Discussion: New Security Update on NCsoft Master Accounts


aleph_EU

 

Posted

Quote:
Originally Posted by Mrs ? View Post
Same here. And am very wary at giving out my details as I have many a fake looking email looking like its NCsoft or whoever . . . .

The longer it takes for my account to be resolved the more anxious and worried I get . . . .
If you're uncertain about any e-mails you get, contact one of the Mods here, and ask them to check if it's real or not.


@Golden Girl

City of Heroes comics and artwork

 

Posted

Quote:
Originally Posted by Mrs ? View Post
Same here. And am very wary at giving out my details as I have had many a fake looking email looking like its NCsoft or whoever . . . .

The longer it takes for my account to be resolved the more anxious and worried I get . . . .
i only got 1 actual email about it though, after that i just updated the support ticket on their website


 

Posted

Quote:
Originally Posted by Necrotech_Master View Post
i only got 1 actual email about it though, after that i just updated the support ticket on their website

I have done both now from my email account and from the support website . . . .


 

Posted

Quote:
Originally Posted by Mrs ? View Post
I have done both now from my email account and from the support website . . . .
well at this point just matter of time to wait, they are prolly bogged down by people calling support (and the horror stories from that have been 45 min on hold on a non-toll free number)

since i have no immediate need to access my master account atm, ill just wait with emails, i do wish to get this fixed though


 

Posted

Quote:
Originally Posted by Arcanaville View Post
I've only been a security professional for about seventeen years now, so its possible the developers of Aion know something I don't, but I'm having difficulty with the concept of evading a keystroke logger by making the player type more keys. Seriously: that's going on a slide on my next presentation as an ice-breaker joke.
Well to be fair to Aion's "security", a player can't use the keyboard to enter the PIN.

How do I register for an Aion Character PIN?
Quote:
Upon logging into your account for the first time after the new Character PIN system has been switched on, you will be required to set up your PIN. This is done at the character selection screen.
  • Launch the game and log into your Aion game account using your Aion game account name and password.
  • Select any one of your characters and hit the Start button.
  • You will then see a pop up message titled Register Character PIN, requesting that you register your character PIN.
  • Using your mouse and the keypad provided in the pop-up, enter your preferred PIN and then re-enter it for confirmation. NOTE: You cannot use your keyboard to enter the PIN. You must use your mouse and the keypad on the screen. Your PIN must be 6-8 digits long and consist of different numbers. You will not be able to use the same number for each digit of your PIN, e.g. your pin cannot be 11111111.
  • Click the OK button.
You will receive a confirmation message stating that you have set your PIN successfully. You will then be able to log into the game using your PIN.
All characters, even across different servers, will share this same PIN. You will have to enter your PIN whenever you launch the game and are attempting to log in as a character for the first time in that play session.
About the only two things I can see is reasonable about that are: 1) the pin is 6-8 digits and 2) they can't all be the same digit.


I'm wondering why it would be needed on my computer as I do use best practices and routinely scan for all malware. I know however that most users don't. I know that because I get to charge them for fixing their mistakes.



About the only place I'd be worried about key loggers are in Internet Cafes.


Quote:
Originally Posted by Arcanaville View Post
So that its not possible to guess someone's PIN by either looking over their shoulder or by looking for fingerprint smudges on the buttons.
Yeah, Aion's system appears to fail the "looking over the shoulder" test.

Quote:
Originally Posted by Arcanaville View Post
assuming any large hacking group is even targeting City of Heroes
And this is the point that is bothering me. I can't think of any reason why anyone would bother. They'd go after the bigger targets.

Quote:
Originally Posted by Arcanaville View Post
By the way, I have no personal ax to grind here. I got home, authenticated my computer, remembered the original answer I gave to the security question provided, and passed the captcha. So I'm not saying this entire thing is questionable from a security stand point because I'm pissed off I'm locked out of something. I'm fine. I still think this is not kosher.
Even if my master account was accessible at the moment, I would still be upset over this.




Triumph: White Succubus: 50 Ill/Emp/PF Snow Globe: 50 Ice/FF/Ice Strobe: 50 PB Shi Otomi: 50 Ninja/Ninjistu/GW Stalker My other characters

 

Posted

Subject:
I know my NCsoft master account password but cannot answer hint questions in order to authorize my location.

Question:
Here is my account information:
NCsoft master account name: no problem
First and last name: no problem
Physical Address: no problem
Date of birth: no problem
Serial codes/access keys: they are on my account list
Unique Account ID(s): no problem.

Do NC really expect me to have a record of what I was asked over 6 years ago?
my situation and circumstances have changed drastically since then. 2 PC's and 3 house moves later.

Well done NC for locking out a fair few players in the name of this 'supposed' security move. Which as has already been posted, is not secure at all.

Thankfully I do not need to access my master account at the moment.
I really feel for people on timecards.


 

Posted

Quote:
Originally Posted by Snow Globe View Post
I'm wondering why it would be needed on my computer as I do use best practices and routinely scan for all malware.
No commercial antivirus software is perfect when it comes to malware. Especially web-injected malware. And unless you're using a rootkit-specific scanner, if rootkit malware slips by one day, you're AV isn't going to find it once its infected.

I'm unlikely to be hacked: even if I was, even my personal computer is behind an enterprise class firewall with non-stop logging of all the traffic in and out of the system. I can theoretically be infected by a keystroke logger, but it can't possibly talk to anything with me knowing it. But I don't think all of my defenses combined are perfectly impenetrable. That's actually *why* I log all traffic that leaves my system: I have to assume eventually something will get through.


[Guide to Defense] [Scrapper Secondaries Comparison] [Archetype Popularity Analysis]

In one little corner of the universe, there's nothing more irritating than a misfile...
(Please support the best webcomic about a cosmic universal realignment by impaired angelic interference resulting in identity crisis angst. Or I release the pigmy water thieves.)

 

Posted

Quote:
Originally Posted by Mr ? View Post
Subject:
I know my NCsoft master account password but cannot answer hint questions in order to authorize my location.

Question:
Here is my account information:
NCsoft master account name: no problem
First and last name: no problem
Physical Address: no problem
Date of birth: no problem
Serial codes/access keys: they are on my account list
Unique Account ID(s): no problem.

Do NC really expect me to have a record of what I was asked over 6 years ago?
my situation and circumstances have changed drastically since then. 2 PC's and 3 house moves later.

Well done NC for locking out a fair few players in the name of this 'supposed' security move. Which as has already been posted, is not secure at all.

Thankfully I do not need to access my master account at the moment.
I really feel for people on timecards.
totally agreed

give us an alternative and less confusing method to access again our master accounts please... this is getting silly

atm i thing you have done a very bad move, that shows signs of a mediocre company


defiant only
@amartia

my public list : http://cit.cohtitan.com/profile/9355

 

Posted

Well it took me awhile but I have finally gotten in. Took me digging through my emails to find all the codes, funny I still had them all. I've taken the advice of putting them into a word doc to have them together for in the future. Now I just have to get my game rig set up. Thank god. I still feel this was a bad idea to implement this without a lengthy warning to give people a chance to get information needed.

just my two cents....


No DOOM today, DOOM tomorrow. There's always a DOOM tomorrow.
Global: @Kiriko-chan Test: Myskatz Kittens Beta Test: @Plantrezz
Arcs: 5318 ROUS (just a little beat 'em up)
8500 One more time down the Yellow Brick Road.
244321 One more time down the Yellow Brick Road v2

 

Posted

Well 2 days and nothing. The only thing I'M missing is the old serial numbers, which i sent them the original emails as proof. In that time NCSoft (PlayNC) did not sent the codes to our emails. I will be still waiting to get my master account back.

I'M happy for all of those who have recovered their master account


 

Posted

I'm in the same boat as nearly everyone else here, and can't log in to my own Master Account.

I started playing way back in 2005 and as such was completely stumped as to what I may have typed in as an answer to the security question I got when attempting to log in last night.

So I sent an e-mail to Support explaining my predicament, which of course caused me to remember the answer to the question five seconds later.

I then tried logging in again, giving what I'm fairly certain is the correct answer, but it still won't accept it as being valid.

Grrr!


@Nanas (on Defiant)

 

Posted

I got my Master Account back!! Now we need the rest of you to get it back, so we are still standing here. I wish you can get your master accounts as soon as possible. I know you will


 

Posted

Still can't log in from home.



Clicking on the linked image above will take you off the City of Heroes site. However, the guides will be linked back here.

 

Posted

Hi everyone, I apologize that the new security update has been giving some of you trouble. If you need to contact Support for issues regarding the new security update, please include the following information when you send your ticket:

NCsoft master account name:
First and last name:
Physical Address:
Date of birth:

Serial codes/access keys:
Unique Account ID(s):


Including this information along with your ticket will help speed up the processing of your support issue. This information is critical in us handling your ticket. If you have already sent a ticket without this info, please update your ticket.

Once again, I apologize to those of you who're having issues with the new security measures. Please send a ticket with all the info you can. this information included, please send an update including this info. Customer Support is currently handling a lot of tickets at the moment, and if you can get this info to us it really expedites the process.


 

Posted

Quote:
Originally Posted by Beastyle View Post




[FONT=Arial][SIZE=3][COLOR=Sienna]NCsoft master account name:
First and last name:
Physical Address:
Date of birth:

[COLOR=DarkOrange]Serial codes/access keys:
Unique Account ID(s):
Can Serial codes/access keys be from any costume packs we bought for exemple?
And what is exactly the uniquw Account ID?


Arc ID 104041 Attack of the Mini Phalanx Solo Friendly; Custom Characters; Comedy.
Arc ID 292449 The Shadow of Eihbon Solo Friendly; Canon Related; Magic.

 

Posted

So... what do we do when we've sent an email to NCSoft Support with all of the information above (or at least all that we've got available) and they don't reply for two full days...?

Quote:
Originally Posted by Photonstorm View Post
And what is exactly the unique Account ID?
Apparently it's an identification number that gets emailed to you when you first sign up for an NCSoft account.


Main Hero: Chad Gulzow-Man (Victory) 50, 1396 Badges
Main Villain: Evil Gulzow-Man (Victory) 50, 1193 Badges
Mission Architect arcs: Doctor Brainstorm's An Experiment Gone Awry, Arc ID 2093

-----
Quote:
Originally Posted by Nethergoat View Post
it's NEVER too late to pad your /ignore list!

 

Posted

Quote:
Originally Posted by Chad Gulzow-Man View Post
So... what do we do when we've sent an email to NCSoft Support with all of the information above (or at least all that we've got available) and they don't reply for two full days...?
Currently, Support is handling a high volume of tickets. We apologize for the wait time, but rest assured that Support will get around to helping with your issue.


 

Posted

Quote:
Originally Posted by Beastyle View Post
Currently, Support is handling a high volume of tickets. We apologize for the wait time, but rest assured that Support will get around to helping with your issue.
You could just roll back the change and let people get their accounts and security questions sorted?


 

Posted

The change is NCsoft-wide.


 

Posted

im happy to report that support finally got back to me and cleared my security question so i could actually log in to the master account and fix stuff

2 days was a reasonable amount of time to be handled judging by how much they were being bogged down by all the phone call ins and such

i dont think this is exactly bad, but it shouldnt have applied immediatly, it should have just let you log in normally after they change it and have a popup saying that the next time you log in you will be asked to verify your location and will need the answers to your security questions, doing such would have made the transition a LOT easier


 

Posted

Quote:
Originally Posted by Beastyle View Post
The change is NCsoft-wide.
Ohhh....

Well in that case I'm sorry you guys got crapped on by head office, it sucks that you're taking the heat for it.


 

Posted

Quote:
Originally Posted by Photonstorm View Post
Can Serial codes/access keys be from any costume packs we bought for exemple?
And what is exactly the uniquw Account ID?
This really does bear repeating. You can't expect people to provide information when they're not clear what information you're looking for.


The Abrams is one of the most effective war machines on the planet. - R. Lee Ermy.

Q: How do you wreck an Abrams?

A: You crash into another one.

 

Posted

Quote:
Originally Posted by Beastyle View Post
Currently, Support is handling a high volume of tickets. We apologize for the wait time, but rest assured that Support will get around to helping with your issue.
Please tell me I'm not the only one seeing the problem here. These people don't have a tech issue. I don't have a tech issue. I have my account and password. Everything is fine. NCSoft is having an issue by not accepting them. I'm not even going to write a ticket. You know the problem, fix it.


Listen to the mustn't, child, listen to the don'ts, listen to the shouldn'ts, the impossibles, the won'ts, listen to the never haves, then listen close to me. Anything can happen, anything can be. ~ Shel Silverstein

 

Posted

Quote:
Originally Posted by Beastyle View Post
The change is NCsoft-wide.
I thought everybody knew.

I knew -something- related to security changes were coming, the game is getting quite popular which also means it's <read in between the lines> "attracting attention"

It was just a matter of time before a change.

I just WISH we could have gotten those number generator thingies instead.

That would have been the best way to do it, I cherish my investment. I'd pay for one. Maybe two.


Ignoring anyone is a mistake. You might miss something viral to your cause.

 

Posted

Quote:
Originally Posted by Falke View Post
Please tell me I'm not the only one seeing the problem here. These people don't have a tech issue. I don't have a tech issue. I have my account and password. Everything is fine. NCSoft is having an issue by not accepting them. I'm not even going to write a ticket. You know the problem, fix it.
This.

You know, it takes a lot to piss the Cai off, but this managed to do the job perfectly. The best part for me is that the email address associated with my main account makes replying to the support tickets almost impossible since it sends the original message as an attachment, thus not allowing me to put new information into the correct space provided on the original email.

Looks like I have a fun afternoon of listening to elevator music ahead of me.