MornaBaine wrote: »

This is one of those things that helps keep people accountable. If you're acting like a jerk to someone on one character, you can't just switch to another and have that person now not know who you are. Hopefully it makes people think about their behavior.

By the same token, however, a player who has acted the jerk towards one of your characters is now able to do so towards all your characters. I think that disadvantage cancels out what you see as an advantage!

Betheny wrote: »

Abeille wrote: »

If someone has/knows an addon that hides other people's @names, please speak up.

@Abeille - I found an addon for the target frame that will hide account names - RP Target Frame

Thanks! I'm adding it to my game!

Char name is what you want to broadcast during a play session. Makes creating a cool char name inconsequential, don't even need to have ingame name lol

Tavore1138 wrote: »

Enodoc wrote: »

For anybody complaining about a security issue, that's your problem, not ZOS's. It clearly says on account creation that it is a public name:

Choose a UserID for your account. Your UserID is a nickname that will be displayed to others on the The Elder Scrolls® Online: Tamriel Unlimited™ forums and in-game.

Fairly sure that was updated when it changed from ESO to TU when console released and console players saw @name by default, so those signing up at the beginning would not have had that in our TOS and ZOS did not exactly make a point of the change in words.

It doesn't matter if that was a new addition with the TU changeover or not.

You still had to agree to the updated ToS upon firing up the game after the TU change, so you were still made sufficiently aware that this was/is public information.

And there was still no increase or spike in account hacks/thefts, so what's the issue?

I don't care what ZOS changed in the TOS... I did NOT sign up for an RPG where players are forced to role-play as "BobJones95872" or "SoccerMom69" or whatever.

ZOS needs to quit trying to force console culture on PC players. I don't want it, and I bet a lot of other players don't want it either!

Betheny wrote: »

@Abeille - I found an addon for the target frame that will hide account names - RP Target Frame

Thank you so much for this one!

What a relief! If only I could hide my own ID as well...

lordrichter wrote: »

InvitationNotFound wrote: »

showing account names isn't considered good practice anywhere at all and shouldn't be done.

Actually, it is quite common and is routine, normal, and expected practice all over the place. Many places on the internet don't even bother to hide account names, and when they do it is frequently not for security but for "personalization" or to hide an email address that is used for an account name. It is this personalization that I think ESO PC/Mac needs, but I can certainly understand if they don't do it. It actually matters more to ZOS than it does to the player.

ZOS seems more than secure enough with how they handle security with ESO. The visibility of your ESO account name should be the least of your security concerns.

just because something is common at the places you frequently visit doesn't mean it should be like that and isn't a security issue at all (of course it's far away from critical). just because some companies don't give a s*** doesn't mean its okay. if you'd have visited the site i've linked before you would clearly see it is considered as a vulnerability (owasp = open web application security project - it's actually something everyone in the it-security industry knows and can be considered a good reference).

your bold text is pretty cute and can only come from someone without any IT (security) background. every company has vulnerabilities in their software, infrastructure and so forth (e.g. every month you get security updates for your os, if it's windows (others get as well, but i don't know how their patch cycles are). same to browsers and so forth). using the account name just shows that they have chosen a bad design. and there is absolutely no reason to defend this at all.

furthermore, i don't think that you have to tell me what my security concerns should be. wherever i'm able to make my own decisions i'll do them with security in mind. unfortunately, in such cases i can't because someone thought this would be a good idea. it isn't. but i agree chances are great there are worse vulnerabilities, we currently aren't aware of.

anyway, i think it's appropriate to mention such deficits and discuss them. it will be accepted as what it is and no changes will ever come to this. therefore it isn't even an issue to post these things here. in case of more sever issues i'd again contact an employee directly.

the "personalization" is exactly what i've meant with last name or nick name if i get you right. that would be proper approach for this. but i guess it won't be ever changed.

InvitationNotFound wrote: »

lordrichter wrote: »

InvitationNotFound wrote: »

showing account names isn't considered good practice anywhere at all and shouldn't be done.

Actually, it is quite common and is routine, normal, and expected practice all over the place. Many places on the internet don't even bother to hide account names, and when they do it is frequently not for security but for "personalization" or to hide an email address that is used for an account name. It is this personalization that I think ESO PC/Mac needs, but I can certainly understand if they don't do it. It actually matters more to ZOS than it does to the player.

ZOS seems more than secure enough with how they handle security with ESO. The visibility of your ESO account name should be the least of your security concerns.

just because something is common at the places you frequently visit doesn't mean it should be like that and isn't a security issue at all (of course it's far away from critical). just because some companies don't give a s*** doesn't mean its okay. if you'd have visited the site i've linked before you would clearly see it is considered as a vulnerability (owasp = open web application security project - it's actually something everyone in the it-security industry knows and can be considered a good reference).

your bold text is pretty cute and can only come from someone without any IT (security) background. every company has vulnerabilities in their software, infrastructure and so forth (e.g. every month you get security updates for your os, if it's windows (others get as well, but i don't know how their patch cycles are). same to browsers and so forth). using the account name just shows that they have chosen a bad design. and there is absolutely no reason to defend this at all.

furthermore, i don't think that you have to tell me what my security concerns should be. wherever i'm able to make my own decisions i'll do them with security in mind. unfortunately, in such cases i can't because someone thought this would be a good idea. it isn't. but i agree chances are great there are worse vulnerabilities, we currently aren't aware of.

anyway, i think it's appropriate to mention such deficits and discuss them. it will be accepted as what it is and no changes will ever come to this. therefore it isn't even an issue to post these things here. in case of more sever issues i'd again contact an employee directly.

the "personalization" is exactly what i've meant with last name or nick name if i get you right. that would be proper approach for this. but i guess it won't be ever changed.

Then you should probably quit playing any MMO on the market, as they all have very easy ways to get someone's @name, if they even hide it at all.

Abeille wrote: »

If someone has/knows an addon that hides other people's @names, please speak up.

Go into the settings>interface if you want to hide other peoples @names. Litterally takes 20 seconds to find.

I have no problem at all with other people seeing my account name, but it does bother me to see it on others because it clutters the screen and also, to be honest, just looks stupid a majority of the time. A lot of players have obviously taken time to come up with suited character names, and to have @Mike6995 added on really wrecks that. They should just give us a toggle so that we don't have to see it if we don't want to.

I'm glad there is an addon out there now to change this but seriously, we should not need to use an addon for this. They should have an option for us to choose what we want to see.

Uriel_Nocturne wrote: »

InvitationNotFound wrote: »

lordrichter wrote: »

InvitationNotFound wrote: »

showing account names isn't considered good practice anywhere at all and shouldn't be done.

Actually, it is quite common and is routine, normal, and expected practice all over the place. Many places on the internet don't even bother to hide account names, and when they do it is frequently not for security but for "personalization" or to hide an email address that is used for an account name. It is this personalization that I think ESO PC/Mac needs, but I can certainly understand if they don't do it. It actually matters more to ZOS than it does to the player.

ZOS seems more than secure enough with how they handle security with ESO. The visibility of your ESO account name should be the least of your security concerns.

just because something is common at the places you frequently visit doesn't mean it should be like that and isn't a security issue at all (of course it's far away from critical). just because some companies don't give a s*** doesn't mean its okay. if you'd have visited the site i've linked before you would clearly see it is considered as a vulnerability (owasp = open web application security project - it's actually something everyone in the it-security industry knows and can be considered a good reference).

your bold text is pretty cute and can only come from someone without any IT (security) background. every company has vulnerabilities in their software, infrastructure and so forth (e.g. every month you get security updates for your os, if it's windows (others get as well, but i don't know how their patch cycles are). same to browsers and so forth). using the account name just shows that they have chosen a bad design. and there is absolutely no reason to defend this at all.

furthermore, i don't think that you have to tell me what my security concerns should be. wherever i'm able to make my own decisions i'll do them with security in mind. unfortunately, in such cases i can't because someone thought this would be a good idea. it isn't. but i agree chances are great there are worse vulnerabilities, we currently aren't aware of.

anyway, i think it's appropriate to mention such deficits and discuss them. it will be accepted as what it is and no changes will ever come to this. therefore it isn't even an issue to post these things here. in case of more sever issues i'd again contact an employee directly.

the "personalization" is exactly what i've meant with last name or nick name if i get you right. that would be proper approach for this. but i guess it won't be ever changed.

Then you should probably quit playing any MMO on the market, as they all have very easy ways to get someone's @name, if they even hide it at all.

first mmo that does so far, at least for me (edited: at least for me).

besides i never said it's a critical issue or it has to be immediately addressed. i simply said it's a vulnerability and bad design, which it is. despite some white knights defending ever piece of **** they are being served.

I mean this whole discussion is completely stupid. there shouldn't be a discussion at all about what it is. it is a fact, you know science, technology and knowledge and all that fancy stuff. I've already provided a link. you will find this in every web application security book (related to information disclosure / user enumeration). there is nothing to discuss here. comments defending respectively denying this simply reads like this: "i can turn my pc on. i'm so smart i've already open a command prompt and wrote ipconfig. i know everything about pc and security. this here isn't a problem at all because i don't care"... people without the slightest clue arguing about what they believe.

edit #2: typo

Uriel_Nocturne wrote: »

Betheny wrote: »

Uriel_Nocturne wrote: »

Then you should probably quit playing any MMO on the market, as they all have very easy ways to get someone's @name, if they even hide it at all.

I've never had my login name exposed to other players in an MMO before (until this game). You must have been playing some pretty low grade games, ones I've never heard of.

ZOS made a bad design choice with giving our login names away, and most likely because they only had experience with singleplayer games and had no idea how it should be done, and are now refusing to back away from the choice (instead they're choosing to highlight just how awful their initial choice is)...and this is made so easier with people rolling onto their backs and peeing on themselves to show their complete submission.

In every major MMO on the market, it literally takes less than ten seconds to get someone's account name.

I've played MMO's since the beginning, and play most of the major ones out right now.

There is literally no effort needed to find someone's account name in any of those games. It took far less than ten seconds to get it before the DB update.

There have been no blitzkrieg's of accounts being stolen, before or after this change. And next to none from other major MMO's which take as-much effort to find someone's account name.

This doesn't take into account any actual hackings (not counting those millennials who think a DDoS is an actual "hack", but I'm talking about people who actually can hack game servers) where they hack past security and into account servers. Those incidents are few, far between, and ultimately very rare occurrences.

No... your accounts are no more at risk than they were before the DB update.

All the ire right now is nothing more than knee-jerk paranoia. Simple.

*sighs*
how about reading my comments completely? I've said the whole time it is a general issue and hasn't anything to with the names displayed over their head. but congrats, you wrote something completely out of context which is correct. but i never wrote that.

wow, you play mmos since the beginning? now you must be an expert. well, i started with uo in the last century (sounds great, doesn't it) but who the f*** cares? does this add anything to the subject or just because someone plays games all day long makes him now a security expert?

and again. it's a simple post about your believes based on your gaming experience. oh my god, this is so f*** up. I feel a bit sorry but at this point but i'm simply going to ignore you in the future as i assume you're simply trolling.

InvitationNotFound wrote: »

Uriel_Nocturne wrote: »

Betheny wrote: »

Uriel_Nocturne wrote: »

Then you should probably quit playing any MMO on the market, as they all have very easy ways to get someone's @name, if they even hide it at all.

I've never had my login name exposed to other players in an MMO before (until this game). You must have been playing some pretty low grade games, ones I've never heard of.

ZOS made a bad design choice with giving our login names away, and most likely because they only had experience with singleplayer games and had no idea how it should be done, and are now refusing to back away from the choice (instead they're choosing to highlight just how awful their initial choice is)...and this is made so easier with people rolling onto their backs and peeing on themselves to show their complete submission.

In every major MMO on the market, it literally takes less than ten seconds to get someone's account name.

I've played MMO's since the beginning, and play most of the major ones out right now.

There is literally no effort needed to find someone's account name in any of those games. It took far less than ten seconds to get it before the DB update.

There have been no blitzkrieg's of accounts being stolen, before or after this change. And next to none from other major MMO's which take as-much effort to find someone's account name.

This doesn't take into account any actual hackings (not counting those millennials who think a DDoS is an actual "hack", but I'm talking about people who actually can hack game servers) where they hack past security and into account servers. Those incidents are few, far between, and ultimately very rare occurrences.

No... your accounts are no more at risk than they were before the DB update.

All the ire right now is nothing more than knee-jerk paranoia. Simple.

*sighs*
how about reading my comments completely? I've said the whole time it is a general issue and hasn't anything to with the names displayed over their head. but congrats, you wrote something completely out of context which is correct. but i never wrote that.

wow, you play mmos since the beginning? now you must be an expert. well, i started with uo in the last century (sounds great, doesn't it) but who the f*** cares? does this add anything to the subject or just because someone plays games all day long makes him now a security expert?

and again. it's a simple post about your believes based on your gaming experience. oh my god, this is so f*** up. I feel a bit sorry but at this point but i'm simply going to ignore you in the future as i assume you're simply trolling.

No, Gaming doesn't make me a "security expert". Writing code for a server farm all day long and managing the security credentials does.

Ultima Online was great, but adding that in does give a context that it has been easy to get an account name from an MMO since the beginning of the MMORPG Genre. What ESO is showing now, is no different than many MMO's have done in the past, do currently, and most likely will continue to do in the future. It gives context to the fact that the current panic is simply knee-jerk reaction to something that has changed visually, but is nothing significant in any way.

And it's "beliefs" not "believes". Grammar is important, especially in an online situation where facial expression and body language cannot be read.

But your opinion that this is a "bad design choice" does nothing to alleviate the fact that showing the @name is inconsequential by every definition of the word. It changes nothing from what was readily available before the DB Update.

But, you probably ignored all of that silly common sense stuff... whatever shall I do?

There is a need for an option to hide @name in the settings.
The @name of anyone in the leaderboard can be viewed through pointing the cursor on the character name.
Without any option to hide @name, players are constantly exposed to harassments in many forms, such as: hate mail and whispers, stalking and much more.

The top 100 players in any alliance in Cyrodiil should know what I'm talking about.
I'm quite sure that it is the same in pve leaderboard, for example veteran maelstrom.

Also, It poses a security threat.
It is 50% of the account login information.
I don't have to be a security expert to figure out that all of our accounts are not safe as they used to be.

@ZOS_JessicaFolsom Please consider implementing an option to hide @name in the near future.