hack time

[whiterabbit]

WTH IS WRONG WITH YOU PEOPLE IN CHARGE??
If you forgot your EA/Origin account password, you can request a new password on the front page of the Account Center as long as you know the associated email address
HACK TIME?????

 

[Viper09]

You're too quick to assume the worst after just reading. Rest assured that you actually need to log into the email address to actually get the password changed (I actually tested it). We were discussing this change here by the way,
[UO Herald] An Easier Way to Retrieve Your Passwords | Stratics Forums

 

[MalagAste]

Not assuming too much.... anyone knows the majority of accounts that get hacked get hacked through their EMAILS!!!!!! This is a STUPID move! Yes please just open me up to all sorts of the worst possible things and make my accounts EVEN MORE vulnerable than ever before... yes I am feeling secure now............

NOT

 

[Viper09]

A ton of MMO accounts can be hacked as long as you can get into someones email account though...

What would you instead propose for retrieving or changing passwords if you feel it isn't safe enough? Aside from security against hackers which is a separate discussion it itself but sorely needed.

 

[Cetric]

A ton of MMO accounts can be hacked as long as you can get into someones email account though...

What would you instead propose for retrieving or changing passwords if you feel it isn't safe enough? Aside from security against hackers which is a separate discussion it itself but sorely needed.

i want mesanna to call me personally.

Seriously though, use a good strong password on your email account...

 

[Frarc]

To get hacked they need :

A your EA Mythic name and password
B your E-mail and password
C your account name and password

If you give away all 6 of those things, it might better to look at yourself who is to blame.

 

[Petra Fyde]

No one can hack your email address if they don't know what it is. For all things UO related except EA Accounts management I use an email account in my board name, Petra Fyde.

 

[Dan123The123Man]

A ton of MMO accounts can be hacked as long as you can get into someones email account though...

What would you instead propose for retrieving or changing passwords if you feel it isn't safe enough? Aside from security against hackers which is a separate discussion it itself but sorely needed.

I personally like the way world of warcraft handled it with the "digipass" keychain. When you try to login to your account you will have to press the button and then it will ask for the "code" on the key chain and you put the code in and your account password and login. This only happens ONCE per computer. So it's not like u have to put this new code in everytime you login on ur computer. If someone however gets a hold of ur information(somehow for whatever reason) then they would need this key chain in order to create a code to login to your account from THEIR computer. Make sense?

 

[Viper09]

I personally like the way world of warcraft handled it with the "digipass" keychain. When you try to login to your account you will have to press the button and then it will ask for the "code" on the key chain and you put the code in and your account password and login. This only happens ONCE per computer. So it's not like u have to put this new code in everytime you login on ur computer. If someone however gets a hold of ur information(somehow for whatever reason) then they would need this key chain in order to create a code to login to your account from THEIR computer. Make sense?

Of course it makes sense. That system would be lovely here, no ones arguing that. I just hear from people about how bad this system is with no suggestions about how it could be improved, hence the question.

 

[Adol]

I've had my email account hacked once in 15 years (yes I was an early adopter) but it happened somewhere I assumed would be secure, on the computer of a reputable youth hostel I was staying at. Fortunately they used the email to start sending spam out and my companion on the holiday saw it on her mobile within a few minutes of it beginning and I was able to lock down the account later. But if they'd have spent the time filtering for account notifications, I'm not sure what they could have pieced together; I sometimes leave information for games I'm not playing there so I can re-open accounts I've since forgotten about later...

The point is, security should never be taken for granted. And before the account details are sent to the email only on request, there should be a Security Question (Favourite pet, first car etc) that never gets sent to the email, and only the actual owner is likely to know, and unable to forget.

 

[Old Man of UO]

No one can hack your email address if they don't know what it is. For all things UO related except EA Accounts management I use an email account in my board name, Petra Fyde.

1. Like Petra says, use a dedicated email account that isn't used anywhere else.
2. Don't reuse passwords. I know, it's a pain to have different passwords for each account, but so is getting hacked. Use a password vault if you want, I use an protected Word file.
3. Use a strong password.That means using at least one of: Upper Case, Lower Case, Number, and a Special Character (!, @, #, etc.). That means with most systems you have 96 characters available.
4. 8 characters is no longer enough. Use 12 or more. An 8 character password can be cracked in about 2 hours, while 12 characters takes 17,000 years using current technology. This is from research published last month, forget who reported it, but think it was McAfee.

 

[Petra Fyde]

I mostly use passwords based on a sentence, that gives something you can write down fairly safely, isn't too hard to remember, but looks like nonsense.
Example: 1mupb0n4s = I mostly use passwords based on a sentence

 

[Heimi]

Make a new e-mail address specifically for game accounts/passwords, and DON'T TELL ANYONE WHAT IT IS.

Personally I have only had my e-mail hacked once, through a ridiculous security flaw in Hotmail - needless to say, don't use Hotmail. I recommend gmail

 

[Old Man of UO]

I recommend gmail

I forward all my email accounts to GMail, so that I only have one account to check. Even if someone were to hack the main GMail account, they still would not have access to passwords on the other email accounts.