HandofBane wrote: »
I don't believe so. At least I don't recall it being there back in November when I got my first beta invite.
revanghost wrote: »
Usually I'm one for being reasonable. But, I see your argument as "we should cater to human error" and businesses just can't realistically plan for that. I think a nice compromise is to make the ID changeable, but for a fee.
But it's fairly standard. They could have easily planned for this complaint, by simply acknowledging the standard practice and learning why it was done that way.
Making it changeable for a fee is an awful compromise. Just meet the MMO standard please, Zenimax! A toggle shouldn't be hard to do!
HandofBane wrote: »
I don't believe so. At least I don't recall it being there back in November when I got my first beta invite.
scruffycavetroll wrote: »Etchesketch wrote: »scruffycavetroll wrote: »Aaron_Spellcaster wrote: »@Riven: Your post have been reported. Take that kind of posting somewhere else please.
wow...just wow.
you reported for posting a pic of the info? wow.SMW1980b14a_ESO wrote: »Aaron_Spellcaster wrote: »This is not a discussion.
Since when did you become an authority. Reporting your post for being disagreeable.
Personally, I looked at this post as a request and not an attempt at actual discussion.
then it should be taken up with support if it's gonna be one sided.
This is the "better" community some fans were promising. Instead we have a forum where you can't discuss anything without some weak/thin kneed/skinned person complaining to mommy.
Hopefully the mommies in control of forum content are better parents than the ones in the CSR house.
hey, i got banned for a day for referencing a drug...meanwhile in the game they talk about Skooma a hallucinogenic substance that npc's are addicted to, selling, and producing illegally.
makes no sense.
HandofBane wrote: »
I don't believe so. At least I don't recall it being there back in November when I got my first beta invite.
If it wasn't there at the time then I think it is completely understandable for people who were not informed about it to want to change their UserID.
When you create your account it explicitly says that your UserID will be displayed to others in game.
So I don't know why anyone would create one that they don't want people to know.
When you create your account it explicitly says that your UserID will be displayed to others in game.
So I don't know why anyone would create one that they don't want people to know.
A lot of us, me included, chose our user ids during beta, long before the account interface had this little information bubble, or even looked anything like it does today. So your comment doesn't say anything constructive.
When you create your account it explicitly says that your UserID will be displayed to others in game.
So I don't know why anyone would create one that they don't want people to know.
HandofBane wrote: »And everyone reads the full EULA/TOS before signing up to any game service, too, right? Some people get excited and want to hurry through the process so they can get ingame, and just use something they know and can remember easily as their login/password. People can go on about "weak passwords" and "terrible security habits" all day, but that won't actually make most people actually pay attention beforehand and suddenly develop safer/more secure habits overnight. This is the primary weakness in the current system displaying @userIDs - humans being humans.So I don't know why anyone would create one that they don't want people to know.
magic_is_might wrote: »That's not Zenimax's problem. That's the customer's issue.
jamesharv2005ub17_ESO wrote: »Absolutely was during the beta. It was very clear the name you chose would be displayed to others on the forums and in the game.
I saw that and my opinion is the UserID and Login Credentials should have been two separate items.When you create your account it explicitly says that your UserID will be displayed to others in game.
So I don't know why anyone would create one that they don't want people to know.
HandofBane wrote: »jamesharv2005ub17_ESO wrote: »Absolutely was during the beta. It was very clear the name you chose would be displayed to others on the forums and in the game.
Ready for a magic trick? Your forum ID likely matches your original user ID. ub17 means you joined in the beta during the January-March phases (likely the later ones) as that was the 0.17 test stage. Going to go out on a limb and say your email address is jameshav2005 at whatever email provider you use. Safest bets are live, yahoo, hotmail, and gmail.
So how's that security working for you?
jamesharv2005ub17_ESO wrote: »HandofBane wrote: »jamesharv2005ub17_ESO wrote: »Absolutely was during the beta. It was very clear the name you chose would be displayed to others on the forums and in the game.
Ready for a magic trick? Your forum ID likely matches your original user ID. ub17 means you joined in the beta during the January-March phases (likely the later ones) as that was the 0.17 test stage. Going to go out on a limb and say your email address is jameshav2005 at whatever email provider you use. Safest bets are live, yahoo, hotmail, and gmail.
So how's that security working for you?
Working very well. What diff does it make if you know what the first part of my email address is? You will not be able to login my account unless you live at my house or have access to said email address. Again this is a non-issue.
Yes it is.Aaron_Spellcaster wrote: »This is not a discussion.
No you are not.Aaron_Spellcaster wrote: »... im am the authority of my own thread.
I saw that and my opinion is the UserID and Login Credentials should have been two separate items.
Understand? Two....separate...items...for security reasons.
HandofBane wrote: »jamesharv2005ub17_ESO wrote: »HandofBane wrote: »jamesharv2005ub17_ESO wrote: »Absolutely was during the beta. It was very clear the name you chose would be displayed to others on the forums and in the game.
Ready for a magic trick? Your forum ID likely matches your original user ID. ub17 means you joined in the beta during the January-March phases (likely the later ones) as that was the 0.17 test stage. Going to go out on a limb and say your email address is jameshav2005 at whatever email provider you use. Safest bets are live, yahoo, hotmail, and gmail.
So how's that security working for you?
Working very well. What diff does it make if you know what the first part of my email address is? You will not be able to login my account unless you live at my house or have access to said email address. Again this is a non-issue.
You personally? Maybe, maybe not. Other folks who don't realize this kind of issue exists, and use the same password/login ID for everything? Absolutely. Anyone who refuses to account for those people in their security setup as a business is putting themselves at risk of loss of time/money due to their CS staff being tied up with preventable issues, and putting their customer base at risk of suffering losses to their own time/effort when guild banks get robbed because of compromised accounts (thanks for that non-existent withdrawal limit, guys!).
Your reply here is "well you should only give permission to people you trust!" To which I say "sure, let me get right on confirming every single member of my guilds has a secure password by having them send me a screenshot of it to make certain it isn't the same as their email."
Edit: Also you may have missed the part earlier where some people were able to get around the "email for an untrusted machine" thing by simply waiting 10 minutes then trying again. This has not worked for everyone, but enough people that it was reported quite a few times last week here.
jamesharv2005ub17_ESO wrote: »HandofBane wrote: »jamesharv2005ub17_ESO wrote: »HandofBane wrote: »jamesharv2005ub17_ESO wrote: »Absolutely was during the beta. It was very clear the name you chose would be displayed to others on the forums and in the game.
Ready for a magic trick? Your forum ID likely matches your original user ID. ub17 means you joined in the beta during the January-March phases (likely the later ones) as that was the 0.17 test stage. Going to go out on a limb and say your email address is jameshav2005 at whatever email provider you use. Safest bets are live, yahoo, hotmail, and gmail.
So how's that security working for you?
Working very well. What diff does it make if you know what the first part of my email address is? You will not be able to login my account unless you live at my house or have access to said email address. Again this is a non-issue.
You personally? Maybe, maybe not. Other folks who don't realize this kind of issue exists, and use the same password/login ID for everything? Absolutely. Anyone who refuses to account for those people in their security setup as a business is putting themselves at risk of loss of time/money due to their CS staff being tied up with preventable issues, and putting their customer base at risk of suffering losses to their own time/effort when guild banks get robbed because of compromised accounts (thanks for that non-existent withdrawal limit, guys!).
Your reply here is "well you should only give permission to people you trust!" To which I say "sure, let me get right on confirming every single member of my guilds has a secure password by having them send me a screenshot of it to make certain it isn't the same as their email."
Edit: Also you may have missed the part earlier where some people were able to get around the "email for an untrusted machine" thing by simply waiting 10 minutes then trying again. This has not worked for everyone, but enough people that it was reported quite a few times last week here.
YOUR security is YOUR responsibility. If you use the same name and password everywhere thats YOUR fault. There is no way to get around the IP security pass phrase. you cannot just wait 10 mins and it lets you log in anyways. As far as your guild I dont even understand that part. What diff does it make the people in your guild havign all secure passwords? Do you let them access your personal account?
HandofBane wrote: »jamesharv2005ub17_ESO wrote: »HandofBane wrote: »jamesharv2005ub17_ESO wrote: »HandofBane wrote: »jamesharv2005ub17_ESO wrote: »Absolutely was during the beta. It was very clear the name you chose would be displayed to others on the forums and in the game.
Ready for a magic trick? Your forum ID likely matches your original user ID. ub17 means you joined in the beta during the January-March phases (likely the later ones) as that was the 0.17 test stage. Going to go out on a limb and say your email address is jameshav2005 at whatever email provider you use. Safest bets are live, yahoo, hotmail, and gmail.
So how's that security working for you?
Working very well. What diff does it make if you know what the first part of my email address is? You will not be able to login my account unless you live at my house or have access to said email address. Again this is a non-issue.
You personally? Maybe, maybe not. Other folks who don't realize this kind of issue exists, and use the same password/login ID for everything? Absolutely. Anyone who refuses to account for those people in their security setup as a business is putting themselves at risk of loss of time/money due to their CS staff being tied up with preventable issues, and putting their customer base at risk of suffering losses to their own time/effort when guild banks get robbed because of compromised accounts (thanks for that non-existent withdrawal limit, guys!).
Your reply here is "well you should only give permission to people you trust!" To which I say "sure, let me get right on confirming every single member of my guilds has a secure password by having them send me a screenshot of it to make certain it isn't the same as their email."
Edit: Also you may have missed the part earlier where some people were able to get around the "email for an untrusted machine" thing by simply waiting 10 minutes then trying again. This has not worked for everyone, but enough people that it was reported quite a few times last week here.
YOUR security is YOUR responsibility. If you use the same name and password everywhere thats YOUR fault. There is no way to get around the IP security pass phrase. you cannot just wait 10 mins and it lets you log in anyways. As far as your guild I dont even understand that part. What diff does it make the people in your guild havign all secure passwords? Do you let them access your personal account?
Shall I type slower? The 10 minute thing was happening about a week ago, it may or may not still work, but some folks who were sent login codes never got them, and were able to get ingame by simply waiting 10 minutes or so, trying again and the server believed their PC was trusted, despite sending them an untrusted login code already (or at least the server believing it send that code).
As far as the rest of the people in your guild - ever been through a guild bank robbery? *** experience. I have been through 3 in under 2 months, all by compromised accounts through various phishing means. Each one of those compromises was of a person I knew for a long time, through multiple games (6 years in one case). It sucks seeing a friend have their characters stripped of everything then deleted. It also sucks seeing that character logged in and cleaning out the guild bank as quickly as they can (or worse logging in and seeing the bank cleaned out because nobody online at the time could revoke their permissions). Like it or not, in a guild *every* member with any kind of permissions, bank or promote/demote or whatever, becomes a security risk to the guild should their account become compromised. It is simply not feasible for any guild leader to confirm every person they want to tag as an officer, let alone as a member in a game where we can have 500-account guilds, has a secure account login/password/email.
This whole mess and mountain of risk could be prevented by ZOS taking two simple steps:
1) make ingame user IDs different than login IDs, whether as email logins or two separate names, or even showing only character names like many other games use
2) offer either physical or app-based authenticators, for those who want something more secure, yet easier to use and more reliable than the login email system they have in place now.
Wait, you reported me just got disagreeing with you and posting a screenshot as evidence?
Whatever happened to there being two sides to a discussion?
You clearly have gone into a defensive mode and are no longer objectively listening to what anyone is saying.
He had someone he knew for 6 years have their account compromised. Trust was already long ago established. How are you supposed to prevent that?
What is a guild leader supposed to do? Make people tell him their private info so he can verify that it is good enough to be trusted before promoting that person with more bank privlages?
When you pointed out to my post that you agreed the userid and login creds should be different you should have stopped there and let your statement stand. However, you insist on continuing in this defensive mode which is not adding to the OP's discussion.
When you pointed out to my post that you agreed the userid and login creds should be different you should have stopped there and let your statement stand. However, you insist on continuing in this defensive mode which is not adding to the OP's discussion.