Guild Wars 2

I have a feeling A-net is still making this harder than it needs to be. Email confirmation really could have prevented all of this.

So the Hackers can change out account information, but we can’t? Cool.

Does anyone know if Anet’s new security measures are active yet?

feyrbrand.9587:

lionspride.7596:

Thank you everyone for your efforts to keep this post going and making valid points.

Early this morning my account was restored, just over 36 hours after reporting it stolen.

Despite losing all of my gems, money and items, I at least have regained control over my account. I am grateful for the timely assistance that was afforded to me.

While I feel that ANet still has a long way to go to improve the account security for its users, I hope that those measures being alluded to are implemented sooner rather than later.

what about all your equipment? were they not soulbound?

They probably just vendored or deleted all of his gear. Not like the a-hole who stole the account had any use for it.

I quote my friend (whom I refer to on my post ‘On behalf of my dear friend’).

“Someone needs to get whacked with a fish for overlooking something this dumb.”

“Even the F2P games have this security, why would you just decide to throw it out?”

Ritz.6597:

What if the policy was to require a confirmation from the pre-existing address

This has been what I have been saying! Also, the post ‘Hackers and You’ I (and other people) have said the same thing.

This has to be a bad joke, I keep telling myself.

There is no confirmation for changing an email either, I may add.

In every website or game I have ever been apart of, there is a security question involved in changing major pieces of information, or there is an email confirmation. In your present system, there is neither and it allows for the hackers to take COMPLETE control of the account without the user being able to do anything about it.

In everything I have ever been familiar with, the most a hacker can do is change your password and steal all of your stuff. Now, they can even seize complete control over the account by changing the email and log in name. I respectfully don’t understand how you do not realize this.

P.S. I would like to add, that if either of those systems were implimented even if hackers could ‘hack’ your account, you would not have tickets and posts from people to ‘PLEASE GET MY ACCOUNT BACK, I haven’t been able to play for a week’ you would only get ‘where is all my stuff I was hacked’. If you had systems in place, the users could fix most of the issues them self.

Literally, if you knew a friends account information and one day decided you hated him, there is nothing they can do. I still don’t understand how you can allow someone to change your email without confirming it via your old email. Or changing your password without answering a security question. I figured that was a universal rule of making websites. I mean 5$ forums that you can buy off cheap websites have that.

I would also like to add, despite the fact I like the confirmation system on logging in from a new location. That REALLY doesn’t help him when they logged into the site first, and changed his email to their own. That part by the way, does NOT require confirmation. I am only asking for a fix Arenanet.

On behalf of my friend whom I am currently talking to via Skype. Why on this God’s earth has Arena-net not implemented a system that you need to CONFIRM via email a change in email. If I have got this straight, you need only the username and password to permanently steal an account.

I don’t mean to be rude, but the pain and hurt that every single one of the people’s accounts who have been hacked, which is an act of CRIMINAL THEFT could have been prevented by any system in place that required a security question, an email confirmation, or could at least be reverted through a process via phone line in which they personally confirm their identity.

I absolutely love this game and this company for the product they have put out. But why in the hell have you allowed the weakest system of protection available on the internet to be present for your new blockbuster game. I am calling you out on this Arena-net. You have the power to fix it. Please do!

Edit:

IN SHORT:

Problem:
You do not need to confirm change in password or change in email. If your email get’s changed it sends your old email a message to the affect of, ‘Your email has been changed, I hope it was you.’

Question:
I’m sorry this is okay how Arenanet? This allows a thief to obtain COMPLETE control of your account, instead of having a security question or confirmation email to prevent account theft. Account theft (its entirely gone) and account hacking (my stuff is gone) are two different things!