Issues, Workarounds & Localization

Reporting a few bugs with this feature.

1) When I create a new account and try signing into the forums or the account management page, it redirects me to the "You have not logged in from this IP before" page, despite that I've never logged in from any other IP. This happens with every new account, about a dozen so far, no exceptions.

2) The page asks you to type in a name of a character from the account to continue with login. Below that it provides two options: Continue or Cancel. When I type in a character name from the account and click Continue, it displays an error (incorrect character name) and takes me back to the login screen. The character names I'm typing in are correct, I've tested it with many character names on many accounts. It never works.

3) Once back at the login screen after the error, if I try signing in again, the cycle repeats. Takes me to the IP page, character name doesn't work, brings me back to the login screen. Cannot login.

4) The only way to login is to click "Cancel" on the IP page. This will return me to the login page, but when I try logging in it will no longer ask me for my character name.


There are two possible outcomes here:

- Log in with fresh account. Redirects you to IP page, asks you for character name. Type in correct character name. Doesn't work. Returns you to log in screen. Cycle repeats.
- Log in with fresh account. Redirects you to IP page, asks you for character name. Click "Cancel". Returns you to log in screen. Log in once again. Works.


To be clear, there are two problems with the feature:

1) It is sending me to the "You have not logged in from this IP before" page when I have not logged in with a different IP.
2) It is not accepting correct character names from the account when they are typed in.

When you enter your password incorrectly, you are directed to the same page is if you entered the password correctly from an unfamiliar IP, but the login attempt will always fail, even if you enter the correct character name.

This makes it harder for someone attacking your account to tell if they have the correct password, the goal being to leak as little information about an account as possible to attackers, but it can also be confusing to legitimate users.

Note that the launcher does the same thing.

Oh so THAT'S what that's about. Could you at least change the message to say that either you haven't logged in from this IP before OR the password is wrong so it doesn't confuse people? The behaviour itself is fine.

All my accounts used to have different passwords, now with this change I have been forced to make all of my eve accounts the same password and put a text file on my desktop to copy and paste into the launcher.

Thank You CCP for the increased security and protection of my accounts.

This.

And even tho I click "don't show me this again" on the IP verification thing or whatever it tends to show up again.