Support for the New NCsoft Security Update


Acemace

 

Posted

Quote:
Originally Posted by Acemace View Post
Tiny vent,
"Unique Account ID(s):
A unique identifier was sent to you in an e-mail titled "Game Account Activated" on the day that you originally activated your game account"

Yeah, SEVEN #$%&ing years ago, I looked it's not in my current email which means it was an old account, /more then one email account in nearly a decade....boggle/.


Same goes for "Serial codes/access keys:",
let me look for that game CD I bought in March 2004, ah there it is sitting right next to my keyboard...
For anyone wondering if they can retrieve those keys:

Quote:
We will be unable to disclose the Serial Code for your game account for security reasons. The Serial Code was sent in an automated e-mail when you activated your account, and we are unable to resend this e-mail.

If you need to verify ownership of your account in the future, we we'll have to verify something else on the account if you are unable to provide the Serial Codes.
is the response I got when I asked. I'm just going to grab the serials from the latest booster and try to keep them *somewhere* (not quite sure where yet,) so I'll have something I can show them if I ever need to.


 

Posted

Quote:
Originally Posted by Ironblade View Post
The code is listed in its entirety in the confirming email that is sent out.
No. No they are not.

I'm looking at my e-mail confirmation for the Animal Pack. No code on there.
I'm looking at my e-mail confirmation for the SB: Martial Arts. No code there.
I'm looking at my e-mail confirmation for the SB: Superscience. No code there.
I'm looking at my e-mail confirmation for the SB: Magic. No code there.
I'm looking at my e-mail confirmation for the SB: Cyborg. No code there.

Now, TIME CARDS, yes. You get the code for those in the e-mail from the store. I know this because I just applied a time card to a secondary account to keep it up long enough to qualify for the Vanguard goodies.

But things bought directly through the NCSoft store NEVER EVER display the item codes in their entirety.

So asking people to provide these is ludicrous.



Clicking on the linked image above will take you off the City of Heroes site. However, the guides will be linked back here.

 

Posted

Quote:
Originally Posted by Desi_Nova View Post
Yes every time your IP address changes, Which is more likely than not Every time you Reboot you have to answer the Frickin Questions again.
Again, no.

Most ISP DHCP lease systems will reassign you the same IP address again and again for an indefinite period of time when the lease expires.

Rebooting in the middle of a lease period and signing back on with a device with the same MAC address will result in you being issued the same IP address.

Usually only prolonged periods of downtime (beyond the end of a current IP lease, which in ISPs' cases,is usually 24 hours or more) will result in the issuing of a new IP address.

I've been on the same public IP address for weeks now. With multiple system reboots in that time.



Clicking on the linked image above will take you off the City of Heroes site. However, the guides will be linked back here.

 

Posted

Quote:
Originally Posted by Zwillinger View Post
My sincere apologies to anyone who is experiencing any level of frustration in relation to the new security update. We absolutely agree that additional time to communicate and prepare players for this update would have been preferable and have communicated the need for such to the appropriate individuals.

We will strive to make any further security updates such as this a much smoother process and less jarring to our Community.

Thanks everyone for your patience.

- Z
I am lucky enough to not have had to deal with the problems..... though to be quite honest I dont ever remember providing NCsoft with the answers to my security questions.

Non-the-less, how does one get his COH secret super number for the future seeing as it has now become important and like many others it has been both many years and a few email accounts since I started playing the game.

I have perhaps a more important question, or at least a questions about a whole new can of worms I now see as having been opened: What about all the people, who having lost access to their Ncsoft master account could not enter a time card and are now disqualified from receiving the vanguard pack? (not to mention the days they have had to go with out access). What is being done for people in that situation?


 

Posted

I had this problem myself,but as I have all email,s relating to CoH in a file,once I knew what info they wanted it was just a matter of going to that file the first email I had from Coh had my ID code in it ,and I only put in the code for the last pack that I bought which was the animal pack.I checked my email yesterday and everything as sorted. My suggestion is never delete an email from CoH you never know when you will need that information.


Prof Radburn controller,Celtic Ice Maiden,blaster,Miss Knockout scrapper,Mistress Davina controller,Stone Hart,tank Split Personality PB.Queen Lostris controller,Fridgid Mary blaster,Shocking Fire blaster Future Elfling defender, Little Weed controller,Capo Angelo MM, Commander Buzzsaw MM, Justice Tank tank all 50,s

 

Posted

Well it took me a few days to resub my main account, now most likely gonna lose my free vanguard booster. -.-

The way this security thing was implemented was horrible. Most things ask you for answers to "new" questions when they upgrade security. They simply let you into the account after you enter your password.

Where is the waves of people getting their accounts hacked to even need this? Game Login/Password is different from MA Login/Password. I know I use different names and passwords, I know none of my toons are named after these names. Most people I know are the same way.

Confused as to why the change was needed.


 

Posted

Quote:
Originally Posted by Hyperstrike View Post
No. No they are not.

I'm looking at my e-mail confirmation for the Animal Pack. No code on there.
I'm looking at my e-mail confirmation for the SB: Martial Arts. No code there.
I'm looking at my e-mail confirmation for the SB: Superscience. No code there.
I'm looking at my e-mail confirmation for the SB: Magic. No code there.
I'm looking at my e-mail confirmation for the SB: Cyborg. No code there.

Now, TIME CARDS, yes. You get the code for those in the e-mail from the store. I know this because I just applied a time card to a secondary account to keep it up long enough to qualify for the Vanguard goodies.

But things bought directly through the NCSoft store NEVER EVER display the item codes in their entirety.

So asking people to provide these is ludicrous.
I hate to disagree with you but I have the codes on email

I have 3 emails per pack

First one confirmation from Paypal.

Second "Thank you for your purchase from the NCsoft Store"

Then the one with the full code in "NCsoft Serial Code Applied".

The above from the Animal pack. Unless things are different with EU accounts which I'm on.


Happy to be on Defiant.
Global name @mereman
Member of P.E.R.C. Representing Defiant
Alts http://cit.cohtitan.com/profile/4488
CoH faces http://faces.cohtitan.com/profile/mereman

 

Posted

Quote:
Originally Posted by Ironblade View Post
Well, if that's the case, then we have a security system designed by morons. This is not reassuring.
Yup... The system is designed by morons.

I got the following email after getting the reset:
Quote:
Someone at XXX.XXX.XXX.XXX has logged into your NCsoft account XXXXXXX and added the IP to the list of authorized locations for the account. If you did not perform this action, please contact support immediately at support@ncsoft.com.
The stupidity of using the IP Address is just asking for the system to get hacked. It actually makes it easier for someone with a smart phone to hack an account than a legitimate user using a fixed IP address.




Triumph: White Succubus: 50 Ill/Emp/PF Snow Globe: 50 Ice/FF/Ice Strobe: 50 PB Shi Otomi: 50 Ninja/Ninjistu/GW Stalker My other characters

 

Posted

Everyone please repeat after me:

"Adding security questions to your login process is *not* the same as 2-Factor Authentication"

It is, at best, marginally more secure and at worst gives a false sense of security by adding nothing to security of the system. Anyone who knows me would know my mother's maiden name and my town of birth and anyone who cared even slightly about getting access to my account could find out.

If you want to improve account security, do it properly with proper 2-Factor authentication like Google & Blizzard do and all Banks should but usually don't do. You don't even have to send out loads of tokens or SMS messages as most people these days have smartphones and can run token apps on them.

A false sense of security (and all the hassle it's caused in this instance) is worse than no security at all.


Omnes relinquite spes, o vos intrantes

My Characters
CoX Chatlog Parser
Last.fm Feed

 

Posted

Quote:
Originally Posted by Hyperstrike View Post
No. No they are not.

I'm looking at my e-mail confirmation for the Animal Pack. No code on there.
I'm looking at my e-mail confirmation for the SB: Martial Arts. No code there.
I'm looking at my e-mail confirmation for the SB: Superscience. No code there.
I'm looking at my e-mail confirmation for the SB: Magic. No code there.
I'm looking at my e-mail confirmation for the SB: Cyborg. No code there.

Now, TIME CARDS, yes. You get the code for those in the e-mail from the store. I know this because I just applied a time card to a secondary account to keep it up long enough to qualify for the Vanguard goodies.

But things bought directly through the NCSoft store NEVER EVER display the item codes in their entirety.

So asking people to provide these is ludicrous.
Correction:

They are NOT displayed on your NCsoft account page.

They ARE however displayed in one of the 2 reciept emails that you get from NCsoft whenever you buy a booster pack from them.

You get one listing the *purchase* of it...

And then you get another listing the *Code* and which account it was applied to.

These emails get sent to the registered email account on your NCSoft master account page.

I know this because of the 30+ emails I have from Ncsoft.


 

Posted

Quote:
Originally Posted by Ironblade View Post
The code is listed in its entirety in the confirming email that is sent out.
Quote:
Originally Posted by Hyperstrike View Post
No. No they are not.

I'm looking at my e-mail confirmation for the Animal Pack. No code on there.
I'm looking at my e-mail confirmation for the SB: Martial Arts. No code there.
I'm looking at my e-mail confirmation for the SB: Superscience. No code there.
I'm looking at my e-mail confirmation for the SB: Magic. No code there.
I'm looking at my e-mail confirmation for the SB: Cyborg. No code there.

.....

But things bought directly through the NCSoft store NEVER EVER display the item codes in their entirety.

So asking people to provide these is ludicrous.
That's not my experience at all. You must be looking at the wrong e-mails. You were probably looking at the e-mail confirmation for the purchase itself, which does not display the full code. You should have received another e-mail after you applied the code.

I still have e-mails dating back to PlayNC, which say "PlayNC Serial Code Applied". Those include the full code of all items added (even those bought off the website), and say:
"Please keep this email for future reference as the serial code may be required to obtain customer service."

Eventually through the change to NCSoft, the wording was only changed slightly, but overall results are the same:
"NCsoft Serial Code Applied
Save this e-mail for your reference. You may need to provide the serial code to a customer service representative to obtain customer support."

I counted at least a dozen full serial codes, but the funny thing is that I never even had to provide any of them at all to re-gain access to my account, so I think people are getting too worked up over it. lol


 

Posted

Quote:
Originally Posted by Gangrel_EU View Post
Correction:

They are NOT displayed on your NCsoft account page.

They ARE however displayed in one of the 2 reciept emails that you get from NCsoft whenever you buy a booster pack from them.

You get one listing the *purchase* of it...

And then you get another listing the *Code* and which account it was applied to.
Ah. I stand corrected. Luckily I'm using Google for my game account e-mail though.
I could see people using another service providing only space-limited POP3 being in deep kimchee though.

For those also using Google, or with a very lengthy list of e-mail history you can find it by looking for the following subject line in the e-mail.

NCsoft.com Purchase Receipt

Newer e-mails will have the subject of:

NCsoft Serial Code Applied



Clicking on the linked image above will take you off the City of Heroes site. However, the guides will be linked back here.

 

Posted

Quote:
Originally Posted by Hyperstrike View Post
Ah. I stand corrected. Luckily I'm using Google for my game account e-mail though.
I could see people using another service providing only space-limited POP3 being in deep kimchee though.

For those also using Google, or with a very lengthy list of e-mail history you can find it by looking for the following subject line in the e-mail.

NCsoft.com Purchase Receipt

Newer e-mails will have the subject of:

NCsoft Serial Code Applied
I use google to pick up my mail account from 3 different providers (2 from my own domain, and one MSN pick up), as well as the standard Gmail email.

The *only* thing that I would point out...

Make sure that you check your junk mail if you do not recieve the emails.

Some people have found their "confirmation" email within their MSN junk mail. You need to ensure that MSN/Hotmail is setup to accept email from NCsoft as *not* junk.


 

Posted

Mmm...

I try to live a simple life, and this being the Capitalistic system, I vote with my dollar: No Service, No sale. Plain and simple.

If I try to get something, from anyone, and they give me a hard time, I simply desist trying to get that item from them and go somewhere else for that item or look for "the next best substitute", these procedures are basic economics 101 subjects.

So far, the latest set of booster packs, in my opinion, are not worth buying at this time: They provide too little for the cost they are charging for them. So I have not experienced an issue with the current system.

On the other hand, we must be appreciative that CoH is actively trying to protect our personal information and transactions, that is always good, especially these days!

So we may be experiencing a bit of give and take...


Stormy


 

Posted

For what it's worth, I had the same problem getting into my Master Account, but I was able to have them reset it by giving them just a portion of the required five questions. None of them were a game code of any sort.

In other words, give them what you can and go from there. No heart attacks are necessary.

(Yes, an advanced warning would have been helpful, but claims that you need every code is exaggerated.)


 

Posted

For the folks that are concerned about receiving your Loyalty rewards, I'll be sure to address this with the appropriate people. We will work to ensure that everyone who is legitimately entitled to these rewards receives them.


Andy Belford
Community Manager
Paragon Studios

 

Posted

The assumption that a PC will have the same IP address in naive at best. Most DSL (or any ISP that uses PPPoE) and dare I say dial-up (like me) are assigned IP addresses at connection.


Father Xmas - Level 50 Ice/Ice Tanker - Victory
$725 and $1350 parts lists --- My guide to computer components

Tempus unum hominem manet

 

Posted

Add me to the list of those unable to access their master account since this "security" update. Even though I know what I put in the question fields in 2005 it still tells me I'm wrong. I have to wonder if the new update may have overwritten the question fields.

I'm starting to get very disgusted with this new feature. As with nearly everyone else I'm completely screwed if they demand the "original email info"... honestly who keeps emails from 6 years ago? My email folder is over 100GB in size anyway with all the business stuff I need to keep for two years; anything older is automatically purged.

This is a really bad decision on NCSoft's part and if it isn't addressed swiftly and competently will cost them large numbers of subscribers. I love the game but I'm getting disgusted with the NCSoft orders from on high. If I were on the fence about continuing with the game this would absolutely make the decision for me.


COH has just been murdered by NCSoft. http://www.change.org/petitions/ncso...city-of-heroes

 

Posted

Ok, I had the same issue with getting into my account, and I was prepared for all sorts of problems.

then I called the support number, talked to a live person, and 10 minutes after I got off the phone, I was able to get into my account. It really was quick and painless and she asked a few questions to confirm my identity.

Now, for other points that have been stated here:

A) Yes a warning that this was going to be turned on to the e-mail address in your account a day or two before would have been very helpful. A chance to make sure you knew your answers, or change them if need be.

B) If the reason for not sending out an e-mail is because of security, well it is even less secure shooting an e-mail with an ip address off to that address each time you do something with your account (Log in, change billing information, change security questions, etc..). If the e-mail address in the account was changed to a hacker's e-mail, then they now will have a change to get at you, especially if you have a static ip.

C) IP changing: Yes IP's will change, Yes DSL is more prone than Cable, UVerse, FIOS etc, but if you have a router after your modem, the IP address changing is maybe once a month. Is this annoying? yes. Is there a better soultion? Yes and that is...

D) Register machines by their MAC adress. With MAC being Unique to each Network Card, that means that even if your IP address changes, you would be recognized. Mind you this is still not 100% secure, since the MAC is transmited inside of the TCP packet, but it is a much harder thing to snag that way, plus the spoofing of MAC addresses are not real prevalent.

Just my thoughts on the whole matter.


Defcon 0 - (D4 lvl 50),DJ Shecky Cape Radio
@Shecky
Twitter: @DJ_Shecky, @siliconshecky, @thecaperadio
When you air your dirty laundry out on a clothesline above the street, everyone is allowed to snicker at the skid marks in your underoos. - Lemur_Lad

 

Posted

Quote:
Originally Posted by DJ_Shecky View Post
D) Register machines by their MAC adress. With MAC being Unique to each Network Card, that means that even if your IP address changes, you would be recognized. Mind you this is still not 100% secure, since the MAC is transmited inside of the TCP packet, but it is a much harder thing to snag that way, plus the spoofing of MAC addresses are not real prevalent.

Just my thoughts on the whole matter.

Still not secure. MAC addresses are spoofable. Granted, it'd take somewhat heroic effort, but still.



Clicking on the linked image above will take you off the City of Heroes site. However, the guides will be linked back here.

 

Posted

Quote:
Originally Posted by Hyperstrike View Post
Still not secure. MAC addresses are spoofable. Granted, it'd take somewhat heroic effort, but still.

Yeah that's why I said not 100% secure. There really is no way to be 100% secure, but I think its a better option than IP addresses which are easily spoofable.


Defcon 0 - (D4 lvl 50),DJ Shecky Cape Radio
@Shecky
Twitter: @DJ_Shecky, @siliconshecky, @thecaperadio
When you air your dirty laundry out on a clothesline above the street, everyone is allowed to snicker at the skid marks in your underoos. - Lemur_Lad

 

Posted

Quote:
Originally Posted by Zwillinger View Post
For the folks that are concerned about receiving your Loyalty rewards, I'll be sure to address this with the appropriate people. We will work to ensure that everyone who is legitimately entitled to these rewards receives them.
TY for looking into this, it took me a few days to remember my answers. My main account was down, still had my 2nd account running however. I don't use real information for those questions, helps prevent getting hacked from people who dig personal info.


 

Posted

Grabbing the mac address opens a few cans of worms.

One the mac address identifies what kind of network card you have... thus piercing a level of privacy. Not important to some, to other the beginning of needing to register every piece of hardware you own publicly to play games.

Mac addresses arnt that hard to spoof. I have an old router around here somewhere that lets me put in whatever mac address I want to use. It is from the days when the cable/dsl providers could lock you out if you didnt use their equipment. The easy fix change it's mac address to match the one on their box. If an old junky router can do it, well....


 

Posted

I know first hand how bad this can be even before the update. I came back after 3 years with a new computer and I could not remeber my username and password. I went back and forth with support told them everthing I could remember even the serial code for cov didn't have the one for coh but because I didn't have the coh code.. long lost or c.c. number from card i used when i joined they said they couldn't help me. I spent a few hours at the log in screen trying to remember....finally the stars lined up and i was able to remember the name and password..so I truly am sorry for the ones going thru this. I know how it can be.


"Because some men aren't looking for anything logical, like money. They can't be bought, bullied, reasoned or negotiated with. Some men just want to watch the world burn." Alfred Pennyworth

 

Posted

Well about an hour after I sent in my support ticket I got an email that they'd wiped the question fields and I could log in and reset them. Apparently they've been bombarded by this in the last few days and relaxed all the verification demands. Either that or I got a particularly helpful GM but I've reset things and have access to my master account again.


COH has just been murdered by NCSoft. http://www.change.org/petitions/ncso...city-of-heroes