Discussion: New Security Update on NCsoft Master Accounts
By
aleph_EU,
Posted on: 2011-03-01 17:02 in News, Events and Announcement Discussion
I actually only ever put in gibberish into those fields precisely because I think those security questions are never actually ever secure.
Now I'm afraid I'll end up locking myself out of my NCSoft account forever. If I disappear at the end of the month, you'll know why!
Quote:
It's NCSoft and online security. Of course it's going to start a mess.|
Originally Posted by KayJMM
Well... i added two questions/answers...
Lets just hope that this wont start a mess.. |
This is just silly. Security questions and a safe list, really? If they really wanted their customer accounts to be more secure, they'd do as others have said and go for a physical authenticator token system.
Whatever questions there are, do NOT use real answers. Real answers can be easy to find especially if someone knows you. People most likely to steal your account, what do you know, also people who know you.
Write them down if you have to, but many famous people (including Prez Obama) had accounts stolen because they used real answers to challenge questions.
I run coh NA and EU from 3 different computers. Can you talk more about the authorization? Will this apply to EU accounts too?
Edit. I don't think this is a big deal. I get one-time auth that allows me to add the computer.
I don't like the sound of this.
1) I agree that forums and game accounts should have different passwords but it was NCSoft who decided that our forum logins should be the same as our NC login. That was a dumb plan at the start.
2) To purchase the boosters I use a proxy because otherwise I can't see the booster packs on the NCStore. It decides I'm in the UK and won't show me the USA links which are INVARIABLY up and working much much sooner than the EU store. How am I supposed to purchase items with this system.
More information required.
SAVE CoX info:
Titan Network efforts
Saving CoX events/FB info
Just went through this on one computer. Gawd... I totally forgot that I had answered Security Qs when I first set up my NCSoft account nearly 5 yrs ago.
Thankfully, they were Qs I could easily remember. As to what they are, one could be easy to crack, the other isn't as easy to know unless you knew me and my habits rather well.
So I should be good when accessing it from at least one computer. Still have to try one other Computer to see if I have to go through security hoops on it.
Thank you for the time...
@Travlr (Main) / @Tymers Realm (Test) 
If you get the questions wrong five times you are locked out of your master account.
I hope you all have good memories. There should have been an option to put in new information rather than hope people can remember what was said years ago. I for one NEVER give real info (mothers maiden name etc) that is bad security.
SAVE CoX info:
Titan Network efforts
Saving CoX events/FB info
Quote:
I'm a retired network security professional, and I agree with AmazingMOO.
|
Originally Posted by AmazingMOO
Yeah, a lot of banks use this and NO IT IS NOT ANY MORE SECURE. Some security folks call it 'Wish it was two factor'. It is NOT.
|
*Reads the thread title*
OOHHH!!! They are fixing the silly regional security! 
*Then reads Avatea's announcement*
OH....They are adding more silly security and not fixing the already broken silly security 
*Goes and cries in a corner pondering the next add-on I might want to buy and the 3 day quests I have to go on to buy them*
This is the WORST idea they have ever come up with. I was trying to log in and got stonewalled, I don't remember the answer to the password hint question, so I emailed for the answer and again was stonewalled. I had to change my password for NCsupport, since I couldn't get in, then when I tried the tab
"I know my NCsoft master account password but I do not know the answers to my Password Hint Questions"
I got a wonderful page full of....
Quote:
Now the fun thing is I would have to put in ALL the codes/keys of all the CoH games I have gotten. That is CoH, CoV, GvE, Architect, and Going Rouge. And if you don't have the disks handy you are screwed! So now I am stuck, not able to enter my master account to put in a time card until support contacts me again via email. Sorry if this sounds like I am ranting, I'm trying hard not to, but I'm just peeved right now. This is just what I was afraid would happen, and I will have to know this information when I set up my computer at home (am currently on my game rig at BF's).
|
Subject: I know my NCsoft master account password but cannot answer hint questions in order to authorize my location. Question: Here is my account information: NCsoft master account name: ENTER ACCOUNT NAME HERE First and last name: ENTER FIRST AND LAST NAME HERE Physical Address: ENTER POSTAL MAILING ADDRESS (not e-mail address) HERE Date of birth: ENTER DATE OF BIRTH HERE Serial codes/access keys: ENTER CODES/KEYS HERE Unique Account ID(s): ENTER UNIQUE ACCOUNT ID(s) HERE |
No DOOM today, DOOM tomorrow. There's always a DOOM tomorrow.
Global: @Kiriko-chan Test: Myskatz Kittens Beta Test: @Plantrezz
Arcs: 5318 ROUS (just a little beat 'em up)
8500 One more time down the Yellow Brick Road.
244321 One more time down the Yellow Brick Road v2
Quote:
|
Originally Posted by myskatz
This is the WORST idea they have ever come up with. I was trying to log in and got stonewalled, I don't remember the answer to the password hint question, so I emailed for the answer and again was stonewalled. I had to change my password for NCsupport, since I couldn't get in, then when I tried the tab
"I know my NCsoft master account password but I do not know the answers to my Password Hint Questions" I got a wonderful page full of.... Now the fun thing is I would have to put in ALL the codes/keys of all the CoH games I have gotten. That is CoH, CoV, GvE, Architect, and Going Rouge. And if you don't have the disks handy you are screwed! So now I am stuck, not able to enter my master account to put in a time card until support contacts me again via email. Sorry if this sounds like I am ranting, I'm trying hard not to, but I'm just peeved right now. This is just what I was afraid would happen, and I will have to know this information when I set up my computer at home (am currently on my game rig at BF's). |
Same here, I think I got fancy with the security answers that I forgot about them, especially since it never came up all these years. I hope support will get back to me with good news. I don't want April 28 to be my last day here in CoH/V >.<
I join here Kismet Angel and Myskatz. I have reported this to support and i hope they bring me positive news. I want to continue playing the game that i have loved for the last years. Even a casual player, this is on my top list of things i had enjoy in my whole life. I don't want April 8 to be my last day....
Avatea, I know you are just the messenger, but now that I'm getting questions from 6 years ago, I have this response for you to take back to NCsoft:
Quote:
I'm sorry, that is a load of manure.|
Originally Posted by Avatea
We are increasing our security measures again by setting up additional security questions for all accounts. This enhanced system is part of our ongoing effort to ensure a safe and secure gaming environment for you.
|
Quote:
|
Originally Posted by Avatea
New Security Feature Added
We will be turning on a new security feature that verifies that you are logging in to your NCsoft® Master Account with a computer authorized by you. To help prevent unauthorized access to your NCsoft Master Account, you will need to confirm your identity when you attempt to log in to a different computer. This new security feature is part of our ongoing effort to ensure a safe and secure gaming environment for you. |
Quote:
|
Originally Posted by Avatea
How Does This Work?
You correctly answer some additional security questions. Verifying this information authorizes a one-time login. Once your identity is confirmed, you can add a computer to an approved list. You are trying to log in for a computer that has not been approved by this account. For security purposes, please answer these security questions to verify this computer's use. |
This is got to be the single stupidest thing I've EVER experienced from this game.
Quote:
|
Originally Posted by Avatea
Password Hint Questions
Your answers must exactly match those on your account, including the capitalization. These questions must be answered correctly to proceed past the authorization stage and reach your NCsoft Master Account. |
Quote:
|
Originally Posted by Avatea
If you don't remember what information you entered when you registered your account, please contact Support (North America or Europe).
|
------------------
Edit:
Oh this keeps getting better:
Quote:
|
Serial Codes/Access Keys Provide all serial codes/access keys that have been added to your NCsoft master account. If you aren't sure where to find these, click here. If you are unable to provide all of your serial codes/access keys, please explain when submitting your information. |
Triumph: White Succubus: 50 Ill/Emp/PF Snow Globe: 50 Ice/FF/Ice Strobe: 50 PB Shi Otomi: 50 Ninja/Ninjistu/GW Stalker My other characters
Ditto on the "Heck if I remember my security question from 5+ years ago".
That was 5 years, 3 computers, and 1 house ago.
And I'm not sure I can even ask Support, cause all I think I'm getting is the EU version, there's no option for non-EU CoH on the list....
To right the countless wrongs of our day, we shine the light of true redemption, that this place may become as paradise. What a wonderful world such would be....
I'm sorry what was that, I couldn't hear you over my TRAGIC PAST!!
This "Security Update" is a pointless irritation.
Goodbye may seem forever
Farewell is like the end
But in my heart's the memory
And there you'll always be
-- The Fox and the Hound
Looks like it's time to email bomb Support. Based on their reputation, I expect this to be sorted out in no time at all!
Also, why should I care if my account gets hacked? Is some beneficent hacker going to buy me the Mutant Pack?
Quote:
ARE!!! you guys at NC soft outta your ficking- jumping off a cliff -eating the bad shrooms minds using this as a security question """mother's maiden name"" this this the one -big one -the one they only really use to protect big stuff like bank accts and credit card transactions and such and your asking to use it to protect a "game acct" NUTS!!! this is right up there with "can I have your social security number!! the whole thing|
Originally Posted by Avatea
Your answers must exactly match those on your account, including the capitalization. These questions must be answered correctly to proceed past the authorization stage and reach your NCsoft Master Account. !!!!!!!!What is your mother's maiden name? [text box]!!!!!!! |
go read a book on "security" and you might get a clue
rant over real world issues over
Quote:
I just found out that it is based on IP Address, which means that on some ISPs that a player whose ISP changes their IP Address on a daily basis (or even every time they connect to the ISP) will constantly have to re-verify themselves (I've been with ISPs that do this).|
Originally Posted by Snow Globe
This would be either based on my IP Address (which could change beyond my control) or based on a cookie which could expire in a session or around 14 days. So if I'm not constantly logging into my master account (something I shouldn't have to do), the player will always have to re-verify their accounts.
|
This brings up user hostility in the name of security to a whole new level.
Quote:
|
Originally Posted by Snow Globe
This is got to be the single stupidest thing I've EVER experienced from this game.
|
Triumph: White Succubus: 50 Ill/Emp/PF Snow Globe: 50 Ice/FF/Ice Strobe: 50 PB Shi Otomi: 50 Ninja/Ninjistu/GW Stalker My other characters
Quote:
So can we finally change having to have same password on our master account as the forum here. Its way to easy to hijack wireless users auth sessions and get not only thier forum account but master as well.| Remember that to keep your account secure you should always use unique passwords that you do not use for email, forums, or websites |
I'll echo that this is all bling security, not real security, and will annoy users more than helps.
Both ISPs I use assign dynamic IP address's. I'll be reauthrising every damn day.
I bet that it is not going to change.
I don't suffer from altitis, I enjoy every minute of it.
Thank you Devs & Community people for a great game.
So sad to be ending ):
Quote:
I agree with it pointless, like if you i forget your Password Hint Questions. I complete forgot my Password Hint Question. So like i said and agree with Tenzhi it pointless.
|
Originally Posted by Tenzhi
This "Security Update" is a pointless irritation.
|
Nacht Nova Thunder = Level 50 (Liberty) Dark Blaster/Storm Summoning - Defender
Nova Ninja = Level 50 (Liberty) spines/ Regeneration - Scrapper
CanadianMan = Level 50 (Liberty) Super Strength/Invulnerability - Tanker
LibertyBoy = Level 35 (Liberty) Stone Armor
/Fiery Melee - Tanker
Quote:
Have to agree here. This is inane.|
Originally Posted by Snow Globe
I just found out that it is based on IP Address, which means that on some ISPs that a player whose ISP changes their IP Address on a daily basis (or even every time they connect to the ISP) will constantly have to re-verify themselves (I've been with ISPs that do this).
This brings up user hostility in the name of security to a whole new level. I have to repeat this for emphasis. This was a poorly thought out and quickly implemented idea that should NEVER have happened in the first place. |
Does anyone consider "what is your mothers maiden name" a secure question in this century?
My Ip address tends to change every few weeks, I've no control over that. 3G devices (like say iPads and laptops connected to 3G dongles) tend to give different addresses per connection.
Quote:
So, I'm not a pet owner and my mother's maiden name is a matter of public record. Yeah, that's secure. *sigh*
|
Originally Posted by Avatea
What was your first pet's name? [text box] (limit 32 characters)
What is your mother's maiden name? [text box] |
On Protector...
Hero Woods Cutter, level 50 Katana/Regen Scrapper
Villain ProPaine, level 50 Plant/Fire Dominator
Villain Amber Ellie Dee, level 50 Sonic/Radiation Corruptor
Hero Coruscation Agent, level 50 Fire/Devices Blaster
Well, I'm locked out of my NCSoft account.
That's cool, because I was on there last night looking for security questions to change
By the way, copied from support's page, since this is probably billing
Quote:
|
Phone Support We offer telephone support for billing and technical support issues only. You may contact a member of our Billing or Technical Support Teams by calling the number below. We do not offer telephone support for general game support issues. Any calls regarding game support will be directed to use one of the available support methods listed in the Game Support section. From within the US: 1-512-225-6359 From outside the US: (++1) 512-225-6359 Mon-Fri 12pm to 5pm, Central |
As a former eu player now playing us side which support am I meant to contact? And am i expect to provide every serial code across the board? Actually given that it was 5 years and 2 houses ago I don't even have my Eu serial codes.
This is inane.
Edit : And yes. I'm locked out, because apparently I don't know my girlfriends name. Way to go NcSoft web team. Just when I thought you couldn't get more useless.
Idiotic. You can't decide 5 years after the event that certain personal questions which had no meaning are suddenly critical to access your account.
while I appreciate NCSoft's attempt at more security, Unfortunately, the who preset question is not secure.
The majority of web sites, beside Real World places with security questions, use the same questions. Mother's Maiden Name and Pet being probably the most common. This actually creates a situation where knowing these answers, which takes a little research but can be figured out, a security risk. With those same answers, a decent cyber-crimnal could use social techniques to get passwords reset for things such as your bank account, credit cards, and plenty more.
Please for people to come up with their own question and answer. Makes it a bit more secure.
Now about those SecureID cards with the numbers that change every x seconds. Its a private encryption algorythm which when typed in within the alloted time frame, allows a computer to prove that the person logging into it has rights to.
Defcon 0 - (D4 lvl 50),DJ Shecky Cape Radio
@Shecky
Twitter: @DJ_Shecky, @siliconshecky, @thecaperadio
When you air your dirty laundry out on a clothesline above the street, everyone is allowed to snicker at the skid marks in your underoos. - Lemur_Lad