Discussion: New Security Update on NCsoft Master Accounts


aleph_EU

 

Posted

When is the latest I can get the new launcher & still get the Wisp Aura?


My Lego Models http://www.flickr.com/photos/30369639@N07/ lemur lad: God you can't be that stupid... I'm on at the same time as you for once, and not 20 minutes into it you give me something worth petitioning?
Lady-Dee: Hey my fat keeps me warm in the winter and shady in the summer.

 

Posted

Now that I have calmed down, I do appreciate that your addressing this. I am second in line to have this fixed. Thank you guys.


 

Posted

I'm currently 30th in the queue to a long distance phone number that isn't toll free based on a change imposed with no warning, no grace period, no chance to resolve issues.

Thank you very much.


My arcs are constantly shifting, just search for GadgetDon for the latest.
The world beware! I've started a blog
GadgetMania Under Attack: The Digg Lockout

 

Posted

After sleeping on this, I've decided that if this is not resolved through minimal effort on my end, I will cancel my subscription to CoH.*

I'm sorry Paragon Studios, I love you guys, and pretty much every little thing you do. In my eyes, you lot are near perfect, and I picked the recurring payment method to show as such.


But NCSoft, this, this is bad. This is a horribly implemented plan. The vibe I get, from dealing with the support site, and reading the tales of my fellow subscribers, is that yes, you want to keep us safe. But in blocking out the hackers and identity thieves, you've locked out nearly everyone else too.


And after reading Av's latest post, it seems your decision is to hold fast to your plan of keeping us safe... even from ourselves.

As I said, I have a recurring payment plan. but if I am unable to access my OWN BILLING ACCOUNT to cancel or change how I pay MY MONEY, then I say good day, thank you for the years of wonder and enjoyment, and good bye....


*edit*
Do note that minimal effort means not having to pay to call support to get this trainwreck fixed.


To right the countless wrongs of our day, we shine the light of true redemption, that this place may become as paradise. What a wonderful world such would be....


I'm sorry what was that, I couldn't hear you over my TRAGIC PAST!!

 

Posted

:QR

OK. So I am supposed to remember 2 questions that I set up, 4 years ago, and haven't thought of them since. -_- I was still playing Pokemon back then



Your character does not have capped defense. Depending on your AT the cap is between 175% - 225%. Your defense is not teal in the combat window, it can go higher. STOP SAYING IT IS CAPPED! The correct term is Soft Cap.
I enjoy playing in Mids. I specialize in Melee Characters, other AT's usually bore me.

 

Posted

45 minutes on a non-800 number and I'm in. Very, very, very unhappy, but I'm in. This was not acceptable.

BTW, it was fixed by clearing the security answers. I did need to enter my birthdate, but that I've had cause to think about in the 7 years since I set up the account.

So, a recommended solution - any account that hasn't updated its security questions in more than, say, two years (or three years, the cutoff point is arbitrary) gets those security answers cleared. On login, when there are no security questions, suggest answering them, and suggest a link to set it. (If you want to be really pushy, bring up an alert to say "set it now, or wait for later" - I hate those but can understand the purpose.) Bingo bango, problem solved.


My arcs are constantly shifting, just search for GadgetDon for the latest.
The world beware! I've started a blog
GadgetMania Under Attack: The Digg Lockout

 

Posted

This plan of yours NC which I didn't want, didn't need and which I wasn't warned about cost me two-thirds of a months subscription in International phone call charges.

While I love this game ... guys ... that was an incredibly stupid plan. It was really badly done.

Please hire a grown up to think about the consequences of changes before they're made.





SAVE CoX info:
Titan Network efforts
Saving CoX events/FB info

 

Posted

This is beyond STUPID! I can't access my master account becasue I failed 4 times as I don't remember the stuff I wrote seven years ago! How about a warning before implementing this so we could at least check or change what we wrote!!! I mean.... honestly!


Arc ID 104041 Attack of the Mini Phalanx Solo Friendly; Custom Characters; Comedy.
Arc ID 292449 The Shadow of Eihbon Solo Friendly; Canon Related; Magic.

 

Posted

I too am now locked out of my master account.

Will I be given access after a certain amount of time or do I have to call to get it back?


@Stablae - Freedom Server
Controller/Dominator Freak
Freedom Server
Repeat Offenders: Doing hard things stupidly easy.

 

Posted

Again I understand that you, personally, have no control over this and you are only the messenger.

Quote:
Originally Posted by Avatea View Post
Hi all. We understand this is a pretty big change for some of you
It is a big change for no reason whatsoever. It doesn't increase security, it only increases hassle. No matter how the tech guys want to try to spin it, it doesn't increase security in any shape or form.

Quote:
Originally Posted by Avatea View Post
while this was implemented in order to increase the security of all NCsoft Master Accounts
Again, this security is a complete sham. Having the account white listed to IP Addresses only benefits NCsoft, not the end user. This is solely designed to provide support with the ability to shrug off any complaints that a user's account(s) have gotten hacked. With this system in place, players are treated as guilty first and then having to prove their innocence.

Instead this system, as others have pointed out, actually makes users existing security worse because the same questions a person uses to verify their account is likely the same questions that financial institutions use. This will enable someone that can hack a player's NCsoft account to be able to hack the player's financial accounts easier. Is NCsoft willing to be liable for that? I somehow doubt it.

Quote:
Originally Posted by Avatea View Post
we certainly don't want to create situations where you are no longer able to access your Master account, therefore limiting your access to your City of Heroes account.
It has and will continue to do so. As pointed out, there are ISPs and Mobile Carriers that frequently change a users IP Address. So with those ISPs they will constantly have to prove who they are. This is like having a police state:


(I could have invoked Goodwin's Law, but didn't.)

For a game company who purports to want a welcoming game environment, this should be a major concern. Instead of making players feel welcome to play the game, this security check is doing the exact opposite.

Quite frankly, I'm wondering how long NCsoft is willing to have its brand dragged through the mud over this.

Quote:
Originally Posted by Avatea View Post
Our Support team certainly expected to receive a lot of tickets after the announcement was made and they are dealing with every single one of those tickets as diligently as possible. This will however take a little while and we would like to thank you for your patience while this is being done.
Last night I provided support with my master account, my full name, my postal address, my date of birth, 16/17 game codes for my account, my user ids, and the last four digits of my credit card. It took 3.5 hours to track down all that information. It is now 21 hours later, and I have yet to see anything other than an automated response.

All this has done is make me feel unwelcome to play the game. It has NOT made me feel the least bit more "secure". Instead it is making me feel like I'm a criminal for having the audacity to try to access my account.




Triumph: White Succubus: 50 Ill/Emp/PF Snow Globe: 50 Ice/FF/Ice Strobe: 50 PB Shi Otomi: 50 Ninja/Ninjistu/GW Stalker My other characters

 

Posted

Thanks to Tim at NCSoft for helping me out.

Got this computer good to go.


 

Posted

BTW, after 5 strikes, how long is it for our IP Adress to get unbanned?


Arc ID 104041 Attack of the Mini Phalanx Solo Friendly; Custom Characters; Comedy.
Arc ID 292449 The Shadow of Eihbon Solo Friendly; Canon Related; Magic.

 

Posted

Quote:
Originally Posted by Zombie Man View Post
Well, I have no real need to access my Master Account for weeks and weeks. Probably next time I *need* to will be with the next boost pack which is at least 2 months away.

So, I can wait out an email support ticket rather than call it in.
this is how im feeling about it, i have no immediate need to access my master account atm, but i would like to get it cleared up eventually so i can buy new boosters in the future

i too have a email/ncsoft support ticket in the works atm, but i have had 0 replies in almost 24 hours aside from the auto generated response


 

Posted

Quote:
Originally Posted by Changeling View Post
I too am now locked out of my master account.

Will I be given access after a certain amount of time or do I have to call to get it back?
Quote:
Originally Posted by Photonstorm View Post
BTW, after 5 strikes, how long is it for our IP Adress to get unbanned?
if your account gets locked out you HAVE to file a support ticket


 

Posted

Quote:
Originally Posted by Photonstorm View Post
BTW, after 5 strikes, how long is it for our IP Adress to get unbanned?
From what I can see, it is until support unlocks it.




Triumph: White Succubus: 50 Ill/Emp/PF Snow Globe: 50 Ice/FF/Ice Strobe: 50 PB Shi Otomi: 50 Ninja/Ninjistu/GW Stalker My other characters

 

Posted

Alot of people prefer to have mobile access and don't particularly stick to one I.P. Address.

I remember my passwords so I don't have these issues -BUT- I prefer the number generator.

Especially one with a City of Heroes skin. I would pay 6$ for that!


Ignoring anyone is a mistake. You might miss something viral to your cause.

 

Posted

Dear NCSoft,
did you send your IT-Department on vacation and let some drunk collegestudents in the mood for a prank do this?
I don't want your damn launcher. It will just try to give me a EU version of the game again or fix mine to one. Just like it does with Aion. The damn thing can go die, preferably horribly and painful as far as I'm concerned.

But it gets better. Don't you like money? Or do you just don't like my money? Because there was no warning to reset our security questions and those are over 3 years old. I have no damn idea. So I guess I'm not getting back into my account now. Ever. Awesome. Thank you so much.


Listen to the mustn't, child, listen to the don'ts, listen to the shouldn'ts, the impossibles, the won'ts, listen to the never haves, then listen close to me. Anything can happen, anything can be. ~ Shel Silverstein

 

Posted

They're probably closed by now or have gone home early =P ...it's nice that they've consolidated my additional posted infos/serial numbers but not resolve the issue though.


 

Posted

Quote:
Originally Posted by Avatea View Post
Hi all. We understand this is a pretty big change for some of you and while this was implemented in order to increase the security of all NCsoft Master Accounts, we certainly don't want to create situations where you are no longer able to access your Master account, therefore limiting your access to your City of Heroes account.
Seriously? Because I work with user interfaces and if I had wanted to create a situation that causes exactly this problem I'd have done exactly what you did. It's ok, you can take credit for doing it so well.


Listen to the mustn't, child, listen to the don'ts, listen to the shouldn'ts, the impossibles, the won'ts, listen to the never haves, then listen close to me. Anything can happen, anything can be. ~ Shel Silverstein

 

Posted

Quote:
Originally Posted by Kismet Angel View Post
They're probably closed by now or have gone home early =P ...it's nice that they've consolidated my additional posted infos/serial numbers but not resolve the issue though.
They're not closed by now. I'm currently 5th in the queue. They close at 5pm CST.

Quote:
Phone Support
We offer telephone support for billing and technical support issues only. You may contact a member of our Billing or Technical Support Teams by calling the number below. We do not offer telephone support for general game support issues. Any calls regarding game support will be directed to use one of the available support methods listed in the Game Support
section.
From within the US: 1-512-225-6359
From outside the US: (++1) 512-225-6359
Mon-Fri
12pm to 5pm, Central


 

Posted

Quote:
Originally Posted by MoltenSlowa View Post
They're not closed by now. I'm currently 5th in the queue. They close at 5pm CST.
That was a joke, since someone there have already seen my ticket/issue but wasnt resolved... yet


 

Posted

Quote:
Originally Posted by Snow Globe View Post
Again I understand that you, personally, have no control over this and you are only the messenger.

It is a big change for no reason whatsoever. It doesn't increase security, it only increases hassle. No matter how the tech guys want to try to spin it, it doesn't increase security in any shape or form.


Again, this security is a complete sham. Having the account white listed to IP Addresses only benefits NCsoft, not the end user. This is solely designed to provide support with the ability to shrug off any complaints that a user's account(s) have gotten hacked. With this system in place, players are treated as guilty first and then having to prove their innocence.

Instead this system, as others have pointed out, actually makes users existing security worse because the same questions a person uses to verify their account is likely the same questions that financial institutions use. This will enable someone that can hack a player's NCsoft account to be able to hack the player's financial accounts easier. Is NCsoft willing to be liable for that? I somehow doubt it.


It has and will continue to do so. As pointed out, there are ISPs and Mobile Carriers that frequently change a users IP Address. So with those ISPs they will constantly have to prove who they are. This is like having a police state:


(I could have invoked Goodwin's Law, but didn't.)

For a game company who purports to want a welcoming game environment, this should be a major concern. Instead of making players feel welcome to play the game, this security check is doing the exact opposite.

Quite frankly, I'm wondering how long NCsoft is willing to have its brand dragged through the mud over this.


Last night I provided support with my master account, my full name, my postal address, my date of birth, 16/17 game codes for my account, my user ids, and the last four digits of my credit card. It took 3.5 hours to track down all that information. It is now 21 hours later, and I have yet to see anything other than an automated response.

All this has done is make me feel unwelcome to play the game. It has NOT made me feel the least bit more "secure". Instead it is making me feel like I'm a criminal for having the audacity to try to access my account.
Just because this should not be lost. In the current state the account is unusable by me. And I'm not even going to write a ticket. I don't have a tech issue, NCSoft does. Fix it. You don't need a ticket from me to know that it is not working.


Listen to the mustn't, child, listen to the don'ts, listen to the shouldn'ts, the impossibles, the won'ts, listen to the never haves, then listen close to me. Anything can happen, anything can be. ~ Shel Silverstein

 

Posted

Distributed downloads is pretty nice. Also cool to have a launcher for regular/test/beta.


So.... Now how do I run my two accounts simultaneously?