2nd Forum Question.


ClawsandEffect

 

Posted

(Reference this thread: http://boards.cityofheroes.com/showthread.php?t=279915)

Ok, so it's obvious the forums still don't remember us. K. I have been handling that for a while now, so it's not a huge, operationally.

However... the forum account and the game account is tied together. This sucks.

I also had the main account with the same password (I'm a rebel!), but I just changed it. Luckily, nothing happened, and now, I'm... well, relatively secure, seeing as how the password is a alphanumeric only, and no symbols. Still, I threw in caps in a few places, so THAT'll confuse them!

Anyway. It's one thing to demand our password over and over and over and over... but at least the game remembers our username.

The forum does not. This is why having the same password sucks.

A nefarious person could wind up with the username and password for both the forum and the game with a keylogger. This could then wind up not only having my account used to belittle people in these forums (you imbeciles you), but also... hey, wait... I didn't type that, did I?

..er, anyway, but also get into my game account and screw me over, deleting characters and such.

Nosir. I just don't like it.

While I do enjoy my forum times here... I may just stop comin' here until it's fixed.

Am I too paranoid?

More to the point... can I have my wish and change my forum password or username only?

/re: paranoid... answer=very yes, I'm thinkin'.
//I know most of the arguments for and against this remember user/password vs not... it can be a fine line as to which is 'right, so go ahead and argue away for me.


August 31, 2012. A Day that will Live in Infamy. Or Information. Possibly Influence. Well, Inf, anyway. Thank you, Paragon Studios, for what you did, and the enjoyment and camaraderie you brought.
This is houtex, aka Mike, signing off the forums. G'night all. - 10/26/2012
Well... perhaps I was premature about that whole 'signing off' thing... - 11-9-2012

 

Posted

Quote:
Originally Posted by houtex View Post
Anyway. It's one thing to demand our password over and over and over and over... but at least the game remembers our username.

The forum does not. This is why having the same password sucks.

A nefarious person could wind up with the username and password for both the forum and the game with a keylogger.
If you're actually concerned about this, I would suggest better security on your computer. In case you're unaware, malware exists that will take screenshots to capture 'pre entered' account ID's. So, having the software remember you is no defense unless it also OBSCURES the account ID.


Paragon City Search And Rescue
The Mentor Project

 

Posted

Hm. Yeah, that does sound like I'm a little too paranoid.

I would, and continue to, hope that I have good security on my computer... but like the dang flu, things keep changing, and every so often... someone's gettin through to some people's. It is my firm belief that no security on a computer is foolproof or unbreakable.

But yeah, your post, Ironblade, confirms it: A paranoid person am I. I'll get over it one day...

/my Co* screenie would be HUUUGE, man...


August 31, 2012. A Day that will Live in Infamy. Or Information. Possibly Influence. Well, Inf, anyway. Thank you, Paragon Studios, for what you did, and the enjoyment and camaraderie you brought.
This is houtex, aka Mike, signing off the forums. G'night all. - 10/26/2012
Well... perhaps I was premature about that whole 'signing off' thing... - 11-9-2012

 

Posted

I think you're referring to the forum logout bug.

It's not going to be fixed anytime soon. The devs confirmed for us that it's not anything they did, it's a bug in the forum software itself, which they did not code.

The forums the website uses are VBulletin, so if you know of any solutions to a VBulletin bug, I urge you to PM one of the devs with it.


Quote:
Originally Posted by Dechs Kaison
See, it's gems like these that make me check Claws' post history every once in a while to make sure I haven't missed anything good lately.

 

Posted

Even if the forums remembered us properly for a week, or a month, or however long, you'd still have to put in your username/password sooner or later, at which point the keylogger would grab it. In fact, the keylogger could probably grab your keystrokes as you're logging into the game directly, so even having a different login for the forums wouldn't help. Not to mention the problems if you do anything serious on your computer, like check your bank account.
Basically, if you have a keylogger, you're screwed period, forum bug or no. Solution: Don't get a keylogger, and if you do get one, fix it.


 

Posted

Quote:
Originally Posted by ClawsandEffect View Post
I think you're referring to the forum logout bug.

It's not going to be fixed anytime soon. The devs confirmed for us that it's not anything they did, it's a bug in the forum software itself, which they did not code.

The forums the website uses are VBulletin, so if you know of any solutions to a VBulletin bug, I urge you to PM one of the devs with it.
There are two/three different logout issues, of which one seems to be totally on vBulletien's end.

The randomly logged out (even when just logging in) is a load-share issue with the servers. This is the one that, as far as I can tell, is totally on the software.

Then there are the duration issues/funky cookies - most of this is based on how the settings are set to remember.

The third that affects some people is the webteams' insistence that the forum invalidate a cookie/login if the IP is different from the last time you "spoke" to the forums. This gets annoying to those of us on any sort of mobile Internet access like a smartphone or netbook where you can change Ip addresses frequently. As far as I've heard this is basically security for the sake of security - anyone hear of any issues that this would solve?


Orc&Pie No.53230 There is an orc, and somehow, he got a pie. And you are hungry.
www.repeat-offenders.net

Negaduck: I see you found the crumb. I knew you'd never notice the huge flag.