Player Features and Ideas Discussion

Any chance you guys could implement some additional security measures for eve accounts. Some ideas below:

- A 2 step verification for eve accounts like gmail and facebook?

- An account specific application that generates 1 time use codes to enter along with the password upon login.

- Saving trusted computers or laptops. if someone tries to login using an untrusted device, a notification could be sent to that accounts email, for which the player would have to accept the login approval through his/her email.

-physical card reader which produces 1 time use codes (would be nice to be able to purchase using plex)

-physical usb flash that you would have to insert in a usb drive in order to be able to log in (would be nice to be able to purchase using plex)

Rather than saving trusted computers/laptops, its better to save trusted IPs/Networks you're usually logging in from with an ability to manage those networks from account manager. should someone attempt to log in from an untrusted network/IP, they will have to enter 1-time code that is sent either to e-mail or phone (if you choose that method). Authenticators (both physical trinkets and software ones) sound good too. Ability to opt out from additional security features should be there too.

The day i try and log in to EVE and it brings up one of those ******-ass "connect your account with facebook, gmail, yahoo, bl blah blah were ****** sellouts on the social bandwagon" is the day i go and make my own space game for me to play in all alone.

I swear too many games all try and jump on this bandwagon, and then offer ingame bonuses to people who allow the site to post advertisements with their name on their wall to cut back advertising budgets, i do not and will not ever have a facebook, if i want to meet one of my friends without going to their freaking house there is Mumble, Teamspeak, EVE, Steam, or any other game i can meet other players in without being subjected to advertising and "pokes" from some no-life in North Africa or Southern Europe.

In short, facebook = pointless to even have and is even less ecure than EVE, so all you would be doing is hooking an even less secure "password" service onto what your assuming is an already compromised EVE account, because lets face it, if they managed to get your EVE info, then its not going to be at all difficult to get your facebook info.

Stealing someones password is a lot more simple than you think.

I'm abit interested in this so could you behaps enlighten me abit.

Lets say that I have only games on my computer, no other program and I use a browser only to access hardware sites to download lates drivers and software and nothing else. I do not have any comminucation program on that computer or anything else. I do not use it to download anything end the computer does not share or otherwise comminucate with other computers. I do not use same passwords never and all games have their own passwords. And emails are different from normals ones that I use on other computers.

So... how do you steal my password and login information and gain access to my account unless I mess up something or share my details to someone?

I know and I don't have one either at this moment but it would be good machine to have cause they always work better when playing... so this was just an example and I tried to prove my point that it's usualy you your self who messes up and does something that gets your account details gets stolen.

There is no such thing as being 100% safe in IT. Its all about reducing the chance of getting hacked. Even though you are very careful with your pc, there is always a chance that you might make a mistake. Forgetting to update a certain driver, software, clicking on a wrong link, opening the wrong email . . . if a hacker wants your pass they will get it.

And besides that i highly doubt the average player is willing to pay for a separate pc just to use for gaming.

tbh this should be done and should be optional... those who want 2 step auth enabled can have it, those who don't can keep going as they currently are.

It shouldn't even need discussion or argument really. Same as with google, if you don't want 2step don't turn it on.

added some new ideas