blaming the users.

Say somebody does grab their username/password combo from another site.  They're able to login.  They might be able to login to the game account and cause all sorts of havoc, but even there - not really.  In this day and age, the game should recognize that a person is logging in from another location and request an auth code for that location.  C'mon, it's 2012...

But you say they've changed the email, so that doesn't matter.  How did they change the email?  They have the user/pass.  Really?  To change the email, it should require verification from the current email.  Heck, the same goes for the password.

In order to compromise the account, the person should have to compromise both the account and the email.

Then you could really get into blaming the user - because they're likely to fall into crowd that's installed a trojan by downloading something they should not have or made the silly mistake of using the same password for their email as some other account.

Outside of that sort of thing though, it's 2012 - there's a certain level of responsibility that falls on the developers at this point, since they should have learned from the mistakes made by their fellow developers over the past 15+ years.

Originally posted by Calerxes

Originally posted by thekid1

Originally posted by JeroKane

He probably clicked the link in the phising email, just like thousands of other people who still fall for it.

A lot of (gaming) sites and MMO studios have been hacked lately, with entire databases of data being stolen!

So if you haven't bothered changing your password lately.... then sorry, but then you made it extremely easy for these hackers.

Perhaps a stupid question.

But what is wrong with (just) clicking a link?

I thought as long as you don't type in your account info on a phishing website you are fine..

 

Never click a link if you get a suspicious email it could put a trojan, keylogger or worm on you PC. Always go to the site in question manually through google or type in the address in the header. With emails always check the sending address as well to see if its genuine. Also get  web security software that actually scans your emails if you have them downloaded to your PC. 

Plus disable any kind of plugins and set them to "ask" so that if the site wants to activate anything else than "information" the browser asks you if that's ok.

Use uncommon browsers like Opera.

Be paranoid!

M

Originally posted by dbgager
What makes me laugh is when dumb azzs like this blame the company for there own lack of security. AreanaNet can only go so far to protect your account., Most of the responsibility lies with you.

And when ANet goes as far as they can...then you can make that statement.  :)

Originally posted by bcbully

Look gw2 is awesome, but something beyond user error seems to be going on. 

Yep, a lot of players assuming that hackers didn't trade or maintain dbases.

Welcome to the information age, already in progress.

Originally posted by Meridion

Originally posted by Calerxes

Originally posted by thekid1

Originally posted by JeroKane

He probably clicked the link in the phising email, just like thousands of other people who still fall for it.

A lot of (gaming) sites and MMO studios have been hacked lately, with entire databases of data being stolen!

So if you haven't bothered changing your password lately.... then sorry, but then you made it extremely easy for these hackers.

Perhaps a stupid question.

But what is wrong with (just) clicking a link?

I thought as long as you don't type in your account info on a phishing website you are fine..

 

Never click a link if you get a suspicious email it could put a trojan, keylogger or worm on you PC. Always go to the site in question manually through google or type in the address in the header. With emails always check the sending address as well to see if its genuine. Also get  web security software that actually scans your emails if you have them downloaded to your PC. 

Plus disable any kind of plugins and set them to "ask" so that if the site wants to activate anything else than "information" the browser asks you if that's ok.

Use uncommon browsers like Opera.

Be paranoid!

M

WOW how did you guess that, Opera is a great browser. I heartily recommend it.

Originally posted by Mothanos

Hmm its the Arenanets faulth now you got hacked ?
Stay away from site's who pose a risk.
Make a good pasword.
Dont click links in email.

Account safe !

Dont blame a company for your own mistakes.

It is partly NC softs fault, their policy of using email as account name is a bad idea.

But if you are careful you wont get hacked. I use a Pop3 server mail account only used for GW2. You should all do the same.

These hackers cannot do anything with your account unless they have your password. It does not matter on how many levels of security there is. SO people shut up about NCSoft. If you have a problem it is your fault in all cases. You are using passwords you have used before. You are answering phishing emails, and giving data to the hackers. You have malware on your computer ( keylogger ). It is your fault in 100% of the cases. These dumb complaints about hackers changing your email..Well they had to have your password to access your account in the first place.

Make sure you have a complex password composed of lowercase, uppercase, and numerals. and one that you have never used before on any account. Don't blame NCSoft for your lack of security.

Originally posted by Yaos
Some of the people getting the email do not have GW2 accounts.

Yep, that's why it's called phishing....

In fairness, why doesn't NCSoft offer a universal account authenticator for all of their games. Sure it's not fool-proof but I have never been hacked since I started using them for battlenet and rift ( I was hacked once for WoW, which is why I got the app). Lord knows they have enough games to protect.

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

Originally posted by Distopia

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

People need to take some responsibity for protecting there own account..

OH..I got hacked and my PW are the initials in my name..OMG

Originally posted by dbgager

Originally posted by Distopia

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

People need to take some responsibity for protecting there own account..

 

OH..I got hacked and my PW are the initials in my name..OMG

So why are you against companies improving their security?  Hrmmmm...

Originally posted by dbgager

Originally posted by Distopia

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

People need to take some responsibity for protecting there own account..

 

OH..I got hacked and my PW are the initials in my name..OMG

People need to assume some responisbility yes, but when offering a service of this type, it's also not out of the question to expect a company to use the latest in security features, to add that extra layer of protection.

Originally posted by VirusDancer

Originally posted by dbgager

Originally posted by Distopia

Does A-net/NC use a flagging system on accounts that tracks where a log-in has originated as well as detects hardware? Bioware used this ( it was a pain at times) however they didn't have widespread hacking issues either, I think in part due to this system.

My account locked down twice, once when I changed my GFX card, second time when I logged in from my phone. Each time I had to go in and manually unlock the account (security questions, etc..). Seems a simple, cost effective solution. DO they use anything like this?

People need to take some responsibity for protecting there own account..

 

OH..I got hacked and my PW are the initials in my name..OMG

So why are you against companies improving their security?  Hrmmmm...

Not against it. I am against people putting all the blame on NCSoft..when the simple fact of the matter is its their  fault. A PW is needed to get into your account plain and simple. There is no getting around that, no matter how much people want to point fingers.NCSOft did not give these hackers those passwords. I have never been hacked. I am very careful with my security.