If you are not paranoiac, it doesn't means nobody is watching you.danreckerpreub18_ESO wrote: »Security holes like the above can also reveal passwords, credit card numbers, any information whatsoever (That you enter, at least) can be potentially revealed by a badly secured API. (It supposedly didn't, but that type of leak is possible)
Granted, this is a worst case type of scenario, but such things can, and have happened in the past.
The data in the API was not considered by ZOS as a security problem, and it still isn't because they understand the security measures they have taken to secure individual clients like registering the client computer via email code. The only way this is an issue is if a customer has the same email, user name, and password(s) across ESO and their email account. At that point, the API and use of the login name is definitely not the security vulnerability. ZOS removed the account name because of community outcry. The community's prerogative has afforded additional security on an already foolproof system. IA only goes so far and once your are spending more than the data is worth then IA becomes burdensome and intrusive: exhibit A, broken API/Addons that relied on the login name.danreckerpreub18_ESO wrote: »Security holes like the above can also reveal passwords, credit card numbers, any information whatsoever (That you enter, at least) can be potentially revealed by a badly secured API. (It supposedly didn't, but that type of leak is possible)
If you are not paranoiac, it doesn't means nobody is watching you.danreckerpreub18_ESO wrote: »Security holes like the above can also reveal passwords, credit card numbers, any information whatsoever (That you enter, at least) can be potentially revealed by a badly secured API. (It supposedly didn't, but that type of leak is possible)
Granted, this is a worst case type of scenario, but such things can, and have happened in the past.
OK, apparently you didn't read his post. And yet of course you decided to respond to it without understanding anything of what he was saying. He wasn't concerned that addons would steal his account name from the settings he was concerned that the API was exposing it so that other people with the right addons could get it in-game. I guess I'm ashamed of myself because I actually understood what he was talking about and you didn't. Boy, that sure is a reason for me to be ashamed. There's no way that you making yourself look stupid would be a reason for you to be ashamed. But OK, on the basis that you completely misunderstood what he was talking about I can now understand why you said what you did. It was the right answer to a completely different issue, and the completely wrong answer to what he was talking about. But at least now I understand why you would have said that. If he had actually been talking about his own addons getting the info from the settings, then what you said would have made sense.So then how are you going to stop people from getting that info by just not installing addons? Oh, I see, you're admitting that it was a dumb thing for you to say. When you say "Damn..." what you're really saying is "Damn... I shouldn't have told that guy that if he's worried about people being able to get his account name then the solution is to simply not use any addons."
Did you read previous post? Man afraid what some addons will steal his account name from settings.
Learn to read, but now - you are ashamed yourself.
|
Caius Drusus Imperial DK (DC) Bragg Ironhand Orc Temp (DC) Neesha Stalks-Shadows Argonian NB (EP) Falidir Altmer Sorcr (AD) J'zharka Khajiit NB (AD) |
Isabeau Runeseer Breton Sorc (DC) Fevassa Dunmer DK (EP) Manut Redguard Temp (AD) Tylera the Summoner Altmer Sorc (EP) Svari Snake-Blood Nord DK (AD) |
Ashlyn D'Elyse Breton NB (EP) Filindria Bosmer Temp (DC) Vigbjorn the Wanderer Nord Warden (EP) Hrokki Winterborn Breton Warden (DC) Basks-in-the-Sunshine Argonian Temp |
If there wasn't API for addons I wouldn't bought this game. And not only me.54 addons? wow lol. imo the base ui is fine, but it's a matter of opinion, some want more from it some less, thats why the addons are allowed, less work for them. don't know if it was a good idea, but its what they went with.
Even without API, right?Sandmanninja wrote: »EVERY MMO I've ever played has turned off add-ons after a major patch.
LOL!danreckerpreub18_ESO wrote: »Have a scenario.
Unscrupulous mod author discovers a way to access player account names and credit card numbers.
mod author collects player account names and credit card numbers
mod author sells this information on the open market
Even didn't care to translate this wall_of_cry, but continue bumping this thread, please!blah-blah
Even without API, right?Sandmanninja wrote: »EVERY MMO I've ever played has turned off add-ons after a major patch.
Here, I can translate yours: "Oh crap, he's right - I totally didn't understand what that guy was talking about and made myself look like an idiot! There's no way for me to save face, so I'll just pretend that it never happened!"
|
Caius Drusus Imperial DK (DC) Bragg Ironhand Orc Temp (DC) Neesha Stalks-Shadows Argonian NB (EP) Falidir Altmer Sorcr (AD) J'zharka Khajiit NB (AD) |
Isabeau Runeseer Breton Sorc (DC) Fevassa Dunmer DK (EP) Manut Redguard Temp (AD) Tylera the Summoner Altmer Sorc (EP) Svari Snake-Blood Nord DK (AD) |
Ashlyn D'Elyse Breton NB (EP) Filindria Bosmer Temp (DC) Vigbjorn the Wanderer Nord Warden (EP) Hrokki Winterborn Breton Warden (DC) Basks-in-the-Sunshine Argonian Temp |
lol you just can't admit that you were wrong. It's pretty sad.
|
Caius Drusus Imperial DK (DC) Bragg Ironhand Orc Temp (DC) Neesha Stalks-Shadows Argonian NB (EP) Falidir Altmer Sorcr (AD) J'zharka Khajiit NB (AD) |
Isabeau Runeseer Breton Sorc (DC) Fevassa Dunmer DK (EP) Manut Redguard Temp (AD) Tylera the Summoner Altmer Sorc (EP) Svari Snake-Blood Nord DK (AD) |
Ashlyn D'Elyse Breton NB (EP) Filindria Bosmer Temp (DC) Vigbjorn the Wanderer Nord Warden (EP) Hrokki Winterborn Breton Warden (DC) Basks-in-the-Sunshine Argonian Temp |
Where in game you have CC info? Care to find or?
Also, someone must install this suspicious addon before, so this addon must be helpful to anyone!
This is absolutely paranoiac scenario! Far better to drop some keylogger on your comp while you are at your favorite ***-site ^^
And API do not contains any private info! ><
This is the same as wild jungle tribes afraid of phones or something very usual (for us) stuff - and you afraid of API.
If there wasn't API for addons I wouldn't bought this game. And not only me.54 addons? wow lol. imo the base ui is fine, but it's a matter of opinion, some want more from it some less, thats why the addons are allowed, less work for them. don't know if it was a good idea, but its what they went with.
Because, my MMO experience allow me to say: very few game-designers can create very usable UI. And most of them are victims of huge army of sh*t-eaters, who are happy with their crazy default UI and protect games from some logical changes
danreckerpreub18_ESO wrote: »Sure, I can do that. If you log into your account management with the same information that you use to log into the game, and this occurs via how the system was set up... Then the database that checks your password / account name is linked. if you also use a credit card to PAY for the game, then that information is most likely stored in the same place.
Depending on how secure it is, an API that can already access your account name may also have access to your password and credit card. A player would not have to install the mod at all, they would just need to be close enough to another player WITH that mod in order for their information to be stolen. The person with the mod would be capable of seeing this information about someone running a completely default UI.
Afraid of API...? I use API's on a daily basis as part of my job. I'm only sharing what i've seen happen.
Dunno
Borrower&Lender, SoftcapInfo (the two to rule them all, others are just more or less cosmetic) and FTC seem to be all right, haven't tested others yet (skyshards, lorebooks, etc), but if this patch tried to mess up bots again by shaking the map, then all those pointers are a bit off again, just like in 1.1.2
but BatmanStoreFilter is out completely (causes UI error and so ESO shuts it down when you login, showing you just a big error screen) and Advanced Filters stopped filtering some categories (e.g. enchanting category among materials won't show anything and is greyed out, even if there are runes in that inventory/bank)
I'm sure those people will fix their addons as soon as they are able.
I'm blaming for not documented changes!As for the OP - blaming ZoS for add-on developers not updating yet (note, not I'm blaming the add-on creators at all, its just the way of thigs after a content patch)? I seriously think that is the most childish, asinine thing I've seen this week on these forums...and that's saying a lot. Would it also be ZoS's fault if one of those add-on developers stopped supporting their add-on, Would he expect ZoS to somehow keep it updated for him?
OP - Here's an idea, how about YOU go and learn the API yourself, make your own add-ons and stop being a lazy, entitled brat.
Come on, it's obvious it's not his native language. There are a lot of things you can very legitimately criticize him for, but this isn't one of them. For someone whose native language isn't English, his English isn't bad.Thanks for ruins the English language.
|
Caius Drusus Imperial DK (DC) Bragg Ironhand Orc Temp (DC) Neesha Stalks-Shadows Argonian NB (EP) Falidir Altmer Sorcr (AD) J'zharka Khajiit NB (AD) |
Isabeau Runeseer Breton Sorc (DC) Fevassa Dunmer DK (EP) Manut Redguard Temp (AD) Tylera the Summoner Altmer Sorc (EP) Svari Snake-Blood Nord DK (AD) |
Ashlyn D'Elyse Breton NB (EP) Filindria Bosmer Temp (DC) Vigbjorn the Wanderer Nord Warden (EP) Hrokki Winterborn Breton Warden (DC) Basks-in-the-Sunshine Argonian Temp |
danreckerpreub18_ESO wrote: »Sure, I can do that. If you log into your account management with the same information that you use to log into the game, and this occurs via how the system was set up... Then the database that checks your password / account name is linked. if you also use a credit card to PAY for the game, then that information is most likely stored in the same place.
Depending on how secure it is, an API that can already access your account name may also have access to your password and credit card. A player would not have to install the mod at all, they would just need to be close enough to another player WITH that mod in order for their information to be stolen. The person with the mod would be capable of seeing this information about someone running a completely default UI.
Afraid of API...? I use API's on a daily basis as part of my job. I'm only sharing what i've seen happen.
Do you understand what addons NOT working until you login at one of characters?
As I've said before: some keylogger or trojan from pron-site is faaaar more realistic
This game needs crutches - am I read you right?Crutches. When you use them too long, you get stuck with them
You definitely won't get any argument from me on that...
No, but his irrefutable lack of common sense and courtesy is beyond blinding. Nothing more than a troll at this point. He's been helped yet feels necessary to press forum member's buttons.
|
Caius Drusus Imperial DK (DC) Bragg Ironhand Orc Temp (DC) Neesha Stalks-Shadows Argonian NB (EP) Falidir Altmer Sorcr (AD) J'zharka Khajiit NB (AD) |
Isabeau Runeseer Breton Sorc (DC) Fevassa Dunmer DK (EP) Manut Redguard Temp (AD) Tylera the Summoner Altmer Sorc (EP) Svari Snake-Blood Nord DK (AD) |
Ashlyn D'Elyse Breton NB (EP) Filindria Bosmer Temp (DC) Vigbjorn the Wanderer Nord Warden (EP) Hrokki Winterborn Breton Warden (DC) Basks-in-the-Sunshine Argonian Temp |
I'm blaming for not documented changes!As for the OP - blaming ZoS for add-on developers not updating yet (note, not I'm blaming the add-on creators at all, its just the way of thigs after a content patch)? I seriously think that is the most childish, asinine thing I've seen this week on these forums...and that's saying a lot. Would it also be ZoS's fault if one of those add-on developers stopped supporting their add-on, Would he expect ZoS to somehow keep it updated for him?
OP - Here's an idea, how about YOU go and learn the API yourself, make your own add-ons and stop being a lazy, entitled brat.
About your "idea": why not you do this?