Exactly...If you're in a guild with 300-500 people and can see all their user names, all you'd have to do is plug in a list of passwords such as this and get several hits.
Exactly...If you're in a guild with 300-500 people and can see all their user names, all you'd have to do is plug in a list of passwords such as this and get several hits.
That will mean that you can login at least 3 accounts, max out their creditcards and log out again. Maxis will probably find out and ban you, but they will not give the victim his/her money back.
And sometimes I like to get away from the crowd without one of those 500 guildies whispering to me. Privacy is a great thing.
Yes, because people choosing to remain ignorant so they can feel safe causes quite alot of problems realistically.
The more people can differentiate between perception and reality the better things can be for everyone. It means less wasted time bickering/arguing, less time "making people feel safe" and more resources used elsewhere. It also means that people end up with a better understanding of the realities involved and thus are more empathetic with those implementing those features and reality.
Basically to choose to remain ignorant so that one's life is easier or "feels" better is an extremely selfish endeavor that puts the burden on everyone else.
really so your saying its such a BAAAAD thing for me to want to create my own username when I first create my account that will be my displayed username.....
Even if there were no security issue, I wasn't aware when I created my user name (which has historically been private in games I've played and websites I belong to) that it would be broadcast in game, as most people weren't. If I had been aware, I would have chosen something different. A lot of people will have used the same type of name they use on many other accounts, not knowing any better. For a lot of people the name they chose was private to them and has been used on other private accounts, or reveals information pertaining to other accounts that they don't want made public.
I can only repeat, this issues of account hacking en mass, by usernames has never happened in any other MMO that uses it.
I do agree, it would be a good idea to let people change it so it is not the same as their account name.
Except that it doesn't bother me in the slightest and it's not a security issue.
They should use a nickname system for your account, every account should got a unique nickname on top of the account login info. Your nickname is displayed in guild chat as oppose to username which is a huge security risk.
Actually, it is a security issue. There is no extra authentication except an IP check and send an email to you which people can hack into.
People trying to hack you will get your username anyways.
Agreed I should login with an account ID that is never shown in game to anyone else I'm playing with.
I don't like account bound things either like the 5 guilds system, but thats a whole different kettle of fish!
And we don't let them get it easier than it should be. If you are in a guild and you join the guild forum, chances are, both your email and username is known to another player in the same guild and thus they have a better chance to target you.
The IP check doesn't work in the game tho.
I have used VPN on and off and it never asked me one time to enter an access code.
And even if it does work for the game, its not fail safe. An authenticator apps would be better but not showing your login name should be the bare minimum.
Pretty much this.
They're not going to brute force your account. And if I have your username, I don't necessarily have your email address.
Why in Hate's name would you join a guild with people like that in it? And why in Hate would you use the same email as you do for important things?
All of my forum logins are sent to a junk email I keep for just that purpose...
There are a LOT of dumb things going on in this thread. :/
Yes, current PTS patch added this to the game as well.
We've said a few times that it went in the last PTS patch, not the 3 builds old version we had this weekend.
And they're not going to change how the login works this far along.
Some of you folks are really obtuse about how big of a problem this is, because it's really *not* a problem. It really isn't.
I'm not a fan of the current system either, honestly. It was actually changed to be like this, since at first you were logging in using your email address, which was never shown anywhere in-game unless you typed it out yourself. Now your login is easily seen in the game.
I simply don't like it. I don't see why it was changed. It's surely not more secure.
Mind you, I'm totally fine with having ZOS's version of CoH's @Global system. (Someone wanting to hide theirs for whatever reason is a separate issue.) I just don't care for my login credentials being so easily available. There's simply no upside to it at all that I can see.
Let's contribute every single legitimate issue / concern to Hate. Because everybody is so trusting on the internet that ZOS shouldn't even need to implement a better system. They could have used the character name in guild chat and guild roster but they decided to use username instead, so they have the responsibility to implement a better system on security.
And for the PTS build argument, its pointless anyway because the IP check is only an email for an authentication code and we know email is unhackable.
just so much qq its ridiculous. only retards get hacked and if they do its easy to get your account back. no massive amount of players is gonna get hacked cause of that reason. kid, your a clown stop posting. its sad that two others eggd you on and agreed with you. get out of here you scoundrels!
your just like the one complaining about the bag space and long walks in pvp. man thats part of the game thats what makes it hardcoe. you die you, kick rocks take a hike.
I can't remember if you can use 'nickname' which you are referred to in the game for login. However, this is the reason why they implement the authenticator now.