Maintenance for the week of February 23:
· [COMPLETE] NA megaservers for maintenance – February 23, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
· [COMPLETE] EU megaservers for maintenance – February 23, 9:00 UTC (4:00AM EST) - 17:00 UTC (12:00PM EST)
· [COMPLETE] ESO Store and Account System for maintenance – February 23, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
The maintenance is complete, and the PTS is now available.

Displaying Account Names Could Lead to More Hacks

stevepdodson_ESO888
stevepdodson_ESO888
✭✭✭✭✭
ZoS choosing to display user account names in game could lead to more people getting their accounts hacked.
How does the community feel about this?

I realise we are not yet at the point of giving away our passwords, but this just removes at least one level of security.

How many times are you warned by banks/businesses not to disclose your account name (and obviously password)?

Zos...if you read this are you prepared for the backlash when people get their accounts hacked? There may even be a legal case brewing here.
Please reconsider this before it is too late.
  • AtAfternoon
    AtAfternoon
    ✭✭✭
    You can already see someone's name by plugging in an xbox controller. I personally don't care one way or another.
  • Nifty2g
    Nifty2g
    ✭✭✭✭✭
    ✭✭✭✭✭
    ZoS choosing to display user account names in game could lead to more people getting their accounts hacked.
    How does the community feel about this?

    I realise we are not yet at the point of giving away our passwords, but this just removes at least one level of security.

    How many times are you warned by banks/businesses not to disclose your account name (and obviously password)?

    Zos...if you read this are you prepared for the backlash when people get their accounts hacked? There may even be a legal case brewing here.
    Please reconsider this before it is too late.
    A bank account and an ESO account are completely different...

    You can already find out someones @name in ESO pretty easily, so why is it an issue

    And furthermore, you can see your @name in all of the guilds you are in
    Edited by Nifty2g on May 9, 2016 9:57AM
    #MOREORBS
  • Steel_Brightblade
    Steel_Brightblade
    ✭✭✭✭
    Although I would like to know if I can get some sort of compensation from zos for the amount of spam crap I now get through my xbox live account, of which until I bought eso and it proudly displayed my xbox gamertag to the world, I had exactly 0.
  • Mettaricana
    Mettaricana
    ✭✭✭✭✭
    ✭✭✭
    I always liked the log in user name that's not ur email and having a nick name ingame that's people can find you by never got hacked on games that did that
  • Sharee
    Sharee
    ✭✭✭✭✭
    ✭✭✭✭✭
    Nifty2g wrote: »
    You can already find out someones @name in ESO pretty easily, so why is it an issue

    To elaborate on the above, all you currently have to do is type "/ignore <charactername>" and the UI will reply with "now ignoring <@username&gt;".
    Edited by Sharee on May 9, 2016 12:42PM
  • Valrien
    Valrien
    ✭✭✭✭✭
    ✭✭✭
    Now all they need is your password
    and your email address
    and your email password (and to find that they'll need either your backup email or your phone number.)

    Much hax, many wow.
    Valrien Dravic -- Level 50 Dunmeri Sorcerer (EP)
    Garahel Dravic -- Level 50 Bosmeri Nightblade (EP)
    Tamriel Unlimited was a mistake. One Tamriel was a bigger mistake
  • Elsonso
    Elsonso
    ✭✭✭✭✭
    ✭✭✭✭✭
    ZoS choosing to display user account names in game could lead to more people getting their accounts hacked.
    How does the community feel about this?

    I realise we are not yet at the point of giving away our passwords, but this just removes at least one level of security.

    How many times are you warned by banks/businesses not to disclose your account name (and obviously password)?

    If someone is quaking in their boots because suddenly everyone will see account names, and someone might guess that their account password is "abc123", "letmein", or one of 10000 other common passwords, it is time to change the password and learn about passwords.

    Your account should be no less secure with everyone knowing your account name, than with no one knowing your account name. If you feel differently about your account, that could be a sign that it is time to change your password and learn about picking good passwords.

    I am not in favor of suggestions and policies that advocate hiding account names because I believe it causes a false sense of security.

    Learn to make a good secure password , and learn how to keep your passwords secure. Once you do this, the biggest threat to your account is probably ZOS, definitely not visible account names. We hope that they have the intrusion protection policies in place that will prevent, or at least detect, that account information has been stolen.
    • Don’t reuse passwords
    • Don’t use weak passwords
    • Don’t share your passwords
    • Do use a password manager
    • Do keep your system free of viruses and malware
    XBox EU/NA:@ElsonsoJannus
    PC NA/EU: @Elsonso
    PSN NA/EU: @ElsonsoJannus
    Total in-game hours: 11321
    X/Twitter: ElsonsoJannus
  • emily3989
    emily3989
    ✭✭✭✭✭
    This is dumb. Everytime I say something in any chat my account name appears now anyways.
    Thasi - V16 Magblade Vampire PC/NA
  • Abeille
    Abeille
    ✭✭✭✭✭
    ✭✭✭✭✭
    Anyone that blocks you can see your account name.

    Displaying account names do lead to more clutter on my screen though, and I want that ugliness out.
    Just so that everyone knows, my Altmer still can't have black hair. About a dozen of Altmer NPCs in the game have black hair. Just saying.

    Meet my characters:
    Command: Do the thing.

    Zadarri, Khajiit Fist of Thalmor: The thing was done, as commanded.
    Durza gra-Maghul, Orc blacksmith: The thing was done perfectly, in the most efficient way.
    Tegwen, Bosmer troublemaker: You can't prove I didn't do the thing.
    Sings-Many-Songs, Argonian fisher: Sure, I'll do the thing... Eventually. Maybe.
    Aerindel, Altmer stormcaller: After extensive research, I've come to the conclusion that doing the thing would be a waste of resources.
    Liliel, Dunmer pyromancer: Aerindel said I shouldn't do the thing. Something about "resources".
    Gyda Snowcaller, Nord cryomancer: I will find a way to do it that won't waste resources and make Aerindel proud of me.
    Beatrice Leoriane, Breton vampire: I persuaded someone else into doing the thing. You are welcome, dear.
    Sahima, Redguard performer: Doing the thing sounds awfully unpleasant and really not my problem.
    Ellaria Valerius, Imperial priestess: I'll pray to the Eight for the thing to be done, if it is Their will.
  • dsalter
    dsalter
    ✭✭✭✭✭
    ✭✭
    ZoS choosing to display user account names in game could lead to more people getting their accounts hacked.
    How does the community feel about this?

    I realise we are not yet at the point of giving away our passwords, but this just removes at least one level of security.

    How many times are you warned by banks/businesses not to disclose your account name (and obviously password)?

    Zos...if you read this are you prepared for the backlash when people get their accounts hacked? There may even be a legal case brewing here.
    Please reconsider this before it is too late.

    i know that blizzard bypasses this risk by using authenticators
    PLEASE REPLY TO ME WITH @dsalter otherwise i'm likely to miss the reply if its not my own thread

    EU - [Arch Mage Dave] Altmer Sorcerer
    Fight back at the crates and boxes, together we can change things.

  • wayfarerx
    wayfarerx
    ✭✭✭✭✭
    ✭✭✭
    Seriously, for anyone thinking this is a real problem security wise, it's not. As many other posters have said, reveling account IDs is already possible. Account IDs were never meant to be secret and ESO's authentication system in no way expects them to be.

    To expand on another post, here are a few more things you can do to keep your account secure:
    • Don’t reuse passwords
    • Don’t use weak passwords
    • Don’t share your passwords
    • Do use a password manager
    • Do keep your system free of viruses and malware
    • When you use a password manager, use it to generate long random passwords, 20+ characters if the service supports it.
    • Use 2-factor authentication on your main email account. Not only will this protect your ESO account, but other important stuff like your bank account as well.
    @wayfarerx - PC / North America / Aldmeri Dominion
  • Uriel_Nocturne
    Uriel_Nocturne
    ✭✭✭✭✭
    ✭✭
    Although I would like to know if I can get some sort of compensation from zos for the amount of spam crap I now get through my xbox live account, of which until I bought eso and it proudly displayed my xbox gamertag to the world, I had exactly 0.
    So... you've never played another game on Live that showed your Gamer Tag? O.o

    ESO is hardly the first game to show your GT to the world.

    The fact that you're getting spam messages now is probably a complete coincidence because every single game on Xbox Live has always shown your Gamer Tag to every single person playing the same game on the same server.


    twitch.tv/vampire_nox
    PAWS (Positively Against Wrip-off Stuff) - Say no to Crown Crates!


  • Lucius_Aelius
    Lucius_Aelius
    ✭✭✭✭
    Honestly I can't understand why so many people are bothered by this, if it's about security then just gave a good password and you're all set, my password has a mixture of uppercase and lowercase letters as well as a mixture of letters and numbers, and I've never been hacked despite playing for years on the Xbox with my Gamertag on full display.

    If it's about privacy and you just not wanting people to see your account name even though it's not embarrassing or your real name, then I question why you'd even be playing games in the first place, that's just a necessary part of gaming. If you are embarrassed by a silly name or you used a name that could identify you in real life, then you should be allowed to change it for free and without hassle before this change goes live if you want to.

    If you're a role-player and don't like the idea that people will call you as something other than your character name, that at least I understand, but having people being identifiable across characters is important and most people don't role-play, so you just have to suck it up and deal. The people you play with regularly can be told of your preference and abide by it, and that's really all you can expect from other people who are not in on your role-playing. Expecting everyone you play with to call you by your character's names is like me going around calling myself Zeus The Almighty in real life and demanding everyone else do the same, they're not in on my role-playing and it's preposterous for me to expect them to act otherwise.

    And ultimately there's already the ability to see account names in the live game right now (albeit less easily), so for that reason as much as anything there's really not much of an actual argument to be made against this change. I respect that other people have preferences different than my own and ideally those preferences should be respected as much as possible, but when people's preferences are in conflict then the majority preference has to be catered to, that's just life. And it does seem to be only a vocal minority who are opposed to this so I'm genuinely sorry but this seems to be the way it's going, and most people are generally okay with it (or at least their criticism is limited to the aesthetics of the nameplates rather than the display name issue).
    Edited by Lucius_Aelius on May 9, 2016 3:25PM
    Daggerfall Covenant - Scourge (Xbox NA) - GT: Lucius Aelius - Lord - 648CP
    Lucius Aelius Aurelius - 50 Imperial Dragonknight - Centurion - Stam Tank
    Lucius Aelius Valerius - 50 Imperial Templar - Lieutenant - Mag Heal/DPS
    Lucius Aelius Regulus - 50 Imperial Nightblade - First Sergeant - Stam DPS
    Lucius Aelius Augustus - 50 Imperial Sorcerer - Corporal - Mag DPS
    Wags-His-Tail - 20 Argonian Sorcerer - Recruit - TBD
    Holds-The-Line - 40 Argonian Dragonknight - Recruit - TBD
    Carries-Extra-Gear - 4 Argonian Dragonknight - Recruit - TBD
    Guildmaster - Wardens of the Covenant
    Group Leader - xpThe Guildxp
    Trader - Secret Sauce
    Trader - Elite Dungeoneers
  • cdobratz
    cdobratz
    ✭✭✭
    By posting on the forums, are you not giving the same information that you are afraid of other players seeing in game?
    NA-PC
    Calamity Ganon - DC Magic Sorc
    Escape Velocity - DC Stam NB
    Bears Beets Battlestár - DC Stamplar
    Bears Beets Battlestar - DC Stam DK
    Dr. John Dorian - DC Magic DK
    Kojima's Revenge - EP Magic Sorc
    dafack - AD Magic NB
  • dsalter
    dsalter
    ✭✭✭✭✭
    ✭✭
    cdobratz wrote: »
    By posting on the forums, are you not giving the same information that you are afraid of other players seeing in game?

    unlikely, not everyone used their same account name :)
    PLEASE REPLY TO ME WITH @dsalter otherwise i'm likely to miss the reply if its not my own thread

    EU - [Arch Mage Dave] Altmer Sorcerer
    Fight back at the crates and boxes, together we can change things.

  • Dreyloch
    Dreyloch
    ✭✭✭✭✭
    ZoS choosing to display user account names in game could lead to more people getting their accounts hacked.
    How does the community feel about this?

    I realise we are not yet at the point of giving away our passwords, but this just removes at least one level of security.

    How many times are you warned by banks/businesses not to disclose your account name (and obviously password)?

    Zos...if you read this are you prepared for the backlash when people get their accounts hacked? There may even be a legal case brewing here.
    Please reconsider this before it is too late.

    If it hasn't been said already, there is a simple solution to keep your account safe. Make sure your E-mail password and account password are totally different.I learned this the hard way when my account got hacked in another game and that company flat our refused to restore any items.

    ZoS' system will recognize if your logging in from a different IP. Therefore it will send an email linked with your account asking for verification. The email has an RNG number string to input while your logging in. So unless the hacker has your email password too...then it's pretty unlikely they will get into your account.
    "The fear of Death, is often worse than death itself"
Sign In or Register to comment.