Trending Games | ArcheAge | World of Warcraft | Elder Scrolls Online | Star Wars: The Old Republic

  Network:  FPSguru RTSguru
Login:  Password:   Remember?  
Show Quick Gamelist Jump to Random Game
Members:2,923,305 Users Online:0
Games:760  Posts:6,315,904
Recent forum postsRSS
Active threads
Cloud view
List all forums
General Forums
Developers Corner General Discussion
Popular Game Forums
Click a status to find game forum
Game Forums
Click a letter to find game forum
A-C
2029 Online 2112: Revolution 2Moons 4Story 8BitMMO 9 Dragons A Mystical Land A Tale in the Desert III A3 ACE Online ARGO Online Aberoth Absolute Force Online Absolute Terror Achaea Adellion Aerrevan Aetolia, the Midnight Age Age of Armor Age of Conan Age of Empires Online Age of Mourning Age of Wulin Age of Wushu Aida Arenas Aika Aion Albion Online Alganon All Points Bulletin (APB) Allods Online Altis Gates Amazing World Anarchy Online Ancients of Fasaria Andromeda 5 Angels Online Angry Birds Epic Anime Ninja Anime Pirates Anime Trumps Anmynor Anno Online Applo Arcane Hearts Arcane Legends ArchLord ArcheAge Archeblade Archlord X Ascend: Hand of Kul Asda 2 Asda Story Ashen Empires Asheron's Call Asheron's Call 2 Astera Online Astonia III Astro Empires Astro Lords: Oort CLoud Asura Force Atlantica Online Atriarch Aura Kingdom Aurora Blade Auto Assault Avatar Star Battle Dawn Battle Dawn Galaxies Battle for Graxia Battle of 3 Kingdoms Battle of the Immortals Battlecruiser Online Battlestar Galactica Online Battlestar Reloaded Beyond Protocol Black Aftermath Black Desert Black Gold Black Prophecy Black Prophecy Tactics: Nexus Conflict Blacklight Retribution Blade & Soul Blade Hunter Blade Wars Blazing Throne Bless Blitz 1941 Blood and Jade Bloodlines Champions Boot Hill Heroes Borderlands 2 Borderlands: The Pre-Sequel Bound by Flame Bounty Bay Online Brain Storm Bravada Bravely Default Bravely Second Brawl Busters. Brick-Force Bright Shadow Bullet Run Business Tycoon Online CTRacer Cabal Online Caesary Call of Camelot Call of Gods Call of Thrones Camelot Unchained Canaan Online Cardmon Hero Cartoon Universe CasinoRPG Cast & Conquer Castle Empire Castlot Celtic Heroes Champions Online Champions of Regnum Chaos Online Child of Light Chrono Tales Citadel of Sorcery CitiesXL Citizen Zero City of Decay City of Heroes City of Steam City of Transformers City of Villains Civilization Online Clan Lord Clash of Clans Cloud Nine Club Penguin Colony of War Command & Conquer: Tiberium Alliances Company of Heroes Online Conquer Online Conquer Online 3 Continent of the Ninth (C9) Core Blaze Core Exiles Corum Online Craft of Gods Crimecraft Crimelife 2 Cronous Crota II Crusaders of Solaris Cultures Online Cyber Monster 2 Cyberpunk 2077 Céiron Wars
D-F
D&D Online DC Universe DK Online DOTA DOTA 2 DUST 514 DV8: Exile Dalethaan Dance Groove Online Dark Age of Camelot Dark Ages Dark Legends Dark Orbit Dark Relic: Prelude Dark Solstice Dark Souls 2 Dark and Light DarkEden Online DarkSpace Darkblood Online Darkest Dungeon Darkfall Darkfall: Unholy Wars Darkwind: War on Wheels Das Tal Dawn of Fantasy Dawntide DayZ Dead Earth Dead Frontier Dead Island Dead Island 2 Dead Island: Riptide Deco Online Deep Down Deepworld Defiance Deicide Online Dekaron Demons at the Horizon Desert Operations Destiny Diablo 3 Diamonin Digimon Battle Dino Storm Disciple Divergence Divina Divine Souls Divinity: Original Sin Dofus Dominus Online Dragon Age: Inquisition Dragon Ball Online Dragon Born Online Dragon Crusade Dragon Empires Dragon Eternity Dragon Fin Soup Dragon Nest Dragon Oath Dragon Pals Dragon Raja Dragon's Call Dragon's Call II Dragon's Prophet DragonSky DragonSoul Dragona Dragonica Dragons and Titans Drakengard 3 Dream of Mirror Online Dreamland Online Dreamlords: The Reawakening Drift City Duels Dungeon Blitz Dungeon Fighter Online Dungeon Overlord Dungeon Party Dungeon Rampage Dungeon Runners Dungeon of the Endless Dynastica Dynasty Warriors Online Dynasty of the Magi EIN (Epicus Incognitus) EVE Online Earth Eternal Earth and Beyond Earthrise Eclipse War Ecol Tactics Online Eden Eternal Edge of Space Einherjar - The Viking's Blood Elder Scrolls Online Eldevin Elf Online Elite: Dangerous Embers of Caerus Emil Chronicle Online Empire Empire & State Empire Craft Empire Universe 3 EmpireQuest Empires of Galldon End of Nations Endless Ages Endless Blue Moon Online Endless Online Entropia Universe EpicDuel Erebus: Travia Reborn Eredan Eternal Blade Eternal Lands Eternal Saga Ether Fields Ether Saga Online Eudemons Online EuroGangster EverEmber Online EverQuest Next EverQuest Online Adventures Evernight Everquest Everquest II Evony Exarch Exorace F.E.A.R. Online Face of Mankind Fairyland Online Fall of Rome Fallen Earth Fallen Sword Fallout 4 Fallout Online Family Guy Online Fantage Fantasy Earth Zero Fantasy Realm Online Fantasy Tales Online Fantasy Worlds: Rhynn Faunasphere Faxion Online Fearless Fantasy Ferentus Ferion Fiesta Online Final Fantasy Type-0 HD Final Fantasy XI Final Fantasy XIV Final Fantasy XIV: A Realm Reborn Firefall Fists of Fu Florensia Flyff Football Manager Live Football Superstars Force of Arms Forge Forsaken Uprising Forsaken World Fortnite Fortuna Forum for Discussion of Everlight Freaky Creatures Free Realms Freesky Online Freeworld Fung Wan Online Furcadia Fury Fusion Fall
G-L
GalaXseeds Galactic Command Online Game of Thrones: Seven Kingdoms Gameglobe Gate To Heavens Gates of Andaron Gatheryn Gauntlet Gekkeiju Online Ghost Online Ghost Recon Online Gladiatus Glitch Global Agenda Global Soccer Gloria Victis Glory of Gods GoGoRacer Goal Line Blitz Gods and Heroes GodsWar Online Golemizer Golf Star GoonZu Online Graal Kingdoms Granado Espada Online Grand Chase Grand Fantasia Grepolis Grimlands Guild Wars Guild Wars 2 Guild Wars Factions Guild Wars Nightfall H1Z1 Habbo Hotel Hailan Rising HaloSphere2 Haven & Hearth Hawken Heart Forth Alicia Hearthstone: Heroes of Warcraft Helbreath Hellgate Hellgate: London Hello Kitty Online Hero Online Hero Zero Hero's Journey Hero: 108 Online HeroSmash Heroes & Generals Heroes & Legends: Conquerors of Kolhar Heroes in the Sky Heroes of Atlan Heroes of Bestia Heroes of Gaia Heroes of Might and Magic Online Heroes of Thessalonica Heroes of Three Kingdoms Heroes of the Storm Hex Holic Online Hostile Space Hunter Blade Huxley Icewind Dale: Enhanced Edition Illutia Illyriad Immortals USA Imperator Imperian Inferno Legend Infestation: Survivor Stories Infinite Crisis Infinity Infinity Iris Online Iron Grip: Marauders Irth Worlds Island Forge Islands of War Istaria: Chronicles of the Gifted Jade Dynasty Jagged Alliance Online Juggernaut Jumpgate Jumpgate Evolution KAL Online Kakele Online Kaos War Karos Online Kartuga Kicks Online King of Kings 3 Kingdom Heroes Kingdom Under Fire II Kingdom of Drakkar Kingory Kings Era Kings and Legends Kings of the Realm KingsRoad Kitsu Saga Kiwarriors Knight Age Knight Online Knights of Dream City Kothuria Kung Foo! Kunlun Online Kyn L.A.W. LEGO Universe La Tale Land of Chaos Online Landmark Lands of Hope: Redemption LastChaos League of Angels League of Legends - Clash of Fates Legend of Edda: Vengeance Legend of Golden Plume Legend of Grimrock 2 Legend of Katha Legend of Mir 2 Legend of Mir 3 Legendary Champions Lego Minifigures Online Lichdom: Battlemage Life is Feudal Light of Nova Lime Odyssey Line of Defense Lineage Lineage Eternal: Twilight Resistance Lineage II Linkrealms Loong Online Lord of the Rings Online Lords Online Lords of the Fallen Lost Saga Lucent Heart Lunia Lusternia: Age of Ascension Luvinia World
M-Q
MU Online Mabinogi Maestia: Rise of Keledus MagiKnights Magic Barrage Magic World Online Manga Fighter MapleStory Martial Heroes Marvel Heroes Marvel Super Hero Squad Online Marvel: Avengers Alliance Mass Effect 4 MechWarrior Online Megaten Meridian 59 : Evolution Merlin MetalMercs Metaplace Metin 2 MicroVolts Middle-earth: Shadow of Mordor Midkemia Online Might & Magic Heroes: Kingdoms Might & Magic X: Legacy MilMo Minecraft Mini Fighter Minions of Mirth Ministry of War Monato Esprit Monkey King Online Monkey Quest Monster & Me Monster Madness Online MonsterMMORPG Moonlight Online: Tales of Eternal Blood Moonrise Mordavia Mortal Online Mourning My Lands Myst Online: URU Live Myth Angels Online Myth War Myth War 2 Mythborne Mytheon Mythic Saga Mythos N.E.O Online NIDA Online Nadirim Naviage: The Power of Capital Navy Field Need for Speed World Nemexia Neo's Land NeoSteam Neocron Nether Neverwinter Nexus: The Kingdom Of The Winds NinjaTrick NosTale Novus Aeterno Oberin Odin Quest Odyssey RPG Ogre Island Omerta 3 Online Boxing Manager Onverse Oort Online Order & Chaos Online Order of Magic Original Blood Origins Return Origins of Malu Orion's Belt Otherland Forums OverSoul Overkings Overwatch Oz Online Oz World Pandora Saga Pantheon: Rise of the Fallen Panzar Parabellum Parallel Kingdom Parfait Station Path of Exile Pathfinder Online Perfect World Perpetuum Online Persona V Phantasy Star Online 2 Phantasy Star Universe Phoenix Dynasty Online Phylon Pi Story Picaroon Pillars of Eternity Pirate Galaxy Pirate Storm Pirate101 PirateKing Online Pirates of the Burning Sea Pirates of the Caribbean Online Pixie Hollow Planeshift Planet Arkadia Planet Calypso PlanetSide 2 Planetside Planets³ Playboy Manager Pocket Legends Pockie Ninja Pockie Pirates Pockie Saints Pokémon X and Y PoxNora Prime World Prime: Battle for Dominus Priston Tale Priston Tale II Prius Online Prodigy Project Blackout Project Gorgon Project Powder Project Titan Forums Project Wiki Project Zomboid Puzzle Pirates Quest for Infamy Quickhit Football
R-S
R2 Online RAN Online RF Online ROSE Online Rage of 3 Kingdoms Ragnarok Online Ragnarok Online II RaiderZ Rail Nation Rakion Rappelz RappelzSEA Ravenmarch Realm Fighter Realm of Sierra Realm of the Mad God Realm of the Titans Realms Online Rebel Galaxy Reclamation Red Stone Red War: Edem's Curse Regnum Online Remnant Knights Renaissance Repulse Requiem: Memento Mori Rift RiotZone Rise Rise of Dragonian Era Rise of Empire Rise of the Tycoon Risen 3: Titan Lords Rising of King Risk Your Life Rivality Rockfree Rohan: Blood Feud Role Play Worlds Roll n Rock Roma Victor Romadoria Rosh Online Roto X Rubies of Eventide Ruin Online Rumble Fighter Runes of Magic Runescape Rust Rusty Hearts Ryzom S4 League SAGA SD Gundam Capsule Fighter Online SMITE SUN Sacred 3 Sagramore Salem SaySayGirls Scarlet Blade Scions of Fate Seal Online: Evolution Second Chance Heroes Second Life Secret of the Solstice Seed Serenia Fantasy Seven Seas Saga Seven Souls Online Sevencore Shadow Realms Shadow of Legend Shadowbane Shadowgate Shadowrun Online Shaiya Shards Online Shattered Galaxy Sho Online Shot Online Shroud of the Avatar SideQuest Siege on Stars Sigonyth: Desert Eternity Silkroad Online Skyblade Skyforge SmashMuck Champions Smoo Online Soldier Front Soul Master Soul Order Online Soul of Guardian South Park: The Stick of Truth Space Heroes Universe Sparta: War of Empires Spellcasters Sphere Spiral Knights Spirit Tales Splash Fighters Squad Wars Star Citizen Star Conflict Star Sonata 2 Star Stable Star Supremacy Star Trek Online Star Trek: Infinite Space Star Wars Galaxies Star Wars: Clone Wars Adventures Star Wars: The Old Republic StarQuest Online Starbound Stargate Worlds Starlight Story Starpires State of Decay SteelWar Online Stone Age 2 Stormfall: Age of War Stormthrone Storybricks Stronghold Kingdoms Styx: Master of Shadows Sudden Attack Supremacy 1914 Supreme Destiny Sword Girls Sword of Destiny: Rise of Aions SwordX Swords of Heavens Swordsman
T-Z
TERA TS Online TUG Tabula Rasa Tactica Online Tales Runner Tales of Fantasy Tales of Pirates Tales of Pirates II Tales of Solaris Talisman Online Tamer Saga Tank Ace Tantra Online Tatsumaki: Land at War Terra Militaris TerraWorld Online Terraria Thang Online The 4th Coming The Agency The Aurora World The Banner Saga The Black Watchmen The Chronicle The Chronicles of Spellborn The Crew The Division The Epic Might The Hammers End The Incredible Adventures of Van Helsing The Incredible Adventures of Van Helsing 2 The Legend of Ares The Lost Titans The Matrix Online The Mighty Quest for Epic Loot The Missing Ink The Mummy Online The Myth of Soma The Pride of Taern The Realm Online The Repopulation The Secret World The Sims Online The Strategems The West The Witcher 3: Wild Hunt Theralon There Therian Saga Thrones of Chaos Tibia Tibia Micro Edition Tiger Knight Titan Siege Titans of Time Toontown Online Top Speed Topia Online Torchlight Torment: Tides of Numenera Total Domination Transformers Universe Transistor Transverse Traveller AR Travia Online Travian Triad Wars Trials of Ascension Tribal Hero Tribal Wars Tribes Universe Trickster Online Trove Troy Online True Fantasy Live Online Turf Battles Twelve Sky Twelve Sky 2 Twilight War Tynon U.B. Funkeys UFO Online URDEAD Online Ultima Forever: Quest for the Avatar Ultima Online Ultima X: Odyssey Ultimate Naruto Ultimate Soccer Boss Uncharted Waters Online Undercover 2: Merc Wars Underlight Unification Wars Universe Online Utopia Valkyrie Sky Vampire Lord Online Vanguard: Saga of Heroes Vanquish Space Vector City Racers Vendetta Online Victory - Age of Racing Vindictus Virtonomics Vis Gladius Visions of Zosimos VoidExpanse Voyage Century Online W.E.L.L. Online WAR (Warhammer Online) WAR2 Glory WYD Global Wakfu War Thunder War of 2012 War of Angels War of Legends War of Mercenaries War of Thrones War of the Immortals WarFlow Waren Story Warflare Wargame1942 Warhammer 40,000: Eternal Crusade Warhammer 40K: Dark Millennium Online Warhammer Online: Wrath of Heroes Warkeepers Warrior Epic Wartune Wasteland 2 WebLords Wild West Online WildStar Wind of Luck WindSlayer 2 Wings of Destiny Wish Wizard101 Wizardry Online Wizards and Champions Wonder King Wonderland Online World Golf Tour World of Battles World of Darkness World of Heroes World of Kung Fu World of Pirates World of Speed World of Tanks World of Tanks Generals World of Warcraft World of Warplanes World of Warriors World of Warships World of the Living Dead WorldAlpha Wurm Online Xenoblade Chronicles: X Xenocell Xiah Xsyon Xulu YS Online Yitien ZU Online Zentia Zero Online Zero Online: The Andromeda Crisis Zodiac Online Zombies Ate My Pizza eRepublik

MMORPG.com Discussion Forums

Star Wars: The Old Republic

Star Wars: The Old Republic 

General Discussion  » Display Name Only Log In - Coming April 2, 2013

4 Pages « 1 2 3 4 » Search
75 posts found
  Xerenix

Tipster

Joined: 5/04/08
Posts: 212

3/05/13 4:51:08 PM#21

Um. As it is now, you can log in with email OR display name.

They will only remove 1 of the 2 options available so i can't see how going from 2 different ways to log in to 1 could be worse security wise as most guys post here say.

  Quailman

Apprentice Member

Joined: 10/08/09
Posts: 170

3/05/13 4:52:24 PM#22
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli

Using emails as logins was a really bad system from a security standpoint.  EA / SWTOR copied what Blizzard & Battle.net did, amongst other things, as an assurance that SWTOR would be popular.

 

It was a cruddy move by Blizzard to even install such a system, and a cruddy move to all those who followed (blindly) what others were doing.

 

EA doesn't innovate much, they just copy others.

 

It's a good thing if EA starts requiring unique logon names (not emails).   WoW was that way, but then Blizzard tied personal identity with a customers account, which was bullshit.  Security No-No.

 

But it's not EA's own initiave that is driving this.  There is widespread talk about systems that use personal identification (email) as login.  Many other systems have already poo-poo'ed this approach.

You do realize they didn't say unique login ID, correct? They are talking about using your "Display Name" instead. If you want to be secure then you do what FFXI did in the begining. 

[mod edit]

You'll have to clue me in as to what a Display Name is, versus a unique login name/ID.

In SWTOR your Display Name is your name on the Forums. It's there for any and all to see. 

 

[mod edit]

[mod edit]

 

In the post, a Display Name will be required to login to the game.  Isn't that unqiue?

[mod edit]

Give EA one step at a time.  They just got Display Names for SWTOR after a year.

 

Do you really see a separate forum logon as that important?  What would you like to hide?

 

[mod edit]

Yes, I do see a seperate froum logon as that important. What would I like to hide? Why my log in information of course. 

[mod edit]

 

Personally I'd rather just have one login for the game AND the forums.  I see no reason to separate the two.

 

EA is (as usual) behind the times, and they are only now drifting away from emails as logins.  That is a good step.  Asking for a separation of game vs forum login accounts is rediculous.

He's just asking that half of his login information not be displayed pubicly. That isn't asking too much. This whole plan to use your Display Name decreases account security, it doesn't increase it.

Consume. Be silent. Die.

  GrayGhost79

Novice Member

Joined: 8/30/08
Posts: 4889

3/05/13 4:53:25 PM#23
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli

Using emails as logins was a really bad system from a security standpoint.  EA / SWTOR copied what Blizzard & Battle.net did, amongst other things, as an assurance that SWTOR would be popular.

 

It was a cruddy move by Blizzard to even install such a system, and a cruddy move to all those who followed (blindly) what others were doing.

 

EA doesn't innovate much, they just copy others.

 

It's a good thing if EA starts requiring unique logon names (not emails).   WoW was that way, but then Blizzard tied personal identity with a customers account, which was bullshit.  Security No-No.

 

But it's not EA's own initiave that is driving this.  There is widespread talk about systems that use personal identification (email) as login.  Many other systems have already poo-poo'ed this approach.

You do realize they didn't say unique login ID, correct? They are talking about using your "Display Name" instead. If you want to be secure then you do what FFXI did in the begining. 

[mod edit]

You'll have to clue me in as to what a Display Name is, versus a unique login name/ID.

In SWTOR your Display Name is your name on the Forums. It's there for any and all to see. 

 

[mod edit]

[mod edit]

 

In the post, a Display Name will be required to login to the game.  Isn't that unqiue?

[mod edit]

Give EA one step at a time.  They just got Display Names for SWTOR after a year.

 

Do you really see a separate forum logon as that important?  What would you like to hide?

 

[mod edit]

Yes, I do see a seperate froum logon as that important. What would I like to hide? Why my log in information of course. 

[mod edit]

 

Personally I'd rather just have one login for the game AND the forums.  I see no reason to separate the two.

 

EA is (as usual) behind the times, and they are only now drifting away from emails as logins.  That is a good step.  Asking for a separation of game vs forum login accounts is rediculous.

[mod edit]

A "Hacker" can easily use a readily available legal script to collect display names from a forum. This is half of your login information. If they have half of your login information all that is left is your password. 

Many people ignore security advice and use common passwords, these will be the first to cry foul (From your posts and how uninformed you seem I believe you will be in this group). Currently you have unlimited attempts to guess passwords, while their security specialist has stated they plan on adding extra security I do not have confidence in them when they make such a inexperienced mistake like using a displayed name as a security measure so I expect the rest will be at risk as well. 

  Thorkune

Spotlight Poster

Joined: 9/28/06
Posts: 1842

Dyslexics of the world...UNTIE!

3/05/13 4:54:26 PM#24
Originally posted by ktanner3
Originally posted by GrayGhost79
Originally posted by tiefighter25

"Display Name" = SWTOR Forum name.

^ This, they are talking about handing them half of your login information and claiming it will make your account more secure... lol?!

Yep. This is pretty stupid. Thank goodness from my security key. The only way you're hacking into my account is through my cold dead hands ;)

I think you are on to something there. This will cause tons of security key sales.

Well played Bioware/EA...well played

  GrayGhost79

Novice Member

Joined: 8/30/08
Posts: 4889

3/05/13 4:57:12 PM#25
Originally posted by Xerenix

Um. As it is now, you can log in with email OR display name.

They will only remove 1 of the 2 options available so i can't see how going from 2 different ways to log in to 1 could be worse security wise as most guys post here say.

That I did not know, though after reading your post I tried and it won't let me use my display name only my email. 

If it already is allowing people to log in with either email or display name then yes it would make sense to remove one of the options. Though the logical option to remove is display name for obvious reasons. 

There however simply is no justification for using publicly displayed names as personal log in identifiers. 

  GrayGhost79

Novice Member

Joined: 8/30/08
Posts: 4889

3/05/13 4:58:29 PM#26
Originally posted by Thorkune
Originally posted by ktanner3
Originally posted by GrayGhost79
Originally posted by tiefighter25

"Display Name" = SWTOR Forum name.

^ This, they are talking about handing them half of your login information and claiming it will make your account more secure... lol?!

Yep. This is pretty stupid. Thank goodness from my security key. The only way you're hacking into my account is through my cold dead hands ;)

I think you are on to something there. This will cause tons of security key sales.

Well played Bioware/EA...well played

Good point guys! Its hard to imagine they would be this stupid, but EA is definitely greedy enough to pull a move like this. 

  Eladi

Advanced Member

Joined: 11/23/06
Posts: 1074

3/05/13 5:20:36 PM#27

Probaly part of their new cross-platform cross media Real name system, they are working on connecting each system they work whit and may be working whit at a later date. from random logings/db's/systems to a "simple" cheap to maintain/use system for them, less freedom and security for users.

just a single step among many to make all systems ready to go.

  GrayGhost79

Novice Member

Joined: 8/30/08
Posts: 4889

3/05/13 5:22:03 PM#28
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli

Using emails as logins was a really bad system from a security standpoint.  EA / SWTOR copied what Blizzard & Battle.net did, amongst other things, as an assurance that SWTOR would be popular.

 

It was a cruddy move by Blizzard to even install such a system, and a cruddy move to all those who followed (blindly) what others were doing.

 

EA doesn't innovate much, they just copy others.

 

It's a good thing if EA starts requiring unique logon names (not emails).   WoW was that way, but then Blizzard tied personal identity with a customers account, which was bullshit.  Security No-No.

 

But it's not EA's own initiave that is driving this.  There is widespread talk about systems that use personal identification (email) as login.  Many other systems have already poo-poo'ed this approach.

You do realize they didn't say unique login ID, correct? They are talking about using your "Display Name" instead. If you want to be secure then you do what FFXI did in the begining. 

[mod edit]

You'll have to clue me in as to what a Display Name is, versus a unique login name/ID.

In SWTOR your Display Name is your name on the Forums. It's there for any and all to see. 

 

[mod edit]

[mod edit]

 

In the post, a Display Name will be required to login to the game.  Isn't that unqiue?

[mod edit]

Give EA one step at a time.  They just got Display Names for SWTOR after a year.

 

Do you really see a separate forum logon as that important?  What would you like to hide?

 

[mod edit]

Yes, I do see a seperate froum logon as that important. What would I like to hide? Why my log in information of course. 

[mod edit]

 

Personally I'd rather just have one login for the game AND the forums.  I see no reason to separate the two.

 

EA is (as usual) behind the times, and they are only now drifting away from emails as logins.  That is a good step.  Asking for a separation of game vs forum login accounts is rediculous.

[mod edit]

A "Hacker" can easily use a readily available legal script to collect display names from a forum. This is half of your login information. If they have half of your login information all that is left is your password. 

Many people ignore security advice and use common passwords, these will be the first to cry foul (From your posts and how uninformed you seem I believe you will be in this group). Currently you have unlimited attempts to guess passwords, while their security specialist has stated they plan on adding extra security I do not have confidence in them when they make such a inexperienced mistake like using a displayed name as a security measure so I expect the rest will be at risk as well. 

[mod edit]

I don't see how it's hard to read, it clearly states they currently allow unlimted attempts at guessing the correct password. 

And even with my limited skills I can write a script to do data collection on websites. It takes all of 10-20 minutes to throw together then its a run and leave thing. Thats if I want to take the 10-20 minutes to throw one together. You can get a slew of them online for free, though I wouldn't advise this unless you are an online security minded individual because you can easily get a virus. 

 

You are wrong about how hard it is compromising accounts. Compromising accounts is fairly easy. I can send out emails right now if I wanted to and end up with a few dozen accounts with out any effort. If I want to brute force my way into SWTOR accounts it would take a few hours with just scripts to get a few hundred accounts. Though I have no interests in doing so.

 

Again, I have limited skill and these are easy things for me.  

  superniceguy

Novice Member

Joined: 2/17/07
Posts: 2278

NGE, LOTRO, STO, KOTOR, Lego Star Wars > NGE 2 (SWTOR). SWG>ALL. Above hopefully subject to change.

3/05/13 5:28:39 PM#29
Originally posted by Karteli
[mod edit]

SOE uses account name and password for your account with extra display name, and can use a differnt display name for each of their games.

Not sure if EA gives unlimited guesses, but if they used EAs method then hackers are half way there to getting access to your account compared to SOE

With SOE hackers have to guess your username AND password, with EA/Blizzard all hackers have to guess is your password.

I think email is more risky than forums, as your email address can get picked up when you email, whereas if you do not post on forums which you can not as F2P/Preffered then you are safe. Also I had my email address on my CV and I then had my WOW account hacked, and I think it was from the CV, but now I use a different email for CV

  Karteli

Apprentice Member

Joined: 7/09/12
Posts: 2704

3/05/13 5:42:36 PM#30
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli
Originally posted by GrayGhost79
Originally posted by Karteli

Using emails as logins was a really bad system from a security standpoint.  EA / SWTOR copied what Blizzard & Battle.net did, amongst other things, as an assurance that SWTOR would be popular.

 

It was a cruddy move by Blizzard to even install such a system, and a cruddy move to all those who followed (blindly) what others were doing.

 

EA doesn't innovate much, they just copy others.

 

It's a good thing if EA starts requiring unique logon names (not emails).   WoW was that way, but then Blizzard tied personal identity with a customers account, which was bullshit.  Security No-No.

 

But it's not EA's own initiave that is driving this.  There is widespread talk about systems that use personal identification (email) as login.  Many other systems have already poo-poo'ed this approach.

You do realize they didn't say unique login ID, correct? They are talking about using your "Display Name" instead. If you want to be secure then you do what FFXI did in the begining. 

The move is asinine as is anyone that believes this is a good idea. 

You'll have to clue me in as to what a Display Name is, versus a unique login name/ID.

In SWTOR your Display Name is your name on the Forums. It's there for any and all to see. 

 

I mean you do know what Display means right?

Display - Make a prominent exhibition of (something) in a place where it can be easily seen

Your defense is to be sarcastic.  Beautiful defense?

 

In the post, a Display Name will be required to login to the game.  Isn't that unqiue?

You can't be that daft. Lets say I'm playting some random game called "Global Defense Panty Raid". My Display name is GrayGhost79, my unique login in is youcan'tbethisdaftKarteli27. No one sees my unique login name, but when I post on forums you do see GrayGhost79 because that is my display name. 

Give EA one step at a time.  They just got Display Names for SWTOR after a year.

 

Do you really see a separate forum logon as that important?  What would you like to hide?

 

ps- insults aren't going to further your cause.

Yes, I do see a seperate froum logon as that important. What would I like to hide? Why my log in information of course. 

You would like to hide your login information for the forums ... is that whats imporant to you?  Or would you like to hide what you have to say?  So you can be a nice guy in the game, then turn around and talk trash?  Two separate lives .....

 

Personally I'd rather just have one login for the game AND the forums.  I see no reason to separate the two.

 

EA is (as usual) behind the times, and they are only now drifting away from emails as logins.  That is a good step.  Asking for a separation of game vs forum login accounts is rediculous.

Let me try and say this without throwing any well deserved insults your way. 

A "Hacker" can easily use a readily available legal script to collect display names from a forum. This is half of your login information. If they have half of your login information all that is left is your password. 

Many people ignore security advice and use common passwords, these will be the first to cry foul (From your posts and how uninformed you seem I believe you will be in this group). Currently you have unlimited attempts to guess passwords, while their security specialist has stated they plan on adding extra security I do not have confidence in them when they make such a inexperienced mistake like using a displayed name as a security measure so I expect the rest will be at risk as well. 

You keep insulting, and throwing some bullshit about well deserved insults.  Shoot.. Just throw them.

 

You talk of security, yet I wonder?  Maybe.  

 

This thing is, what a hacker can gleam is not what happens in real life.

 

Hacking isn't "easy".  It's a major corredinated effort, mostly for some sort of financial gain.  Occasionally just to show weaknesses.

 

In, the lower  paragraph of your post, are you saying EA gives an unlimited amount of guesses?  It's a hard read.

I don't see how it's hard to read, it clearly states they currently allow unlimted attempts at guessing the correct password. 

And even with my limited skills I can write a script to do data collection on websites. It takes all of 10-20 minutes to throw together then its a run and leave thing. Thats if I want to take the 10-20 minutes to throw one together. You can get a slew of them online for free, though I wouldn't advise this unless you are an online security minded individual because you can easily get a virus. 

 

You are wrong about how hard it is compromising accounts. Compromising accounts is fairly easy. I can send out emails right now if I wanted to and end up with a few dozen accounts with out any effort. If I want to brute force my way into SWTOR accounts it would take a few hours with just scripts to get a few hundred accounts. Though I have no interests in doing so.

 

Again, I have limited skill and these are easy things for me.  

Ah we're on different levels.  I don't consider social enginerring via emails as hacking.  It's theft, not hacking.

 

I fail to see where it says unlimited tries for SWTOR logins.

 

ALSO, if you publically attack another website, it's against the law.  You'll go to jail, just saying.

Want a nice understanding of life? Try Spirit Science: "The Human History"
http://www.youtube.com/watch?v=U8NNHmV3QPw&feature=plcp
Recognize the voice? Yep sounds like Penny Arcade's Extra Credits.

  GrayGhost79

Novice Member

Joined: 8/30/08
Posts: 4889

3/05/13 6:00:13 PM#31

I don't see how it's hard to read, it clearly states they currently allow unlimted attempts at guessing the correct password. 

And even with my limited skills I can write a script to do data collection on websites. It takes all of 10-20 minutes to throw together then its a run and leave thing. Thats if I want to take the 10-20 minutes to throw one together. You can get a slew of them online for free, though I wouldn't advise this unless you are an online security minded individual because you can easily get a virus. 

 

You are wrong about how hard it is compromising accounts. Compromising accounts is fairly easy. I can send out emails right now if I wanted to and end up with a few dozen accounts with out any effort. If I want to brute force my way into SWTOR accounts it would take a few hours with just scripts to get a few hundred accounts. Though I have no interests in doing so.

 

Again, I have limited skill and these are easy things for me.  

Ah we're on different levels.  I don't consider social enginerring via emails as hacking.  It's theft, not hacking.

 

I fail to see where it says unlimited tries for SWTOR logins.

 

ALSO, if you publically attack another website, it's against the law.  You'll go to jail, just saying.

Data gathering isn't an attack, it's also not illegal. Corporations do this among other things to gather information. 

Also yes, we are on different levels because I never said social engineering via emails was hacking, you failed to comprehend what was typed. You tried portraying account compromising as an excessively difficult task. I attempted to enlighten you by explaining how easy it is. 

 

  Karteli

Apprentice Member

Joined: 7/09/12
Posts: 2704

3/05/13 6:12:45 PM#32
Originally posted by GrayGhost79

I don't see how it's hard to read, it clearly states they currently allow unlimted attempts at guessing the correct password. 

And even with my limited skills I can write a script to do data collection on websites. It takes all of 10-20 minutes to throw together then its a run and leave thing. Thats if I want to take the 10-20 minutes to throw one together. You can get a slew of them online for free, though I wouldn't advise this unless you are an online security minded individual because you can easily get a virus. 

 

You are wrong about how hard it is compromising accounts. Compromising accounts is fairly easy. I can send out emails right now if I wanted to and end up with a few dozen accounts with out any effort. If I want to brute force my way into SWTOR accounts it would take a few hours with just scripts to get a few hundred accounts. Though I have no interests in doing so.

 

Again, I have limited skill and these are easy things for me.  

Ah we're on different levels.  I don't consider social enginerring via emails as hacking.  It's theft, not hacking.

 

I fail to see where it says unlimited tries for SWTOR logins.

 

ALSO, if you publically attack another website, it's against the law.  You'll go to jail, just saying.

Data gathering isn't an attack, it's also not illegal. Corporations do this among other things to gather information. 

Also yes, we are on different levels because I never said social engineering via emails was hacking, you failed to comprehend what was typed. You tried portraying account compromising as an excessively difficult task. I attempted to enlighten you by explaining how easy it is. 

Please type more coherently next time! Thanks.  BTW- it's not that easy to hack.

Want a nice understanding of life? Try Spirit Science: "The Human History"
http://www.youtube.com/watch?v=U8NNHmV3QPw&feature=plcp
Recognize the voice? Yep sounds like Penny Arcade's Extra Credits.

  Quailman

Apprentice Member

Joined: 10/08/09
Posts: 170

3/05/13 6:21:54 PM#33
Originally posted by Karteli
Originally posted by GrayGhost79

I don't see how it's hard to read, it clearly states they currently allow unlimted attempts at guessing the correct password. 

And even with my limited skills I can write a script to do data collection on websites. It takes all of 10-20 minutes to throw together then its a run and leave thing. Thats if I want to take the 10-20 minutes to throw one together. You can get a slew of them online for free, though I wouldn't advise this unless you are an online security minded individual because you can easily get a virus. 

 

You are wrong about how hard it is compromising accounts. Compromising accounts is fairly easy. I can send out emails right now if I wanted to and end up with a few dozen accounts with out any effort. If I want to brute force my way into SWTOR accounts it would take a few hours with just scripts to get a few hundred accounts. Though I have no interests in doing so.

 

Again, I have limited skill and these are easy things for me.  

Ah we're on different levels.  I don't consider social enginerring via emails as hacking.  It's theft, not hacking.

 

I fail to see where it says unlimited tries for SWTOR logins.

 

ALSO, if you publically attack another website, it's against the law.  You'll go to jail, just saying.

Data gathering isn't an attack, it's also not illegal. Corporations do this among other things to gather information. 

Also yes, we are on different levels because I never said social engineering via emails was hacking, you failed to comprehend what was typed. You tried portraying account compromising as an excessively difficult task. I attempted to enlighten you by explaining how easy it is. 

Please type more coherently next time! Thanks.  BTW- it's not that easy to hack.

His posts were perfectly coherent. It's pretty low to blame others for your lack of reading comprehension. Learn from your mistakes and better yourself in the process.

Consume. Be silent. Die.

  ZombieKen

Apprentice Member

Joined: 3/30/10
Posts: 4410

Zombie - Dead but still moving.

3/05/13 6:30:48 PM#34

Publicly visible account names, and they consider this good for security?

 

I must be misreading this.

 

MSOTSG with PPE : Massively Single-player Online Task-driven Storyline Game with Purchasable Performance Enhancements *grin*

  Karteli

Apprentice Member

Joined: 7/09/12
Posts: 2704

3/05/13 6:45:06 PM#35
Originally posted by Quailman
Originally posted by Karteli
Originally posted by GrayGhost79

I don't see how it's hard to read, it clearly states they currently allow unlimted attempts at guessing the correct password. 

And even with my limited skills I can write a script to do data collection on websites. It takes all of 10-20 minutes to throw together then its a run and leave thing. Thats if I want to take the 10-20 minutes to throw one together. You can get a slew of them online for free, though I wouldn't advise this unless you are an online security minded individual because you can easily get a virus. 

 

You are wrong about how hard it is compromising accounts. Compromising accounts is fairly easy. I can send out emails right now if I wanted to and end up with a few dozen accounts with out any effort. If I want to brute force my way into SWTOR accounts it would take a few hours with just scripts to get a few hundred accounts. Though I have no interests in doing so.

 

Again, I have limited skill and these are easy things for me.  

Ah we're on different levels.  I don't consider social enginerring via emails as hacking.  It's theft, not hacking.

 

I fail to see where it says unlimited tries for SWTOR logins.

 

ALSO, if you publically attack another website, it's against the law.  You'll go to jail, just saying.

Data gathering isn't an attack, it's also not illegal. Corporations do this among other things to gather information. 

Also yes, we are on different levels because I never said social engineering via emails was hacking, you failed to comprehend what was typed. You tried portraying account compromising as an excessively difficult task. I attempted to enlighten you by explaining how easy it is. 

Please type more coherently next time! Thanks.  BTW- it's not that easy to hack.

His posts were perfectly coherent. It's pretty low to blame others for your lack of reading comprehension. Learn from your mistakes and better yourself in the process.

And what key point did you gleam from those posts?

 

I'll start, you fill in the rest.

 

Grayghost79:

 

1 - The logon system won't be as secure with an email logon as it will with a Display Name. (post #3)

2 - The Display is an attrocity because it reveals half of a users identify. (post #8)

3 - Speak of how easy it is to hack. (post #31) LOLOL Whooo whooo whoop whoop

4 - Denial of previus statements about social engineering as being considered hacks, yet,  a post to Enlighten me via social downplaying / "better than you complex". (post #34)

 

 And those key posts were obvious,  Shame on me.  All the op was doing was discussing the Display Name, but thanks for jumping in.

Want a nice understanding of life? Try Spirit Science: "The Human History"
http://www.youtube.com/watch?v=U8NNHmV3QPw&feature=plcp
Recognize the voice? Yep sounds like Penny Arcade's Extra Credits.

  Sevenstar61

Hard Core Member

Joined: 7/22/12
Posts: 1686

"But it was so artistically done..." - Grand Admiral Thrawn's final words

3/05/13 7:38:55 PM#36

This respond from Phillip Holmes, SWTOR Head of Security is rather long LOL but for all who wants answers there we go:

 

So in case you haven't come across me before (most haven't!), I'm Phillip Holmes, the Senior Manager of Security here at Star Wars: The Old Republic.

I will be posting a more detailed synopsis of the upcoming changes in the next few weeks - I just have one or two ducks left to line up before I do that.

Some responses below - apologies if I don't reply to every question...


Quote: Originally Posted by Icebergy View Post
well that's... weird, since the whole point is the game uses our origin accounts
No change. Your account is still linked to Origin, however you will continue to log in to Origin using your email address as their security implementation is still different. There is no link to your SWTOR Display Name in Origin so no added risk...

Quote: Originally Posted by bigheadbrandon View Post
I don't understand how this help security. No one knows what email I use to log in. Everyone knows your 'Display Name'. Granted they need to know the security questions, but knowing each persons display name is one less barrier IMO.
So two things here. Not everybody knows your Display Name, and an attacker will need to figure out your email account in order to attempt to take over your SWTOR account. We are implementing a few other measures (more news on that in the few weeks!) to ensure that account take over risk is mitigated.

I would recommend you make sure you use a very different password for your email account to anything you use elsewhere though. I know that is just common sense, but it's very very important. If possible use a dual-factor authentication system like the Two-Step solution that can be used on top of GMail.


Quote: Originally Posted by WSS_Toxin View Post
A) EAware redefining terms AGAIN. Display Name = Forum "Handle" for those curious.

B) While at first blush it would seem that going from Email ( usually unknown/private ) to Handle ( very public ) there may seem to be a risk to security for hacking. I for one would expect to have A LOT of hacking attempts given how many people "love me" here. What you have is a fall back to the "questions" you were asked to associate with your account. These are triggerred if you don't log in from a consistante IP. Update your questions and change your password to be 10+ characters long with at least 2 Upper case, 2 lower case letters, 2 numbers, and 2 special characters. Nothing to worry about.
Understandably, we have spent a lot of effort in making sure the new system will mitigate hacking attempts, especially of the brute-force variety. As mentioned above, there will be more news on this in the next few weeks.

Quote: Originally Posted by JPryde View Post
My market research as a security professional tells me otherwise. Sorry to disagree here.

Quote: Originally Posted by morfius View Post
exactly

no one "knows" my e-mail or my real identity but everyone on these forums knows my username

my mind is conjuring scenes where some butthurt player has a tiff with another and begins trying to hack an account
where 1/2 of the login information is available for the world to see
Attempts at hacking of our site are not tolerated at all. Doing so would get that player in a lot more trouble than it any gain they think they might be able to get.

Quote: Originally Posted by Yaesive View Post
Additionally I am wondering if we will see a purge of inactive User accounts to free up possible accounts for new player?
No purge planned - the game is way too young to be thinking of removing old accounts, especially as a lot of those accounts have game data associated with them and we would like our players to be able to return to everything they left behind if they do leave.

Quote: Originally Posted by Jenovan View Post
Yeah, this is a very very bad idea.
So now, in order to hack my account, you need to figure out my email address (which is unique to SWTOR) and my password.

After this change, you will know that my username is Rankyn because it's plastered all over the forum and all you're left to do is try to figure out my password.
You've essentially done 50% of the work for anyone trying to hack my account.

If security is the real issue then our usernames need to be a 3rd option that is neither our email address or our forum name.
Actually today an attacker also needs to know the answers to your Security Questions. In the future (more news in the next few weeks) that will require the attacker to also know your email account password. We also monitor for brute force attacks and have other systems in place to mitigate that type of threat.

Quote: Originally Posted by JPryde View Post
does that mean that if i sign in with that name, i play that specific character? if so what happens to all my other characters, do i have to sign them in by name too? seems like an aweful lot of remembering for people like me who have 12 characters.
We are only changing how you log in to your account - your characters stay tied together as part of that overall account. No need to worry!

Quote: Originally Posted by Mallorik View Post
I dont see this being a huge change or drop in security, as it has already been possible to log in with either the account email or forum name for a long time.
I do see it being a problem for people who rarely use the forums and may not remember their forum names. There will definitely need to be notifications sent via email about this.

I also see it being an issue for those who may have previously played the game and return for the expansion. If it has been long enough they likely will not remember their forum name, and who knows what sort of hoops they would have to jump through in order to retrieve the name.
We are also putting in a 'I forgot my account name' feature which will email you the name - we too thought of all the players that might not see the messaging or even come back after April 2nd.

Have I mentioned that people need to make sure their own email account is as secure as possible?
Phillip Holmes,
SWTOR Head of Security


Sith Warrior - Story of Hate and Love http://www.youtube.com/watch?v=sxKrlwXt7Ao
Imperial Agent - Rise of Cipher Nine http://www.youtube.com/watch?v=OBBj3eJWBvU&feature=youtu.be
Imperial Agent - Hunt for the Eagle Part 1http://www.youtube.com/watch?v=UQqjYYU128E

  Quailman

Apprentice Member

Joined: 10/08/09
Posts: 170

3/05/13 8:41:03 PM#37
Originally posted by Karteli
Originally posted by Quailman
Originally posted by Karteli
Originally posted by GrayGhost79

I don't see how it's hard to read, it clearly states they currently allow unlimted attempts at guessing the correct password. 

And even with my limited skills I can write a script to do data collection on websites. It takes all of 10-20 minutes to throw together then its a run and leave thing. Thats if I want to take the 10-20 minutes to throw one together. You can get a slew of them online for free, though I wouldn't advise this unless you are an online security minded individual because you can easily get a virus. 

 

You are wrong about how hard it is compromising accounts. Compromising accounts is fairly easy. I can send out emails right now if I wanted to and end up with a few dozen accounts with out any effort. If I want to brute force my way into SWTOR accounts it would take a few hours with just scripts to get a few hundred accounts. Though I have no interests in doing so.

 

Again, I have limited skill and these are easy things for me.  

Ah we're on different levels.  I don't consider social enginerring via emails as hacking.  It's theft, not hacking.

 

I fail to see where it says unlimited tries for SWTOR logins.

 

ALSO, if you publically attack another website, it's against the law.  You'll go to jail, just saying.

Data gathering isn't an attack, it's also not illegal. Corporations do this among other things to gather information. 

Also yes, we are on different levels because I never said social engineering via emails was hacking, you failed to comprehend what was typed. You tried portraying account compromising as an excessively difficult task. I attempted to enlighten you by explaining how easy it is. 

Please type more coherently next time! Thanks.  BTW- it's not that easy to hack.

His posts were perfectly coherent. It's pretty low to blame others for your lack of reading comprehension. Learn from your mistakes and better yourself in the process.

And what key point did you gleam from those posts?

 

I'll start, you fill in the rest.

 

Grayghost79:

 

1 - The logon system won't be as secure with an email logon as it will with a Display Name. (post #3)

2 - The Display is an attrocity because it reveals half of a users identify. (post #8)

3 - Speak of how easy it is to hack. (post #31) LOLOL Whooo whooo whoop whoop

4 - Denial of previus statements about social engineering as being considered hacks, yet,  a post to Enlighten me via social downplaying / "better than you complex". (post #34)

 

 And those key posts were obvious,  Shame on me.  All the op was doing was discussing the Display Name, but thanks for jumping in.

Point #1 is where you seem to be having trouble (unless i'm reading YOUR post wrong). He's saying the opposite of that. He's saying that an email login would be more secure than a Display Name login, since everyone on the forums can see the Display Name, but only those with access to EA/ Bioware's account database can get your email (although if they have access to account info, they can get your pass too).

 

Now, with Sevenstar's post, Philip Holmes states "Not everybody knows your Display Name, and an attacker will need to figure out your email account in order to attempt to take over your SWTOR account."

 

This is kind of confusing on a couple of levels:

First is the way he says "Not everybody knows your Display Name." "Not everybody" could mean different things. For instance, does he mean only the people on the forums will see your Display Name, since clearly the people on the forums aren't "everybody". Or does he mean only EA/Bioware staff and you know it? I dunno, maybe I'm looking too far into that and I'm just arguing semantics.

 

Another thing that is confusing, is that he states people need to figure out your email account to take over your SWTOR account. Well, can't people log into the game/forums using just the Display Name and password? Or do you need to log into Origin first, THEN type your Display Name and password? If you don't need to log into Origin first, what's to stop someone from using your Display Name, somehow getting/guessing your password, and causing havoc to your character(s)?

 

This whole thing is rather confusing and needs to be stated more clearly in my opinion.

Consume. Be silent. Die.

  tiefighter25

Novice Member

Joined: 7/30/12
Posts: 949

3/05/13 8:56:59 PM#38

I read Phil's post and several things crossed my mind.

First, it is nice to see a DEV actually post.

That said, he came off pretty imperious, which had been a knock on Bioware since Jump Street on this project.

He clearly mistated some shit about Steam. (WHich I guess is the arch nemesis os Origin).

Why hasn't he shown up on the months of endless threads in regard to security key issues, both activation, use, reactivation, availability, etc.

Not to mention the various authentication issues surrounding attempt to buy cartel cash, errror# whateveer, etc.

 

That and the other DEV post from the day is the third?, fourth?, fifth, community management team introducing themselves saying they are going to be more proactive. And yet they never make an appearance in this thread.

 

All in all, I can't figurre out why Bioware, with yet another round of layoffs, is devouting resources to a non-issue. I can't figure this out is a positive or negative way. It just seems like change for "I have no idea why's" sake.

All in all, Bioware Austin seems like a rather disjointed and muddied staff.

Who knows? Maybe I'm trying to glean too much from this change in policy.

All in all, it's hard to trust either the rudder or the navigator; or one hand doesn't know what the other hand is doing when the other hand is clapping by itself.

It's bewildering I tell ya. (From an observationalist point of view, this certainly doesn't make SWTOR less intresting though.)

  Karteli

Apprentice Member

Joined: 7/09/12
Posts: 2704

3/05/13 9:15:38 PM#39
Originally posted by Quailman
Originally posted by Karteli
Originally posted by Quailman
Originally posted by Karteli
Originally posted by GrayGhost79

I don't see how it's hard to read, it clearly states they currently allow unlimted attempts at guessing the correct password. 

And even with my limited skills I can write a script to do data collection on websites. It takes all of 10-20 minutes to throw together then its a run and leave thing. Thats if I want to take the 10-20 minutes to throw one together. You can get a slew of them online for free, though I wouldn't advise this unless you are an online security minded individual because you can easily get a virus. 

 

You are wrong about how hard it is compromising accounts. Compromising accounts is fairly easy. I can send out emails right now if I wanted to and end up with a few dozen accounts with out any effort. If I want to brute force my way into SWTOR accounts it would take a few hours with just scripts to get a few hundred accounts. Though I have no interests in doing so.

 

Again, I have limited skill and these are easy things for me.  

Ah we're on different levels.  I don't consider social enginerring via emails as hacking.  It's theft, not hacking.

 

I fail to see where it says unlimited tries for SWTOR logins.

 

ALSO, if you publically attack another website, it's against the law.  You'll go to jail, just saying.

Data gathering isn't an attack, it's also not illegal. Corporations do this among other things to gather information. 

Also yes, we are on different levels because I never said social engineering via emails was hacking, you failed to comprehend what was typed. You tried portraying account compromising as an excessively difficult task. I attempted to enlighten you by explaining how easy it is. 

Please type more coherently next time! Thanks.  BTW- it's not that easy to hack.

His posts were perfectly coherent. It's pretty low to blame others for your lack of reading comprehension. Learn from your mistakes and better yourself in the process.

And what key point did you gleam from those posts?

 

I'll start, you fill in the rest.

 

Grayghost79:

 

1 - The logon system won't be as secure with an email logon as it will with a Display Name. (post #3)

2 - The Display is an attrocity because it reveals half of a users identify. (post #8)

3 - Speak of how easy it is to hack. (post #31) LOLOL Whooo whooo whoop whoop

4 - Denial of previus statements about social engineering as being considered hacks, yet,  a post to Enlighten me via social downplaying / "better than you complex". (post #34)

 

 And those key posts were obvious,  Shame on me.  All the op was doing was discussing the Display Name, but thanks for jumping in.

Point #1 is where you seem to be having trouble (unless i'm reading YOUR post wrong). He's saying the opposite of that. He's saying that an email login would be more secure than a Display Name login, since everyone on the forums can see the Display Name, but only those with access to EA/ Bioware's account database can get your email (although if they have access to account info, they can get your pass too).

 

Now, with Sevenstar's post, Philip Holmes states "Not everybody knows your Display Name, and an attacker will need to figure out your email account in order to attempt to take over your SWTOR account."

 

This is kind of confusing on a couple of levels:

First is the way he says "Not everybody knows your Display Name." "Not everybody" could mean different things. For instance, does he mean only the people on the forums will see your Display Name, since clearly the people on the forums aren't "everybody". Or does he mean only EA/Bioware staff and you know it? I dunno, maybe I'm looking too far into that and I'm just arguing semantics.

 

Another thing that is confusing, is that he states people need to figure out your email account to take over your SWTOR account. Well, can't people log into the game/forums using just the Display Name and password? Or do you need to log into Origin first, THEN type your Display Name and password? If you don't need to log into Origin first, what's to stop someone from using your Display Name, somehow getting/guessing your password, and causing havoc to your character(s)?

 

This whole thing is rather confusing and needs to be stated more clearly in my opinion.

Using a unique ID instead of an email is more secure overall, since a compromised account doesn't reveal the corresponding email tied to it.  I couldn't care less about forum users.  Use the official forums at your own risk .. they are garbage anyways.  That clear enough?

 

I'd rather have a secure account than have some shitty forum access where only shills and trolls hang out.

 

If anything, push for a block of forums so that only subscribers can see them.  Problem solved?

 

** there are some good Roleplay sections, like SevenStar showed.  Those should be possibly made public, since they contain a lot of original content that should be accessible to those interested.

Want a nice understanding of life? Try Spirit Science: "The Human History"
http://www.youtube.com/watch?v=U8NNHmV3QPw&feature=plcp
Recognize the voice? Yep sounds like Penny Arcade's Extra Credits.

  tiefighter25

Novice Member

Joined: 7/30/12
Posts: 949

3/05/13 9:40:15 PM#40

Karteli: I don't understand why you are going Defcon 1.

The switch in policy is odd because now people automatically have your login handle, and can now brute force the password.

Bioware may add counter-measures to attempt to prevent account highjacking, but the switch in policy seems to unnecessarily add security issues.

This is not a game-killing bug; but really friggin' weird.

4 Pages « 1 2 3 4 » Search