Career Officer
Join Date: Jun 2012
Posts: 6
# 31
06-20-2012, 10:20 AM
Quote:
Originally Posted by Archived Post View Post
It's nice that Cryptic is finally doing something, but I'm not too fond of this system. It does not account for those with alternate computers (like how some people like to sometimes play from their laptops) or using a relatives computer on vacation. And like said previously, it's not accounting for variations of the IP if the router is reset or you have a roving IP.

Furthermore, It would be really nice to visually see Log-In times, which could help us immediately recognize unauthorized accesses. As well as failed password attempts since you last sucessfully logged on.

I've had my IP reset a couple of times since I originally posted that question on the forums... It doesn't seem to have made any difference at all, so I'm guessing that the whole thing about IP is either bugged or non-functioning, and if it's based on your computers name, well, that's just a little bit silly really isn't it?

A visual log of login times & failed password attempts is a great idea. I've seen it done on a number of banks online systems, never occured to me that it could be applied to games aswell.

Nes
Starfleet Veteran
Join Date: Jun 2012
Posts: 424
# 32
06-27-2012, 07:31 PM
Quote:
Originally Posted by Archived Post View Post
2. I got startrekonline.com and login to their account. Now I change their email address so that emails goto my email.
Won't work the way you think. I'm locked out of tribble right now because of that.

...
I merged my Cryptic account with my old PWE account without realizing the PWE account was associated with my old work e-mail address and since I don't work there any more I don't have that e-mail. So, I went to change my e-mail but it sends an authentication e-mail to my old address which has to be accepted to change the e-mail address associated with the account.
...

So, for me it sucks, because I will soon (when it hits holodeck) be locked out of the game, but it is good for preventing the thing you are referring to.
Ensign
Join Date: Jun 2012
Posts: 3
# 33
07-05-2012, 03:12 PM
Well i thought i knew which email my account was linked to, i have checked my three main email accounts and have found no email for this guard, so now what?, i remember PWE stuffing a whole lote of people around with a forced password change on perfect world that locked a whole lot of their player base out of the game when the new password was sent to emails, some of which people could no longer access for whatever reason, this sure smacks of that. Thanks for the headache, my account was secure enough seems its now secure from me as well...

Editing note: found the email i was linked to on my account info here, very lucky i remembered the password.

Last edited by meowitup; 07-05-2012 at 03:17 PM.
Lt. Commander
Join Date: Jun 2012
Posts: 183
# 34
07-05-2012, 03:52 PM
Quote:
Originally Posted by meowitup View Post
Well i thought i knew which email my account was linked to, i have checked my three main email accounts and have found no email for this guard, so now what?, i remember PWE stuffing a whole lote of people around with a forced password change on perfect world that locked a whole lot of their player base out of the game when the new password was sent to emails, some of which people could no longer access for whatever reason, this sure smacks of that. Thanks for the headache, my account was secure enough seems its now secure from me as well...

Editing note: found the email i was linked to on my account info here, very lucky i remembered the password.
check the email your using for your account.

I just checked mien and noticed that its changed the last part from .com to .co.uk
Ensign
Join Date: Jul 2012
Posts: 3
# 35
07-14-2012, 08:09 AM
I have a similar problem. As Perfect World doesn't use a confirmation email (Unless I am mistaken) I think i typed in the wrong email address, it ends in .com only instead of the correct com.sg. So when Cryptic released the Account Guard, I am now stuck as the email is wrong as I cannot receive the code.

I am sorry if this is the wrong thread to post in here, I am new here. So, can anyone give me any advice on how to proceed?
Ensign
Join Date: Jul 2012
Posts: 1
# 36 can't access account
07-17-2012, 10:48 AM
When i made my account (my 2nd) i used an email that is not even real. I can't get the account guard code because of this, and I can't even change my email. What should I do???
Ensign
Join Date: Sep 2012
Posts: 2
# 37
09-21-2012, 05:21 PM
I have been busy and have not been able to play STO for a while. I come back and I get this account guard, which sent a one time code to an email address. Problem is, I don't remember the password to the email address when I started this account because I made up a quick one due to the fact that my real email was already registered and there was issues at the time with registering new accounts.

So, I come to this website, log onto my account with MY password, and .... PHEWWWW .. YES, I can change the email... GREAT!!!! I though.

Well, I changed the email to my new one, however.. they sent the conformation to the old email...... So, I am permenantly locked out of my account on a character I worked hard on. I did contact customer support, but they said 3-4 business days before they'll reply. Can someone in the STO support pass this up the chain and get my email changed quicker, please? I think this account gaurd is not needed.
Lt. Commander
Join Date: Aug 2012
Posts: 116
# 38
09-22-2012, 05:22 AM
Account "Guard" is useless and intrusive spyware. The only reason it would be able to distinguish one computer from another is if it is using a tried and true spyware tactic of snooping around your system for its various components and parts. That it is then phoning that information home marks it as spyware, pure and simple. I'm sure that they they mean well on the surface, but remember this: Those who give up their freedom and privacy for safety and security will have and deserve neither.

Similarly, the constant abuse of email is a joke and completely destroys any security that was on the acount: This information is sent plain-text over the entire Internet. Very few people run their own emails, so this means that this information is being sent in the clear over the Internet to a THIRD PARTY. Many use Gmail. Here's a question: Are you Google? Is Cryptic Google? No? Then you've just added another point of failure to your security, a third party who has full control over the process because Cryptic will accept anything from that account on faith. When that third party's security fails, so does your security here. What's more, Google accounts, too, use a similar "password recovery" mechanism. That means *THAT* account can be compromised externally, which in turn results in a compromise here.

Keep in mind, these are places that will surrender your account to anyone who calls them and happens to know some what are probably easily known to the public facts.

Anytime you outsource your security to a third party in such a manner, your security is absolutely worthless. You should never chain a thing's security to another thing's. An account should be a fortress, to stand or fall alone, not part of a chain where a failure anywhere is a failure everywhere.
Starfleet Veteran
Join Date: Jun 2012
Posts: 29
# 39
09-22-2012, 11:13 AM
Quote:
Originally Posted by jkname View Post
Account "Guard" is useless and intrusive spyware. The only reason it would be able to distinguish one computer from another is if it is using a tried and true spyware tactic of snooping around your system for its various components and parts. That it is then phoning that information home marks it as spyware, pure and simple. I'm sure that they they mean well on the surface, but remember this: Those who give up their freedom and privacy for safety and security will have and deserve neither.

It can't tell what computer your on....It tells which IP address you are using. This is designed to stop people getting someones password and then using it.

I know this cause I changed IP address and sure enough I had to re-register. And if the game didn't include an email, it would make things way more technical and confusing and then cryptic would have to spend time and money on a new system rather than on content
Commander
Join Date: Jul 2012
Posts: 426
# 40
09-23-2012, 07:52 AM
Quote:
Originally Posted by llyodstyles View Post
It can't tell what computer your on....It tells which IP address you are using. This is designed to stop people getting someones password and then using it.
Considering I can log into the game and the forums from school (and never had to reverify my account), it is not based solely on IP address. The FAQ even says it's not based on your IP address. It goes by your computer.
Demons run when a good man goes to war.
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


All times are GMT -7. The time now is 10:38 PM.