Pages: [1] :: one page |
|
Author |
Thread Statistics | Show CCP posts - 0 post(s) |
Zormaka Brutus
Supalayian
|
Posted - 2010.02.10 08:21:00 -
[1]
Hey all,
Since some of my friends and corp mates have seen there accounts "hacked" we studied the problem : - no malware, ISK buying or keylogger where involved in this cases. - we found that all hacked account have their account name used in one or more EVE related forum. It appears that accounts name are "farmed" on public forums and brute force have been applied to find the password.
We want CCP to implements account renaming to allow us to change out account name on a regular basis, just like our password. Thanks.
|
Ancy Denaries
The Confederate Navy
|
Posted - 2010.02.10 09:03:00 -
[2]
I can see no obvious harm with this. ---- The Demigodess with a Conscience - An EVE IC Blog
Originally by: CCP Dropbear rofl
edit: ah crap, dev account. Oh well, official rofl at you sir.
|
Eve Orwell
|
Posted - 2010.02.10 09:20:00 -
[3]
agreed, i dont see anything wrong with it
|
Aineko Macx
|
Posted - 2010.02.10 09:32:00 -
[4]
Supported.
|
Likth
|
Posted - 2010.02.10 16:19:00 -
[5]
make it so
|
Mike C
Ipuvaepe Industries
|
Posted - 2010.02.10 16:56:00 -
[6]
Edited by: Mike C on 10/02/2010 17:01:08 I'm sure CCP would rather spend their time raking in $ from people transferring characters from a compromised account to a new one than actually doing something about it.
EDIT 1/1: forgot to support
↑↑ bar is just /quote ↑↑ [03:17:29] Trade Skills > Jesus believes in god [03:17:38] Mike C > believed* [03:17:48] Trade Skills > touche |
Herschel Yamamoto
Agent-Orange
|
Posted - 2010.02.10 19:49:00 -
[7]
Perfectly reasonable.
|
ISellThingz
|
Posted - 2010.02.10 20:02:00 -
[8]
Can't say no, I'd use that myself.
|
Jonah Pod
Gallente
|
Posted - 2010.02.10 20:32:00 -
[9]
Not supported at all as this proposal is absurd:
Originally by: EVE ONLINE USER AND CHARACTER NAME POLICY 1.c. EVE Online subscribers are responsible for protecting the confidentiality of their account information. (...) Therefore, account holders are strongly urged not to share accounts or account information with others.
And
Originally by: EVE ONLINE USER AND CHARACTER NAME POLICY 1.e. Usernames cannot be changed; however, subscribers are urged to change account passwords at regular intervals as a precautionary measure.
I recommend KeePass for both password generation and storage.
|
Zormaka Brutus
Supalayian
|
Posted - 2010.02.10 20:52:00 -
[10]
Originally by: Jonah Pod Not supported at all as this proposal is absurd:
Originally by: EVE ONLINE USER AND CHARACTER NAME POLICY 1.c. EVE Online subscribers are responsible for protecting the confidentiality of their account information. (...) Therefore, account holders are strongly urged not to share accounts or account information with others.
And
Originally by: EVE ONLINE USER AND CHARACTER NAME POLICY 1.e. Usernames cannot be changed; however, subscribers are urged to change account passwords at regular intervals as a precautionary measure.
Policies can be changed too, that's just words and phrases. Brute force hacking of EVE accounts is on the rise, and regular passwords changes isn't sufficient now.
|
|
Herschel Yamamoto
Agent-Orange
|
Posted - 2010.02.10 20:53:00 -
[11]
Originally by: Jonah Pod Not supported at all as this proposal is absurd:
Originally by: EVE ONLINE USER AND CHARACTER NAME POLICY 1.c. EVE Online subscribers are responsible for protecting the confidentiality of their account information. (...) Therefore, account holders are strongly urged not to share accounts or account information with others.
And
Originally by: EVE ONLINE USER AND CHARACTER NAME POLICY 1.e. Usernames cannot be changed; however, subscribers are urged to change account passwords at regular intervals as a precautionary measure.
I recommend KeePass for both password generation and storage.
Yes, it's the player's responsibility. Yes, giving up your account name is a bit dumb. That said, I'd much prefer giving the player the ability to fix a stupid mistake than sticking them with the consequences, if it's practical to do so.
|
Jonah Pod
Gallente
|
Posted - 2010.02.10 21:19:00 -
[12]
Originally by: Zormaka Brutus Policies can be changed too, that's just words and phrases. Brute force hacking of EVE accounts is on the rise, and regular passwords changes isn't sufficient now.
I chose to quote the policy simply as it easier to understand - less words, less formal than the EULA. And no, even the policies aren't "just words and phrases", they are part of a legal contract that every capsuleer agreed upon and signed. Hence I doubt CCP will agree in changing the parts affected.
In addition, you're obviously not aware of the technical and legal implementation details. EVE became truly international by the time and so CCP has to deal with a wide variety of legal aspects as still every nation maintains its very own jurisdiction. This in turn leads to additional development efforts whenever changes have to be applied to the technical implementation.
Originally by: Herschel Yamamoto Yes, it's the player's responsibility. Yes, giving up your account name is a bit dumb. That said, I'd much prefer giving the player the ability to fix a stupid mistake than sticking them with the consequences, if it's practical to do so.
s/bit/frighteningly/
Mike C described a way to deal with such kind of situation: Create a new account and transfer the characters from the compromised account to thee new one. Finally, terminate the old one. Take the fees involved as some kind of reminder.
This however won't help at all if the same silly type of passwords is being used and the new account name is broadcasted into the public again. And yes, "people" often do silly things like these.
They even do way more silly things than this.
|
Lt Forge
Pilots From Honour Aeternus.
|
Posted - 2010.02.10 21:58:00 -
[13]
Edited by: Lt Forge on 10/02/2010 21:59:30
Not supported.
Yes, it'll lead to some positive things here and there, small but the bad side of this proposal can easily overshadow the pros.
Why? Imagine you're a CEO of a certain big alliance in Delve which has its ass whooped by real alliances. Now, imagine you have this 'idea' implemented. What I'm trying to say? It's simple: Steal all assets and cash, disband the alliance and rename yourself to something completely different and non-related to your previous name. There, now join a random PvP corp and start over with your big fat asset&cash chest since no one can ever track you down, forever.
|
Jonah Pod
Gallente
|
Posted - 2010.02.10 22:06:00 -
[14]
Originally by: Lt Forge Edited by: Lt Forge on 10/02/2010 21:59:30
Not supported.
Yes, it'll lead to some positive things here and there, small but the bad side of this proposal can easily overshadow the pros.
Why? Imagine you're a CEO of a certain big alliance in Delve which has its ass whooped by real alliances. Now, imagine you have this 'idea' implemented. What I'm trying to say? It's simple: Steal all assets and cash, disband the alliance and rename yourself to something completely different and non-related to your previous name. There, now join a random PvP corp and start over with your big fat asset&cash chest since no one can ever track you down, forever.
Excuse me Sir, may it be you mistake account name changes (this thread) for character name changes (that thread)?
|
Zormaka Brutus
Supalayian
|
Posted - 2010.02.11 07:52:00 -
[15]
Edited by: Zormaka Brutus on 11/02/2010 07:53:57
Originally by: Jonah Pod In addition, you're obviously not aware of the technical and legal implementation details.
It's not a technical proposal, just a request.
Originally by: Jonah Pod This in turn leads to additional development efforts whenever changes have to be applied to the technical implementation.
All moderns operating systems offers users accounts renaming since users are identified by their IDs and not by their names. I hope EVE is not more complicated than that in the way users accounts are handled.
A lot of corporations and public agencies have regular account renaming policies for high security accounts. That's not new, and not unusual.
It's just a security feature, without any impact on the game mechanics.
|
Aineko Macx
|
Posted - 2010.02.11 11:00:00 -
[16]
Originally by: Lt Forge Not supported.
Why? Imagine you're a CEO of a certain big alliance in Delve which has its ass whooped by real alliances. Now, imagine you have this 'idea' implemented. What I'm trying to say? It's simple: Steal all assets and cash, disband the alliance and rename yourself to something completely different and non-related to your previous name. There, now join a random PvP corp and start over with your big fat asset&cash chest since no one can ever track you down, forever.
I too support the bashing of proposals without having read or understood them.
Originally by: Zormaka Brutus All moderns operating systems offers users accounts renaming since users are identified by their IDs and not by their names. I hope EVE is not more complicated than that in the way users accounts are handled.
Eve accounts do have an ID.
Originally by: Jonah Pod Not supported at all as this proposal is absurd:
Originally by: EVE ONLINE USER AND CHARACTER NAME POLICY 1.c. EVE Online subscribers are responsible for protecting the confidentiality of their account information. (...) Therefore, account holders are strongly urged not to share accounts or account information with others.
Accounts get hacked even when the information was not shared in any way. There are many ways this could happen. You mention legal aspect, but if in fact CCP refuses to offer basic security services like account renaming it might get legally held accountable for incidents.
Improving account security (And theres plenty of issues) is in the interest of both players and CCP.
|
Furb Killer
Gallente
|
Posted - 2010.02.11 12:45:00 -
[17]
It looks HIGHLY unlikely to me that they bruteforced passwords. I hope CCP notices when someone tries thousands of different passes on an account.
|
Zormaka Brutus
Supalayian
|
Posted - 2010.02.11 14:05:00 -
[18]
Edited by: Zormaka Brutus on 11/02/2010 14:06:09 We talk about accounts named used in more than one service, including EVE. Even the EVE account is used outside the game in multiple places : test server, forum login, account management login, evelopedia login...
|
|
|
|
Pages: [1] :: one page |
First page | Previous page | Next page | Last page |