All I'm saying is: Login with your account name "Victorp" and it shows ingame as any other name you choose. That is not so hard to do, and it will not hurt you.

Most hacks don't brute force as it is extremely inefficient. Most use key loggers, which it doesn't matter if they have your login handle, because they get it anyways.

Having @username will also not hurt you.

Someone deadset on breaking into my house or car can too. I still lock the doors when I'm out.

You cannot make a 110% perfect system.

All I'm saying is that the current system as a huge and easily addressed flaw.

Be sure to add the list of words associated with Elder Scrolls too.

Like "dovahkiin"

WoW doesnt use account names anymore they use battle.net registered emails. RealID works uding email and I see the real name if everyone on my rid list.

Battletags were added later and were originally only going to be used with SC and D3.

Anyone using those stupid common passwords deserves it for not thinking. Internet security suggestions have been around 20 years minimum. Stop trying to protect stupid from itself. Theyll learn the hard way if they have to.

People, your passwords are not as strong as you think they are. I used to think my regular password was unbreakable but then I heard Spaceballs President Skroob used the same password on his luggage so I had to extend it by a single digit.

Gottcha

If the passwords are weak, you're just an easy target regardless of the username system.

If that system is well implemented it would help. Someone would then need an email addy too, and while I'd wager that many people with easy pws also have an email identical to their login and the same pw for both, it'd still help.

Having a secret code sent via text to your phone is even better.

It should just use your characters name and not login.

Those that do brute force almost exclusively target wow.

One guy fully admits to taking fansite registration email /pw combos and trying to brute force wow accounts.

He was surprised at how many actually worked.

100% agree with OP. This needs to go.

lmao nice.

Keyloggers and phishes are the most common ways to get hacked.

But we'll see how effective their account lockout system works.

http://imgs.xkcd.com/comics/password_strength.png

WoW also didn't add the Real ID system until well after authenticators were around.

It's a given that people SHOULD make good passwords, but most don't, and it will harm the game's image when they start getting hacked if usernames are still used as identifiers.

If the other security systems described are well implemented, it would help a lot.

I still see no harm in allowing people to use a handle other than their account name.

nuts, I was just looking for this

should be just as effective as authenticators as it works the same way.

Good comic. That's what I do, though I only use the first two letters from the words.

wow... i can see in the future. 2 months after release, people starts getting their accounts hacked because of this,

then its /GG ESO and players leave.

Yup, needs to be removed pronto.

A good firewall and antivirus works against that. Agressive hackers rather hack the company's database. Nevertheless we are talking about just a little more security on our side.

It's not just the guilds and friends that see your @useraccount. You see anyone's @useraccount just by sending them stuff/mail via ingame mail system.

And it's quite a bad idea, can't understand how they implemented that in such a un-safe way in a first place...

But, if you login from an previously unknown IP, your mail will get a warning from it and you can kick them out via email kicky thingy.

I used my real name for my username not expecting it to be displayed all over the place. In every game I have ever played online, i could always change my display name in the forums or in game.

It doesn't appear I can edit my username now. I have already pre-ordered the game and setup credit card info on this account, so creating a new account right now would svck.

Should only happen if they have your email address thanks to the one time password function. If they have your email account, you are screwed anyways.