Maintenance for the week of February 23:
· [IN PROGRESS] NA megaservers for maintenance – February 23, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
· [IN PROGRESS] EU megaservers for maintenance – February 23, 9:00 UTC (4:00AM EST) - 17:00 UTC (12:00PM EST)
· [IN PROGRESS] ESO Store and Account System for maintenance – February 23, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
· [IN PROGRESS] NA megaservers for maintenance – February 23, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
· [IN PROGRESS] EU megaservers for maintenance – February 23, 9:00 UTC (4:00AM EST) - 17:00 UTC (12:00PM EST)
· [IN PROGRESS] ESO Store and Account System for maintenance – February 23, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
Account username as Contact name? Really?
Anyone else think this is a ridiculous security breach? I mean just because someone is in my friends list does not mean I want them to know my account name.
4
-
andy.rowlandub17_ESOSoul ShrivenNot that it fixes the problem, but I did submit a request (took about a week to get it solved) to have my username changed. Like many people I know that play they game, they used their regular username and did not want people seeing it. At least with changing my username, those on my friends list only have the username to my ESO account.0
-
ZOS_JasonI✭✭✭✭Hey there, @Gthirteen. If you do decide that you want to change your User ID to another name, our Support Team can assist you with that. We can also create a ticket for you if you'd like.0 -
Vyndetta✭✭✭ZOS_JasonL wrote: »Hey there, @Gthirteen. If you do decide that you want to change your User ID to another name, our Support Team can assist you with that. We can also create a ticket for you if you'd like.
So, is this why I've been waiting seven days for my ticket to be worked on/updated? You guys keep creating tickets and bumping to Customer Service? Hey, I'm all for a little help for everyone, but how about sending a ticket in for the rest of us too...1 -
andy.rowlandub17_ESO wrote: »Not that it fixes the problem, but I did submit a request (took about a week to get it solved) to have my username changed. Like many people I know that play they game, they used their regular username and did not want people seeing it. At least with changing my username, those on my friends list only have the username to my ESO account.
I am not sure what you are referring to, I was never asked, that I remember, to specify what name shows up as my contact name within the game. It just defaults to your account name.
1 -
ZOS_JasonL wrote: »Hey there, @Gthirteen. If you do decide that you want to change your User ID to another name, our Support Team can assist you with that. We can also create a ticket for you if you'd like.
That's all well and good but I should not have to put a ticket in to prevent people from seeing my account name in the game. This is a ridiculous policy and needs changed2 -
liquid_wolf✭✭✭✭That's all well and good but I should not have to put a ticket in to prevent people from seeing my account name in the game. This is a ridiculous policy and needs changed
This is the internet of 2014.
If you think keeping your account name secret is going to keep you safe, you are sorely mistaken.
Think of it in terms of your immune system... Sure you could keep your body protected by hiding yourself from every possible bad thing out there.
But clearly the better method is simply to keep yourself healthy, strong, and have regular checkups.
Everything on the internet touches you, and has a chance to hurt you. Rather than hide from it, simply set yourself up to handle it.0 -
Vyndetta✭✭✭@liquid_wolf If hackers or whatever already have access to your account name, hence login information, then they are that much closer to already getting your account. It is simply a matter of one less security measure.1
-
liquid_wolf wrote: »That's all well and good but I should not have to put a ticket in to prevent people from seeing my account name in the game. This is a ridiculous policy and needs changed
This is the internet of 2014.
If you think keeping your account name secret is going to keep you safe, you are sorely mistaken.
Think of it in terms of your immune system... Sure you could keep your body protected by hiding yourself from every possible bad thing out there.
But clearly the better method is simply to keep yourself healthy, strong, and have regular checkups.
Everything on the internet touches you, and has a chance to hurt you. Rather than hide from it, simply set yourself up to handle it.
Keep your pseudo intellectual ramblings to yourself. Just because the possibility exists that someone can acquire this information through nefarious means does not mean I should just say screw it and give it out.
Furthermore I am a IT professional and I know all about "healthy" passwords and mine is secure but that is not the point here.
3 -
@liquid_wolf If hackers or whatever already have access to your account name, hence login information, then they are that much closer to already getting your account. It is simply a matter of one less security measure.
Exactlly.
Edited by Gthirteen on April 11, 2014 4:12PM1 -
Lox✭✭✭liquid_wolf wrote: »That's all well and good but I should not have to put a ticket in to prevent people from seeing my account name in the game. This is a ridiculous policy and needs changed
This is the internet of 2014.
If you think keeping your account name secret is going to keep you safe, you are sorely mistaken.
Think of it in terms of your immune system... Sure you could keep your body protected by hiding yourself from every possible bad thing out there.
But clearly the better method is simply to keep yourself healthy, strong, and have regular checkups.
Everything on the internet touches you, and has a chance to hurt you. Rather than hide from it, simply set yourself up to handle it.
I agree totally with Gthirteen, I am not an IT professional but I have been working with security (electronic and physical) for 20+ years.
The comments quoted are simply those of someone who really doesn't understand security (internet or otherwise). I raised this same concern as the OP many times in the betas and didn't even get a reply on one of my threads.
Good security is a combination of many small elements, no one thing will protect you. The simple fact that the devs are actively working against basic online security principles (i.e. never give you account name or password to anyone), has to raise their entire security infrastructure into question.ZOS_JasonL wrote: »Hey there, @Gthirteen. If you do decide that you want to change your User ID to another name, our Support Team can assist you with that. We can also create a ticket for you if you'd like.
And as for this absolutely rediculous response, I can only laugh. This does not, in any way, address to concern of the OP.
1 -
Hilandra✭✭usernames hidden or unhidden won't change a fact if they want to breach into your account. Get used to it. It's with many games.. this is not the first.0 -
usernames hidden or unhidden won't change a fact if they want to breach into your account. Get used to it. It's with many games.. this is not the first.
This is the first mmorpg that I have ever played (and I have played them all for the most part) that uses account information as public identification. Another asinine response.
2 -
liquid_wolf wrote: »That's all well and good but I should not have to put a ticket in to prevent people from seeing my account name in the game. This is a ridiculous policy and needs changed
This is the internet of 2014.
If you think keeping your account name secret is going to keep you safe, you are sorely mistaken.
Think of it in terms of your immune system... Sure you could keep your body protected by hiding yourself from every possible bad thing out there.
But clearly the better method is simply to keep yourself healthy, strong, and have regular checkups.
Everything on the internet touches you, and has a chance to hurt you. Rather than hide from it, simply set yourself up to handle it.
I agree totally with Gthirteen, I am not an IT professional but I have been working with security (electronic and physical) for 20+ years.
The comments quoted are simply those of someone who really doesn't understand security (internet or otherwise). I raised this same concern as the OP many times in the betas and didn't even get a reply on one of my threads.
Good security is a combination of many small elements, no one thing will protect you. The simple fact that the devs are actively working against basic online security principles (i.e. never give you account name or password to anyone), has to raise their entire security infrastructure into question.ZOS_JasonL wrote: »Hey there, @Gthirteen. If you do decide that you want to change your User ID to another name, our Support Team can assist you with that. We can also create a ticket for you if you'd like.
And as for this absolutely rediculous response, I can only laugh. This does not, in any way, address to concern of the OP.
Thank You, good to see there are some intelligent people hiding around here
1 -
Carnage2K4✭✭✭✭I have NO issue with this system, it makes it easy, can you imagine if every character required it's own system, keeping track of who is who would become a nightmare...
It should be standard practice to have a gamer tag, If you choose to use your name and provide your street address in your account name, that is your problem.
Human Infant Connoisseur1 -
Vyndetta✭✭✭Carnage2K4 wrote: »I have NO issue with this system, it makes it easy, can you imagine if every character required it's own system, keeping track of who is who would become a nightmare...
It should be standard practice to have a gamer tag, If you choose to use your name and provide your street address in your account name, that is your problem.
Regardless if someone uses their real name, address, kid's name or whatever, it is still one part of their login information. Can you not see this? What is so hard to comprehend here?
"Account Name" cool, my login showing NOT cool.0 -
Sihnfahl✭✭✭✭
Wait... so making a character name not tie back to an account name to the public makes it difficult for Zenimax support to track issues with the account?Carnage2K4 wrote: »I have NO issue with this system, it makes it easy, can you imagine if every character required it's own system, keeping track of who is who would become a nightmare.Edited by Sihnfahl on April 11, 2014 4:26PM0 -
Minnus✭✭Carnage2K4 wrote: »I have NO issue with this system, it makes it easy, can you imagine if every character required it's own system, keeping track of who is who would become a nightmare...
It should be standard practice to have a gamer tag, If you choose to use your name and provide your street address in your account name, that is your problem.
It is not inconceivable to implement an account name, a display name, and then character names. Right now, account name and display name refer to the same ID.
I agree that this is quite ridiculous . Those who do not see a problem with this are simply unaware of the implications.0 -
AlexDougherty✭✭✭✭✭
✭✭Anyone else think this is a ridiculous security breach? I mean just because someone is in my friends list does not mean I want them to know my account name.
Well people on other MMOs want universal friend and ignore lists, I guess that this game is trying to please them. I have pointed out the problems with universal friend lists on forum for swtor, and got shot down for it.
You just can't please everyone, sorry.People believe what they either want to be true or what they are afraid is true!
Wizard's first rule
Passion rules reason
Wizard's third rule
Mind what people Do, not what they say, for actions betray a lie.
Wizard's fifth rule
Willfully turning aside from the truth is treason to one's self
Wizard's tenth rule0 -
Sihnfahl✭✭✭✭
Which making account name visible isn't necessary for.AlexDougherty wrote: »Well people on other MMOs want universal friend and ignore lists, I guess that this game is trying to please them.
"Hey, BlastedKhajiitNightBlade, who're you?"
"Oh, this is RedguardMageLOL."
So. Difficult.1 -
Carnage2K4 wrote: »I have NO issue with this system, it makes it easy, can you imagine if every character required it's own system, keeping track of who is who would become a nightmare...
It should be standard practice to have a gamer tag, If you choose to use your name and provide your street address in your account name, that is your problem.
I can imagine it easily actually because almost every MMORPG since the beginning of time has used individual character names as identification and it works very well. If you cant keep straight who is who then well......
1 -
otomodachi✭✭✭Carnage2K4 wrote: »I have NO issue with this system, it makes it easy, can you imagine if every character required it's own system, keeping track of who is who would become a nightmare...
It should be standard practice to have a gamer tag, If you choose to use your name and provide your street address in your account name, that is your problem.
Regardless if someone uses their real name, address, kid's name or whatever, it is still one part of their login information. Can you not see this? What is so hard to comprehend here?
"Account Name" cool, my login showing NOT cool.
Nope, and you're not going to get through. It is apparently apparently totally legit or even desired to have people's questions and complaints debunked here by people completely unaffiliated for ZO. ZO appears to be completely comfortable with having rude, offensive people fielding questions for them.
*I* totally understand you. A person needs two pieces of information to log into your account; a password and a login. If they have the login, they're halfway there. This is a horrible simple concept.What do you gain by criticizing a CSR complaint?0 -
liquid_wolf✭✭✭✭@liquid_wolf If hackers or whatever already have access to your account name, hence login information, then they are that much closer to already getting your account. It is simply a matter of one less security measure.
This isn't security. It is simply hiding and hoping.
Security is about awareness and preparedness.Keep your pseudo intellectual ramblings to yourself. Just because the possibility exists that someone can acquire this information through nefarious means does not mean I should just say screw it and give it out.
Furthermore I am a IT professional and I know all about "healthy" passwords and mine is secure but that is not the point here.
I don't care if you are an IT professional. It doesn't matter because the majority of the older IT professionals in my department are stubborn mules who can't pull their heads out of the idea that "security through obscurity" and "punishment on breach" is the way to be.
It is ultimately a flawed practice and always fails. You can't keep anything secret anymore.
Would not displaying the account name help? Nope.
Looking at the vast majority of other MMORPG accounts that get hacked, stolen, broken into, and reset tells us that it doesn't help.
Because the problem was never the account name, or even the email... it was the people and practices themselves.
You can't protect people from their own mistakes... but you can put them onto the battlefield so they can learn to protect themselves.
Your arguments have no value, because the people still find ways to mess it up.
Best practices be damned.
2 -
Lox✭✭✭AlexDougherty wrote: »Anyone else think this is a ridiculous security breach? I mean just because someone is in my friends list does not mean I want them to know my account name.
Well people on other MMOs want universal friend and ignore lists, I guess that this game is trying to please them. I have pointed out the problems with universal friend lists on forum for swtor, and got shot down for it.
You just can't please everyone, sorry.
Many other games already have a universal (account wide) identification system, but they don't use the account login name as that identifier!
Personally, I am not a fan of account identifiers, I would much rather it was 'per character', but that is just my personal preference and it isn't a game breaker.
I will also point out this isn't the first game to do this! I believe Neverwinter also uses account name as a universal identifier ingame, however I never got into that and never played it beyond the betas so don't know if that changed.0 -
Vyndetta✭✭✭@liquid_wolf I don't want my account login name to be seen by others. I know that it is the first step in accessing my account. It should NOT be visible to others. We should have an Account Name that is NOT our Login.
Funny you should be calling out the IT people. You're actually the one who's being pig headed. I mean, you can't even acknowledge that this can assist in leading to hacks?1 -
liquid_wolf wrote: »@liquid_wolf If hackers or whatever already have access to your account name, hence login information, then they are that much closer to already getting your account. It is simply a matter of one less security measure.
This isn't security. It is simply hiding and hoping.
Security is about awareness and preparedness.Keep your pseudo intellectual ramblings to yourself. Just because the possibility exists that someone can acquire this information through nefarious means does not mean I should just say screw it and give it out.
Furthermore I am a IT professional and I know all about "healthy" passwords and mine is secure but that is not the point here.
I don't care if you are an IT professional. It doesn't matter because the majority of the older IT professionals in my department are stubborn mules who can't pull their heads out of the idea that "security through obscurity" and "punishment on breach" is the way to be.
It is ultimately a flawed practice and always fails. You can't keep anything secret anymore.
Would not displaying the account name help? Nope.
Looking at the vast majority of other MMORPG accounts that get hacked, stolen, broken into, and reset tells us that it doesn't help.
Because the problem was never the account name, or even the email... it was the people and practices themselves.
You can't protect people from their own mistakes... but you can put them onto the battlefield so they can learn to protect themselves.
Your arguments have no value, because the people still find ways to mess it up.
Best practices be damned.
You obviously do not have any concept of the many steps involved creating a secure account and I will not comment to you further because I am not going to get through but I will tell you this that the first step is to keep your account information to yourself, regardless of how many super duper elite h@xx0rs there are out there. Peace.
2 -
As many intelligent people here are commenting, there are many other smarter ways of having unique identifiers that does not involve handing out your account name.0
-
cheeser123✭✭✭otomodachi wrote: »*I* totally understand you. A person needs two pieces of information to log into your account; a password and a login. If they have the login, they're halfway there. This is a horrible simple concept.
Thank you for having some common sense.liquid_wolf wrote: »This isn't security. It is simply hiding and hoping.
Security is about awareness and preparedness.
Would you want your bank giving away your username? It's not your password, so who cares?? Why not give out Social Security numbers? Those are just the "username" anyway.
When you log in to TES Online, everything hits the pipe encrypted (recent SSL security issues notwithstanding). That includes, as far as I know, your username. If the program is smart enough to know that this data should be encrypted, why broadcast the username in the clear in other ways? If usernames are meant to be public, it should say so clearly. If they are meant to be kept secret, they should be kept entirely secret. You can't criticize people who thought the later just because you're assuming the former.
The rest of your post is a gigantic logical fallacy. "Many other problems are not caused by this potential source of a security breach" does not mean that it shouldn't be fixed.4 -
cheeser123✭✭✭Many other games already have a universal (account wide) identification system, but they don't use the account login name as that identifier!
Bingo. Battle.net uses an account name (er, "battle tag") to identify an account, character names to a user's identify characters, and a username & password combination that is never part of the information shared with other users and/or the public.0 -
cheeser123 wrote: »otomodachi wrote: »*I* totally understand you. A person needs two pieces of information to log into your account; a password and a login. If they have the login, they're halfway there. This is a horrible simple concept.
Thank you for having some common sense.liquid_wolf wrote: »This isn't security. It is simply hiding and hoping.
Security is about awareness and preparedness.
Would you want your bank giving away your username? It's not your password, so who cares?? Why not give out Social Security numbers? Those are just the "username" anyway.
When you log in to TES Online, everything hits the pipe encrypted (recent SSL security issues notwithstanding). That includes, as far as I know, your username. If the program is smart enough to know that this data should be encrypted, why broadcast the username in the clear in other ways? If usernames are meant to be public, it should say so clearly. If they are meant to be kept secret, they should be kept entirely secret. You can't criticize people who thought the later just because you're assuming the former.
The rest of your post is a gigantic logical fallacy. "Many other problems are not caused by this potential source of a security breach" does not mean that it shouldn't be fixed.
^^ What this guy said
0 -
Lox✭✭✭liquid_wolf wrote: »@liquid_wolf If hackers or whatever already have access to your account name, hence login information, then they are that much closer to already getting your account. It is simply a matter of one less security measure.
This isn't security. It is simply hiding and hoping.
Security is about awareness and preparedness.Keep your pseudo intellectual ramblings to yourself. Just because the possibility exists that someone can acquire this information through nefarious means does not mean I should just say screw it and give it out.
Furthermore I am a IT professional and I know all about "healthy" passwords and mine is secure but that is not the point here.
I don't care if you are an IT professional. It doesn't matter because the majority of the older IT professionals in my department are stubborn mules who can't pull their heads out of the idea that "security through obscurity" and "punishment on breach" is the way to be.
It is ultimately a flawed practice and always fails. You can't keep anything secret anymore.
Would not displaying the account name help? Nope.
Looking at the vast majority of other MMORPG accounts that get hacked, stolen, broken into, and reset tells us that it doesn't help.
Because the problem was never the account name, or even the email... it was the people and practices themselves.
You can't protect people from their own mistakes... but you can put them onto the battlefield so they can learn to protect themselves.
Your arguments have no value, because the people still find ways to mess it up.
Best practices be damned.
The 'best practice' should always be implemented by the 'prefessional entity' regardless of whether individual 'users' choose to ignore that same process. A relative minority (I suspect) of people not using a simple process is not justification for it to be ignored completely. People leave their cars unlocked all the time, is that justification to abolish car locks? (very loosely linked analogy I know).
Actively distributing user account information IS an issue. It may be only a small part of a more detailed overall puzzle but that isn't the point.
Why should the people who choose to take precautions to minimise the risk (as each and every measure you take goes toward minimising that risk) have their account information made public?
I have been playing MMOs for 15+ years and have never given any of my account information to anyone. I have played just about every AAA MMO since the mid 90's and many smaller ones aswell and I have never had an account compromised. I hate the term 'hacked' anyway because, as you have said, I suspect the majority of cases are not 'hackings' they are down to users implementing poor personal online security.
1