This, it's been out there for a while if people wanted to "steal" the info. Just say anything in /zone, or /yell, or /say, I click and ignore and there it is. I bet a bot could auto-farm @-names that way, putting people ignore all day. This isn't a major security breach.I don't mind people seeing my @name, since they could see it already if they block me.
SuraklinPrime wrote: »Just 'cos one gets enough annoying whispers without the game making it super easy for people to irritate....
tinythinker wrote: »This, it's been out there for a while if people wanted to "steal" the info. Just say anything in /zone, or /yell, or /say, I click and ignore and there it is. I bet a bot could auto-farm @-names that way, putting people ignore all day. This isn't a major security breach.I don't mind people seeing my @name, since they could see it already if they block me.
Lava_Croft wrote: »This is a useless complaint since it's already trivial to find out the @account names of players, especially when using add-ons.
Lava_Croft wrote: »This is a useless complaint since it's already trivial to find out the @account names of players, especially when using add-ons.
Lava_Croft wrote: »This is a useless complaint since it's already trivial to find out the @account names of players, especially when using add-ons.
SuraklinPrime wrote: »tinythinker wrote: »This, it's been out there for a while if people wanted to "steal" the info. Just say anything in /zone, or /yell, or /say, I click and ignore and there it is. I bet a bot could auto-farm @-names that way, putting people ignore all day. This isn't a major security breach.I don't mind people seeing my @name, since they could see it already if they block me.
No it isn't a major breach but it is still a breach - and lots of minor breaches add up to coming home one day and finding that someone has taken over your account and all your stuff is gone.
In a game where people spend considerable numbers of hours building up a character and account it is irresponsible for a gaming company to do anything that increases the risk of an account being compromised - more so since the introduction of crowns and the ability for someone to effectively spend 'real' money by gaining access to an account, plus the private information held on account pages that could also be compromised.
Many major companies have opened themselves to data breaches over recent years that have cost them reputation, customers and actual money - these very often come from a progression of seemingly minor security changes that build up to allow access rather than the Hollywood super-hacker trope we see so often.
Sorry to bang on but this is part of what I have to consider in my day job so I get rather frustrated when I see this sort of stuff happening here....
tinythinker wrote: »SuraklinPrime wrote: »tinythinker wrote: »This, it's been out there for a while if people wanted to "steal" the info. Just say anything in /zone, or /yell, or /say, I click and ignore and there it is. I bet a bot could auto-farm @-names that way, putting people ignore all day. This isn't a major security breach.I don't mind people seeing my @name, since they could see it already if they block me.
No it isn't a major breach but it is still a breach - and lots of minor breaches add up to coming home one day and finding that someone has taken over your account and all your stuff is gone.
In a game where people spend considerable numbers of hours building up a character and account it is irresponsible for a gaming company to do anything that increases the risk of an account being compromised - more so since the introduction of crowns and the ability for someone to effectively spend 'real' money by gaining access to an account, plus the private information held on account pages that could also be compromised.
Many major companies have opened themselves to data breaches over recent years that have cost them reputation, customers and actual money - these very often come from a progression of seemingly minor security changes that build up to allow access rather than the Hollywood super-hacker trope we see so often.
Sorry to bang on but this is part of what I have to consider in my day job so I get rather frustrated when I see this sort of stuff happening here....
It isn't increasing the risk, that's the point. Anyone who wanted to steal @ - names can do so much easier with existing options.
SuraklinPrime wrote: »tinythinker wrote: »SuraklinPrime wrote: »tinythinker wrote: »This, it's been out there for a while if people wanted to "steal" the info. Just say anything in /zone, or /yell, or /say, I click and ignore and there it is. I bet a bot could auto-farm @-names that way, putting people ignore all day. This isn't a major security breach.I don't mind people seeing my @name, since they could see it already if they block me.
No it isn't a major breach but it is still a breach - and lots of minor breaches add up to coming home one day and finding that someone has taken over your account and all your stuff is gone.
In a game where people spend considerable numbers of hours building up a character and account it is irresponsible for a gaming company to do anything that increases the risk of an account being compromised - more so since the introduction of crowns and the ability for someone to effectively spend 'real' money by gaining access to an account, plus the private information held on account pages that could also be compromised.
Many major companies have opened themselves to data breaches over recent years that have cost them reputation, customers and actual money - these very often come from a progression of seemingly minor security changes that build up to allow access rather than the Hollywood super-hacker trope we see so often.
Sorry to bang on but this is part of what I have to consider in my day job so I get rather frustrated when I see this sort of stuff happening here....
It isn't increasing the risk, that's the point. Anyone who wanted to steal @ - names can do so much easier with existing options.
The point is that you are mistaken because it is increasing the risk, right now unless i interact with you in the game in some way or have my forum name the same as my account name you can't do much to find it - you certainly can't get it merely by looking at me. Even if you want to use the interaction to fake report or something you at least have to make an effort and potentially act in a manner that at least would warn someone you had an unhealthy interest in them.
The earlier point about game tags doesn't stand either because whole your gamer tag may be open your login username will most often me something else like your email.
As I keep emphasizing this is not an end of the world type breach but it changes this information from being something you had to make some effort to get into being something that is freely displayed for all to see - in the security business that is generally deemed to be a bad thing.
SuraklinPrime wrote: »tinythinker wrote: »SuraklinPrime wrote: »tinythinker wrote: »This, it's been out there for a while if people wanted to "steal" the info. Just say anything in /zone, or /yell, or /say, I click and ignore and there it is. I bet a bot could auto-farm @-names that way, putting people ignore all day. This isn't a major security breach.I don't mind people seeing my @name, since they could see it already if they block me.
No it isn't a major breach but it is still a breach - and lots of minor breaches add up to coming home one day and finding that someone has taken over your account and all your stuff is gone.
In a game where people spend considerable numbers of hours building up a character and account it is irresponsible for a gaming company to do anything that increases the risk of an account being compromised - more so since the introduction of crowns and the ability for someone to effectively spend 'real' money by gaining access to an account, plus the private information held on account pages that could also be compromised.
Many major companies have opened themselves to data breaches over recent years that have cost them reputation, customers and actual money - these very often come from a progression of seemingly minor security changes that build up to allow access rather than the Hollywood super-hacker trope we see so often.
Sorry to bang on but this is part of what I have to consider in my day job so I get rather frustrated when I see this sort of stuff happening here....
It isn't increasing the risk, that's the point. Anyone who wanted to steal @ - names can do so much easier with existing options.
The point is that you are mistaken because it is increasing the risk, right now unless i interact with you in the game in some way or have my forum name the same as my account name you can't do much to find it - you certainly can't get it merely by looking at me. Even if you want to use the interaction to fake report or something you at least have to make an effort and potentially act in a manner that at least would warn someone you had an unhealthy interest in them.
The earlier point about game tags doesn't stand either because whole your gamer tag may be open your login username will most often me something else like your email.
As I keep emphasizing this is not an end of the world type breach but it changes this information from being something you had to make some effort to get into being something that is freely displayed for all to see - in the security business that is generally deemed to be a bad thing.
@SuraklinPrime Actually in gamepad mode you can get it by just looking at you. Since gamepad mode is just a port of console - it would should account name rather than gamertag.
SuraklinPrime wrote: »SuraklinPrime wrote: »tinythinker wrote: »SuraklinPrime wrote: »tinythinker wrote: »This, it's been out there for a while if people wanted to "steal" the info. Just say anything in /zone, or /yell, or /say, I click and ignore and there it is. I bet a bot could auto-farm @-names that way, putting people ignore all day. This isn't a major security breach.I don't mind people seeing my @name, since they could see it already if they block me.
No it isn't a major breach but it is still a breach - and lots of minor breaches add up to coming home one day and finding that someone has taken over your account and all your stuff is gone.
In a game where people spend considerable numbers of hours building up a character and account it is irresponsible for a gaming company to do anything that increases the risk of an account being compromised - more so since the introduction of crowns and the ability for someone to effectively spend 'real' money by gaining access to an account, plus the private information held on account pages that could also be compromised.
Many major companies have opened themselves to data breaches over recent years that have cost them reputation, customers and actual money - these very often come from a progression of seemingly minor security changes that build up to allow access rather than the Hollywood super-hacker trope we see so often.
Sorry to bang on but this is part of what I have to consider in my day job so I get rather frustrated when I see this sort of stuff happening here....
It isn't increasing the risk, that's the point. Anyone who wanted to steal @ - names can do so much easier with existing options.
The point is that you are mistaken because it is increasing the risk, right now unless i interact with you in the game in some way or have my forum name the same as my account name you can't do much to find it - you certainly can't get it merely by looking at me. Even if you want to use the interaction to fake report or something you at least have to make an effort and potentially act in a manner that at least would warn someone you had an unhealthy interest in them.
The earlier point about game tags doesn't stand either because whole your gamer tag may be open your login username will most often me something else like your email.
As I keep emphasizing this is not an end of the world type breach but it changes this information from being something you had to make some effort to get into being something that is freely displayed for all to see - in the security business that is generally deemed to be a bad thing.
@SuraklinPrime Actually in gamepad mode you can get it by just looking at you. Since gamepad mode is just a port of console - it would should account name rather than gamertag.
I know, and people seemed to dislike that quite a lot too
SuraklinPrime wrote: »SuraklinPrime wrote: »tinythinker wrote: »SuraklinPrime wrote: »tinythinker wrote: »This, it's been out there for a while if people wanted to "steal" the info. Just say anything in /zone, or /yell, or /say, I click and ignore and there it is. I bet a bot could auto-farm @-names that way, putting people ignore all day. This isn't a major security breach.I don't mind people seeing my @name, since they could see it already if they block me.
No it isn't a major breach but it is still a breach - and lots of minor breaches add up to coming home one day and finding that someone has taken over your account and all your stuff is gone.
In a game where people spend considerable numbers of hours building up a character and account it is irresponsible for a gaming company to do anything that increases the risk of an account being compromised - more so since the introduction of crowns and the ability for someone to effectively spend 'real' money by gaining access to an account, plus the private information held on account pages that could also be compromised.
Many major companies have opened themselves to data breaches over recent years that have cost them reputation, customers and actual money - these very often come from a progression of seemingly minor security changes that build up to allow access rather than the Hollywood super-hacker trope we see so often.
Sorry to bang on but this is part of what I have to consider in my day job so I get rather frustrated when I see this sort of stuff happening here....
It isn't increasing the risk, that's the point. Anyone who wanted to steal @ - names can do so much easier with existing options.
The point is that you are mistaken because it is increasing the risk, right now unless i interact with you in the game in some way or have my forum name the same as my account name you can't do much to find it - you certainly can't get it merely by looking at me. Even if you want to use the interaction to fake report or something you at least have to make an effort and potentially act in a manner that at least would warn someone you had an unhealthy interest in them.
The earlier point about game tags doesn't stand either because whole your gamer tag may be open your login username will most often me something else like your email.
As I keep emphasizing this is not an end of the world type breach but it changes this information from being something you had to make some effort to get into being something that is freely displayed for all to see - in the security business that is generally deemed to be a bad thing.
@SuraklinPrime Actually in gamepad mode you can get it by just looking at you. Since gamepad mode is just a port of console - it would should account name rather than gamertag.
I know, and people seemed to dislike that quite a lot too
If you already knew this why did you keep saying that you were a little bit protected if you just didn't interact with people? So, adding @names doesn't actually increase the risk at all, like so many people here are saying.