Maintenance for the week of April 27:
• EU megaservers for maintenance – April 27, 2:00 UTC (April 26, 10:00PM EDT) - April 27, 16:00 UTC (12:00PM EDT) https://forums.elderscrollsonline.com/en/discussion/691699/
• NA megaservers for maintenance – April 27, 3:00AM EDT (7:00 UTC) - 5:00PM EDT (21:00 UTC) https://forums.elderscrollsonline.com/en/discussion/691699/

My Privacy and what ZOS should be protecting

  • Seri
    Seri
    ✭✭✭✭
    Syncronaut wrote: »
    Because right now one player has to do is trick players in game to install a malvare/spyware on their pc and that player will see all their info from passwords to email. Or the usual way when surfing on the internet.
    Other than the obvious of 'this is why you should keep your OS, antivirus, broswer, etc, up to date, and security settings enabled', if that did ever happen, your ESO account should be the least of your worries.
    EP CP160+ Templar, Sorc, NB
    DC CP160+ Templar, Sorc, DK
  • CyberOnEso
    CyberOnEso
    ✭✭✭✭✭
    Jayman1000 wrote: »
    CyberOnEso wrote: »
    People knowing your email or username will not let them 'hack' your account. It really surprises me how many people think this...

    Having a single visible name associated with each player is essential for any form of long term player interaction where players have more than one character. I use lore friendly names for my characters but have my account name which anyone whom I know knows and uses for whispers and group invites etc.

    Knowing username will help in hacking the account; but only if the user has a bad password. With a proper long and random password knowing the login name wont matter. However, unfortunately many players will continue to use subpar passwords and in those cases exposing the loginname to everyone in game to see is a security flaw that just makes the bad password much worse. Hackers can make a list of @accountnames they see in game and then run their bad passwords list against them.

    Bottom line: exposing account names ingame is a security flaw as long as there are players that use bad passwords. But if YOU use a proper password it wont matter for you.

    Whilst that is true, it's the worst kind of true. Hackers can easily guess a tonne of account names for every platform under the sun.
    Most services don't even bother encrypting peoples account names with a one way secure encryption, as they know it is just not needed and would stop them from looking people up on their database from their account name or changing their account name.
    Most services have login names easily visible as they know its not a security flaw.
    @CyberOnEso PC | EU - Jack of all Trades - Armory Style Manager Planesbreaker | Godslayer | Dawnbringer | Immortal Redeemer | Tick Tock Tormentor | Gryphon Heart
  • Hokiewa
    Hokiewa
    ✭✭✭✭
    Sometimes things don't add up. This is one of those times. If the OP reported the same person 50 times, one of two things would happen. Either the other player would get a temp ban or the OP would depending on the actual circumstances based upon the actions of both sides. I don't buy it that this supposed harasser has moved on to other guild members and no action has been taken. Yes, words are just words, and while you may not like the content of those words, they are only as damaging as YOU make them.

    There always two sides to every disagreement and anybody that has had experience with ZOS regarding a true harasser knows that they take these things very seriously. So again, I'm not buying it. Ultimately, in the end, you are the sole person as an adult responsible for your safety online. Personal responsibility has been lost these days.
    Edited by Hokiewa on 2 August 2018 14:30
  • Valrien
    Valrien
    ✭✭✭✭✭
    ✭✭✭
    Ohtimbar wrote: »
    Yes, this is an mmo but it's also a single player game at the same time.

    No, it's really not
    Valrien Dravic -- Level 50 Dunmeri Sorcerer (EP)
    Garahel Dravic -- Level 50 Bosmeri Nightblade (EP)
    Tamriel Unlimited was a mistake. One Tamriel was a bigger mistake
  • starkerealm
    starkerealm
    ✭✭✭✭✭
    ✭✭✭✭✭
    Anazasi wrote: »
    The second point I want to make is the /tell /whisper feature. Ever since launch players have been able to send harassing messages to other players across factions in PVP. This should never have been allowed.

    There's two parts to this. One is unreasonable, the other is impossible.

    Blocking point to point communication automatically in an MMO would seriously hinder the social functionality of the game. Without additional feedback, this would create a situation where you'd get no response from friends and guildmembers when you were trying to communicate and coordinate with them.

    Now, you could have straight up schismed the community, so that cross alliance communication was fully impossible, and locked alliance status at account creation... but that would have been a nightmare:

    Q: "I picked Pact, but my friend chose Dominion, what do we do?"
    A: "Cry. A lot."

    The second part, blocking harassment is, fundamentally impossible at a system level. The software cannot assess the nature of the communication with 100% confidence. It just doesn't work that way.
    Anazasi wrote: »
    In fact because players are able to do this it encourages harassment of all kinds.

    False. The current state of affairs is neutral. It neither encourages, nor discourages, harassment.
    Anazasi wrote: »
    @ZOS has the responsibility protect players from this. Internet harassment across the globe has reached epidemic proportions. While I admit most players we encounter are not malicious, the potential exists because of the loopholes @ZOS has left open.

    So it's an epidemic, of a few... that's not an epidemic.
    Anazasi wrote: »
    In my 4 years of playing this game I can only imagine the number of players who have been reported for sending hate tells could have all been avoided only if ZOS had removed that ability entirely (of course this would only apply to PVP areas.)

    Well, if it's an "epidemic of the few," probably not that many.
    Anazasi wrote: »
    If by some chance the person wanted to send you a hate tell outside of PVP, well that would be a pretty clear case of intentional harassment and would be so much easier for ZOS to administer justice. I should point out that yes they can simply get on the same faction and use zone chat to accomplish the same thing, or send you tells if on the same faction but those too can be reported because the intent would be evident.

    To be honest, a person sending those tells in PvP is pretty easy to identify and administer.
    Anazasi wrote: »
    At the very least @zos should add the option to turn off @name visibility and an option to turn off cross faction tells. To support this we have the option to turn off duel requests and we have the option to show character or @names, so why can't we have these options as well.

    Because that would immunize a player from bad behavior. Ironically, that would be a direct boon for the very people you're trying to defend against, because it would give them even more anonymity to spout toxic garbage, secure in the knowledge that no one could accurately attribute those complaints to them. Particularly in cases where the character name has non-roman characters, meaning the entire reporting system breaks down.
    Anazasi wrote: »
    I would also like to know while @ZOS has a clear TOS that actually uses the word harassment as a condition of violation how do they determine when harassment occurs? Is it only by reports? Is it by context? I have had the same player send messages daily for over 3 months. I have added them to the ignore list but they now send tells to other guild members. I have reported this person over 50 times and every day they are back doing the same things. Why doesn't ZOS take harassment seriously? Harassment is defined by Merriam-Webster as (1) to annoy persistently (2) to create an unpleasant or hostile situation for especially by uninvited and unwelcome verbal or physical conduct. Wikipedia defines harassment as actions covering a wide range of behaviors of an offensive nature. It is commonly understood as behavior that disturbs or upsets, and it is characteristically repetitive. We can also look at a general legal definition of harassment which states the act of systematic and/or continued unwanted and annoying actions of one party or a group, including threats and demands. If looking at all 3 sources of what defines harassment it should be clear that if the same person has been reported more than x times over a period of x days weeks or months and the still continue the same unwanted actions, something should be done.

    At this point, I'd wonder what, exactly they're saying. You felt the need to include the dictionary definition, which kinda implies that this particular brand of harassment, isn't that offensive.

    I've reported players for in-game behavior in the past, and almost every time I've gotten a personalized response from Customer Support, because of how messed up the things said were. Which leaves me wondering if this harassment is mostly benign. Creepy, but benign. Like a guy saying, "hey, did you remember to stock up on milk this morning," every day at 2pm would be ****ing creepy, but it wouldn't be harassment, the way the in-game moderation team looks at it.

    Now, the answer here is to contact Customer Support through website, and try to get a discussion going about this specific issue and this specific user. But, implementing a half-thought-through system of censorship would only benefit the trolls. It wouldn't help you at all.
  • starkerealm
    starkerealm
    ✭✭✭✭✭
    ✭✭✭✭✭
    Guilds are per account, not character. Like Warcraft was, for example. In Warraft, moreover, people had no way to know two characters belonged to the same person, unless you told them. ESO was designed in a different way, so the online ID is crucial to make it work. And you have lots of benefits for it being this way.

    On the other hand, is the online ID confidential data? It hardly is, since it does not expose anything personal. Of course, if you are smart enough to pick name_surname_dob as an ID. that's your responsibility.

    The unfortunate thing about WoW's system is, it does allow a player to be in your guild, watching your every move, interacting with you, and simultaneously sending very personalized harassment from an alt.
  • Soleya
    Soleya
    ✭✭✭✭✭
    Anazasi wrote: »
    Character names are essential to the game. However, the account @name should not be visible ever. With a player's @name they can "hack" your ESO account; either forums or actual account and retrieve vital personal information. Yes ZOS has several features in place to protect accounts but my concern is why are they allowing the most important aspect to visible?

    The most important aspect of your account security is your password. This is the same for every single account you have online.

    Most gaming services have your account name as visible. Steam, Xbox Live, Playstation Network, Origin...the list goes on.

    Strong password and never tell anyone, and you will never be hacked. A 12 character password would take 200 years to crack using brute force.
  • ItsNebula
    ItsNebula
    ✭✭✭✭✭
    Anazasi wrote: »
    Character names are essential to the game. However, the account @name should not be visible ever. With a player's @name they can "hack" your ESO account; either forums or actual account and retrieve vital personal information. Yes ZOS has several features in place to protect accounts but my concern is why are they allowing the most important aspect to visible? When in game my account name should be private or at the very least I should have the option to hide it from other players. The ignore list works until its filled up and then you have to delete to make more room to add more people. Yes players can change their @name from the account page, I think or they can spend crowns to change their character name but to actually stop players from harassing you requires you to change both. If my @name was not visible I would be better protected from players I don't want to associate with.

    The second point I want to make is the /tell /whisper feature. Ever since launch players have been able to send harassing messages to other players across factions in PVP. This should never have been allowed. In fact because players are able to do this it encourages harassment of all kinds. @ZOS has the responsibility protect players from this. Internet harassment across the globe has reached epidemic proportions. While I admit most players we encounter are not malicious, the potential exists because of the loopholes @ZOS has left open. In my 4 years of playing this game I can only imagine the number of players who have been reported for sending hate tells could have all been avoided only if ZOS had removed that ability entirely (of course this would only apply to PVP areas.) If by some chance the person wanted to send you a hate tell outside of PVP, well that would be a pretty clear case of intentional harassment and would be so much easier for ZOS to administer justice. I should point out that yes they can simply get on the same faction and use zone chat to accomplish the same thing, or send you tells if on the same faction but those too can be reported because the intent would be evident.

    At the very least @zos should add the option to turn off @name visibility and an option to turn off cross faction tells. To support this we have the option to turn off duel requests and we have the option to show character or @names, so why can't we have these options as well.

    I would also like to know while @ZOS has a clear TOS that actually uses the word harassment as a condition of violation how do they determine when harassment occurs? Is it only by reports? Is it by context? I have had the same player send messages daily for over 3 months. I have added them to the ignore list but they now send tells to other guild members. I have reported this person over 50 times and every day they are back doing the same things. Why doesn't ZOS take harassment seriously? Harassment is defined by Merriam-Webster as (1) to annoy persistently (2) to create an unpleasant or hostile situation for especially by uninvited and unwelcome verbal or physical conduct. Wikipedia defines harassment as actions covering a wide range of behaviors of an offensive nature. It is commonly understood as behavior that disturbs or upsets, and it is characteristically repetitive. We can also look at a general legal definition of harassment which states the act of systematic and/or continued unwanted and annoying actions of one party or a group, including threats and demands. If looking at all 3 sources of what defines harassment it should be clear that if the same person has been reported more than x times over a period of x days weeks or months and the still continue the same unwanted actions, something should be done.

    I want to be safe and enjoy the game like everyone else and @ZOS has an obligation to facilitate this. Asking the players to report it is the first step, but why is it allowed to continue?

    No.
    TLDR;
    Your account can NOT be "hacked" with just your @ name lmfao..
    Even if they had the Password, they still need your email for a verification code.
    And IF.. IF you get hacked, ZOS is pretty good at helping you get your account back, as long as you prove it wasnt your fault.
  • Akimbro
    Akimbro
    ✭✭✭✭
    You could always close your chat window and never use in-game chat
    ALACRITY Emperors united RIP
    LAST PRODIGIES World first SO clear RIP

    The last egg in the carton.
  • DaveMoeDee
    DaveMoeDee
    ✭✭✭✭✭
    ✭✭✭
    An unchangeable account name should definitely be visible. I don't care about the characters I play with, but I may want to avoid certain people. Perhaps they could make the viewable account name different from the username used at login, but that viewable name should be permanent like the current account name is.

    But even that is overkill. People use their email addresses to log into gmail, for example. That is far more sensitive and far more public. My corporate email account requires me to use my email address as a username to log on. This is not a problem. It seems backwards to demand even greater security for a game.

    What ZOS needs to add is two-factor authentication. That would be enough.

    Edit: actually, pretty sure there is some sort of 2-factor authentication already.
    Edited by DaveMoeDee on 2 August 2018 20:45
  • starkerealm
    starkerealm
    ✭✭✭✭✭
    ✭✭✭✭✭
    DaveMoeDee wrote: »
    An unchangeable account name should definitely be visible.

    Changing your account name is semi-trivial. I'm not sure on the exact procedure, but it can be changed, pretty much on a whim.
  • starkerealm
    starkerealm
    ✭✭✭✭✭
    ✭✭✭✭✭
    Valrien wrote: »
    Ohtimbar wrote: »
    Yes, this is an mmo but it's also a single player game at the same time.

    No, it's really not

    Did I end up The Division's boards again by mistake? :P
Sign In or Register to comment.