Showing Posts For Sigil Baram.8561:

Authenticator Questions/Concerns [merged]

in Account & Technical Support

Posted by: Sigil Baram.8561

Sigil Baram.8561

This isn’t too much of an issue but I have told the email authenticator to remember my IP address but occasionally it makes me authenticate again even though I never use a different computer. Mostly I am asking out of curiosity as to why that would be (like I said to start as long as I follow the authentication process there are no issues and I’m not being hacked or anything).

Cheers

You, like everyone else in the world who doesn’t pay extra money for a static IP address, have a Dynamic IP address. Some other random person now has the ‘network’ you told ANet to memorize. See my earlier post in this thread.

DON’T CHECK THE REMEMBER BOX. It might be annoying but the network you are saving isn’t YOURS. It is your ISP’s and they pass it around to all their clients every time your modem reboots or even more often depending on your ISP.


@ANet:

So no comment on a system besides authorizing random IP addresses? I’m really confused how the fact that most the world has Dynamic IP address was a surprise or that the fact seems to be ignored and you are still letting people have them authorized permanently…

I really love your games, but this ignored annoyance/security issue is kind of disappointing.

(edited by Sigil Baram.8561)

Authenticator Questions/Concerns [merged]

in Account & Technical Support

Posted by: Sigil Baram.8561

Sigil Baram.8561

As a side note, I’m sort of surprised that the system would send to you for a dynamic IP situation, since the IP would still be in that same location. I had believed that an IP at 12.34.567.890 would be considered “the same” (geographically) as 12.34.567.9. So I rather believed that a player would not be asked to authenticate every time.

I can only speak for German users, but our biggest ISP (>10 million customers) allocates addresses from several completely different subnets on every reconnect.

Thank you for that insight, Iruwen. I was not aware of that.

Ummmm…. The US is like this too…. Static IP addresses are an optional service that cost extra money…. <.<

Almost every home user has a Dynamic IP address. This system is horrible because of that fact. The “remember this network option” should be disabled because of this fact. You are having people save random IP addresses that they probably won’t have next week, if they even have it tomorrow, and that they won’t ever have again. Even inside a statically laid out private network, IP addressed do NOT equal security…. It is mildly disappointing that ANet is unaware of this fact despite their otherwise amazing programming.

There should be some sort of system that registers the actual computer or the client rather than the IP address, such as whatever system Valve uses for Steam. I can log into Steam on my desktop and have to authenticate it then log onto my laptop from the same IP address 2 minutes later and have to authenticate that computer, but it remembers those computers, not the random number I was borrowing from my ISP at the time…. This is identical to the current system except for the fact that it remembers the computer rather than a random number borrowed from an ISP, which means it is both less annoying for users and potentially more secure, since you aren’t whitelisting number that don’t belong to you in the first place.