Player Features and Ideas Discussion

Doesn't sound bad for an added layer of protection. Blizzard has a smartphone app which I find convenient.

I was talking more about the single button press that you stick on your keychain authenticator :)

Oh it happens, I buy good characters sometimes and I had 3 characters I wanted to buy be a victim of theft.

Thiefs steal account and liquidate everything to RMT isk to RL currencies.

Too good to be true applies.

Vote up to get CCP less ADD then?

Or you can buy a keychain authenticator and never have to worry about scrolling through apps! Just don't lose your keys! :D

If you are stupid enough to have your account compromised you deserve everything you get.

Most hacked accounts are inactive, as I understand it. It's easier to not draw attention from brute-force methods (How many times have you forgotten a password to some old account and made a few dozen attempts trying to reactivate it?) and can often be linked to inactive email accounts which are also easier to brute-force.

I've also been hearing more and more cases of accounts with authenticators getting cracked, so it's not really a sure-fire way to prevent your account from getting compromised anymore. It's more of a game of roulette, in my opinion. Either your account ends up on the short list, or it doesn't, but the competent account crackers seem to be able to get any account they want

Scary, when you consider that some online banking services have less security than some MMO's, but also not scary when you also consider that digital items and digital currency are not considered personal property under any country's law that I'm even vaguely familiar with. The small-timers are sticking with small-fry that won't bring anyone inconvenient sniffing in their direction.

To summarize: Something like an authenticator would be nice, if it could be guaranteed to work, but current evidence says that CCP would have to one-up all of the usual tools to make it work, and it'd just be a shiny blinking challenge beacon to people out there who enjoy or make a living off of cracking account security measures, thus putting an expiration date on it's efficacy as soon as it's implemented.

But hey, that's the internet for ya. So long as you're not silly enough to assume that it's going to be foolproof forever this wouldn't be a bad thing for CCP to implement, even if it is a false sense of security for people who don't understand that anything short of double-blind encryption can be compromised.

I wouldn't be surprised at all. The assumption could also be made that some of them fell for it because of the false sense of security the authenticator can give.

In the end nothing beats paying attention and doing what you know you're supposed to do to keep your information safe.

With the announcement recently that 3rd party websites are going to be able to use the unified login, I especially would like an additional layer of security to replace the one being removed.