Coin Lock goes into effect 3/17/2011

Ren54

http://forums.riftgame.com/showthread.php?127127-Account-Security-Discussion

 

Hi everyone,



If you have been reading the forums it’s hard to miss the many discussions on compromised or “hacked” accounts. We have been investigating the causes and individuals behind these attacks and, as mentioned previously, are taking steps to protect you against them.



One step we are taking is implementing the “Coin Lock” feature tomorrow (3/17/11). This feature is automatically enabled should your account be logged in from a significantly different location or computer and prevents unauthorized individuals from selling your items and money.



Should you log in from a location that enables Coin Lock on your account you will be able to easily disable it via a code that is automatically sent to your email. Simply copy the code, locate the “Coin Lock” icon above your Hot Bars and enter it when requested. For more details on coin lock please see the full announcement: Update on Hacked Accounts. We’re also happy to say that, starting tomorrow (3/17/11), reporting mail spam will ignore the user and individuals on your ignore list will no longer be able to send you mail, thanks for your feedback on this issue.



While only a small fraction of our players have had their accounts compromised they are our highest priority and we know the frustration and confusion it can cause when it happens to you. As we have seen in other games, those responsible for these attacks will always be driven to do so as long as selling game currency, items, and characters remains profitable.



These individuals and groups have been accumulating account and email information spanning across the industry for as long as there has been one and their efforts continue to become more coordinated. As such it is very important that the password you use to access RIFT is unique and, most importantly, not shared with the email account associated with your game account.



Here are some quick tips to using a secure password:

• 
  Make sure your password is unique and not used with other games, RIFT related websites, or your email.
• 
  Use a combination of upper and lowercase letters, numbers, and symbols.
• 
  Increasing the length and variety of your password can increase security. Shoot for at least 6+ characters.

These attacks are client side and can be indicative of invasive programs being installed without your knowledge. Never click a link that advertises selling (or free) RIFT Platinum or other game currencies and furthermore never click a link that you do not trust. Should you receive an email from Trion or RIFT, the address should only go to riftgame.com, trionworlds.com, or trionworlds.custhelp.com (our support center). To be safe we recommend copying and pasting the link from the email to your browser. Another indicator of a fraudulent email is poor grammar and misspellings. We do our best to write properly.



Should you discover your account has been compromised change your password immediately and contact Customer Support. While we are constantly expanding our CS team and working to respond to appeals as quickly as possible there may still be a significant wait and we are grateful for your patience and understanding while we assist others in queue before you.



We’re constantly working to improve account security and are looking into providing free authenticators you can use on your iPhone and Android phones as well as via text message in the future.



Thank you for your continued vigilance. We are committed to account security and want everyone to enjoy the game and will continue act swiftly against those who seek to disrupt your experience.



Please use this thread to discuss your questions or concerns and help us by passing the information on to your friends and fellow players across the game.

Last edited by Elrar; Today at 05:31 PM.

James "Elrar" Nichols

Assistant Community Manager

www.riftgame.com

marquisk2

I don't care what others say.  I like this because it shows that Trion isn't trying to get more money out of its players.  I'm glad they're trying to address the issue quickly as possible.

AceOfSpade90

Someone already posted about that, I think... but yeah, they really did something new that no other company has ever though about. Good for Trion. *clap*

Laughing-man

Originally posted by marquisk2

I don't care what others say.  I like this because it shows that Trion isn't trying to get more money out of its players.  I'm glad they're trying to address the issue quickly as possible.

implying authenticators make companies money?

I hope that isn't what you are saying because as many avid forum goers may know we've pretty much debunked that myth.

skeaser

Originally posted by Laughing-man

Originally posted by marquisk2

I don't care what others say.  I like this because it shows that Trion isn't trying to get more money out of its players.  I'm glad they're trying to address the issue quickly as possible.

implying authenticators make companies money?

I hope that isn't what you are saying because as many avid forum goers may know we've pretty much debunked that myth.

My battle.net authenticator is a free app on my phone, for example.

Golelorn

Originally posted by Laughing-man

Originally posted by marquisk2

I don't care what others say.  I like this because it shows that Trion isn't trying to get more money out of its players.  I'm glad they're trying to address the issue quickly as possible.

implying authenticators make companies money?

I hope that isn't what you are saying because as many avid forum goers may know we've pretty much debunked that myth.

Dream on.

Panther2103

I just like that they are implementing a free anti hack thing that will actually work.

marquisk2

Originally posted by Laughing-man

Originally posted by marquisk2

I don't care what others say.  I like this because it shows that Trion isn't trying to get more money out of its players.  I'm glad they're trying to address the issue quickly as possible.

implying authenticators make companies money?

I hope that isn't what you are saying because as many avid forum goers may know we've pretty much debunked that myth.

I agree with this blogger's post.

 

http://daeity.blogspot.com/2011/02/profit-from-blizzard-authenticators.html

 

They definitely make some kind of money with the bulk prices for each individual thing.   Also the iOS free version wasn't out until way later, and not everyone has an iPhone.

TribeofOne

did they ever define  "significantly different location"?

Qazz

People that teleport on a regular basis won't be pleased with this change.

RemyVorender

This is really good news. Let's hope those that have gotten hacked get their stuff  back soon, so we can all just get back to the fun and stop worrying about those worthless farmers.

dracomun

Originally posted by Panther2103

I just like that they are implementing a free anti hack thing that will actually work.

 

Assuming the persona ccessing your account had you keylogged he/she probably has access to your email and can easily obtain this code with minimal extra effort.

MNZeba

Originally posted by Qazz

People that teleport on a regular basis won't be pleased with this change.

Why would they not be pleased? All they would have to do is go into their email get the code and register. They would only have to do this once in every place they go.

Laughing-man

Originally posted by marquisk2

Originally posted by Laughing-man

Originally posted by marquisk2

I don't care what others say.  I like this because it shows that Trion isn't trying to get more money out of its players.  I'm glad they're trying to address the issue quickly as possible.

implying authenticators make companies money?

I hope that isn't what you are saying because as many avid forum goers may know we've pretty much debunked that myth.

I agree with this blogger's post.

 

http://daeity.blogspot.com/2011/02/profit-from-blizzard-authenticators.html

 

They definitely make some kind of money with the bulk prices for each individual thing.   Also the iOS free version wasn't out until way later, and not everyone has an iPhone.

Yep I read that article back when he first posted it, he gives vauge numbers that have no links to the facts that back them up.  Also he makes a lot of assumptions, which we all know what happens when you do that.

To say that they don't make ANY money would be foolish, however considering that FFXI sells authenticators for twice as much as WoW does, I'm going to say that WoW does not make nearly as much a profit as all the belly aching conspiracy theorists would like to have you believe.

You don't get something for nothing thats for sure, but to suggest there is something nefarious about them selling a product for a slight profit is just silly.  The Blog poster needs a tin foil hat.

EbonHawk

Don't know if this will work or not.  All I know is the same douchbag is spaming my account with in game mail over and over again. and myself as well as others have reported this idiot, "fakeyou", but yet he's still around.  How he's not banned yet boggles the mind.  But oh well, I sure hope this works and does not affect or alienate actual paying customes.

...we'll see... and hopes for the best!

forinboy

Originally posted by TribeofOne

did they ever define  "significantly different location"?

I think the significantly different location would most likely be... something like... say.... maybe... China?

XforsakerX

Originally posted by marquisk2

I don't care what others say.  I like this because it shows that Trion isn't trying to get more money out of its players.  I'm glad they're trying to address the issue quickly as possible.

agreed totally, they could be dick's and make us pay for the protection like blizzard did

Laughing-man

Originally posted by XforsakerX

Originally posted by marquisk2

I don't care what others say.  I like this because it shows that Trion isn't trying to get more money out of its players.  I'm glad they're trying to address the issue quickly as possible.

agreed totally, they could be dick's and make us pay for the protection like blizzard did

Just like those evil companies who make you pay for Anti Virus protection, how dare they make you cover their cost of production and support their families.

Edit: Besides if you want to be safe you can be without an authenticator, on screen keyboard or cutting and pasting a password while using smart computer habbits and keeping and up to date Anti Virus software then you should never be hacked anyway.

AKASlaphappy

Originally posted by Laughing-man

 

Just like those evil companies who make you pay for Anti Virus protection, how dare they make you cover their cost of production and support their families.

Edit: Besides if you want to be safe you can be without an authenticator, on screen keyboard or cutting and pasting a password while using smart computer habbits and keeping and up to date Anti Virus software then you should never be hacked anyway.

 

I find it funny that you compare companies that make antivirus software to Blizzard making an authenticator.  For one thing, that antivirus you are using to protect windows is not being made by Microsoft. They are 3rd party corporations that are making software for windows clients. The only way that analogy makes since is if the authenticator was made by a different company to help secure blizzards product. That is not the case, Blizzard made the authenticator to help make security better for their product and charge you $6.50 to purchase it from their store. Your analogy would be correct if Microsoft made an antivirus and then charged you to use it. Guess what Microsoft did make an antivirus software and it is a free update, they do not charge people to use it, in fact you can go to their security essentials download and get it for fee. What a novel concept a company actually supporting their product and making updates to make it better, and not charging for it.

 

 

But apparently Microsoft is wrong and they should have charged people to use. Apparently people like Laughing-Man here would think they would have been justified in doing so. So listen up Microsoft remove this free antivirus and start acting like the big boys (Blizzard) and start charging for it. Symantec charges $39.99 for a year; I expect to see at least a $29.99 price tag on your Antivirus by tomorrow.  

 

In all serious I wonder how many Tech Geeks would be up in arms tomorrow if Microsoft started charging for the security essentials download. The irony is Blizzard is doing it, and no one really seems to care. Can we say we as consumers are a bunch of hypocrites!!

Sanguinelust

At the height of my WoW playing I had 2 accounts, both of them have been hacked once each. The frist one, my main account, got hacked because I was dumb and followed a link outside of the WoW general forums, there was a description of a picture and when i went to look at it, it wasn't at all what the post described. I figured some dumb kid posted something stupid and 2 weeks later i log on and all my toons were naked. My fault for being dumb. I did get some of my stuff back and they gave me extra gold for the stuff they could not get back.

the second account got hacked through some chinese bastard hacking the gmail account I only used for that account. I didn't frequently look into that account and one day I did and saw Bliz had banned me because of the activities done on that account. They hacked my gmail account, re-subbed to that account, and got banned. Well I got that account back and a bunch of farmed high priced crafting materials, so I win on that one but still it is annoying. I took 2 tton from this account and transfered them to my main, iphone authenticator account. Cost me 50 bucks.

I'm really happy to see that Trion is doing something to try and stop this sort of activity from happening but what's going to happen when the bastards start hacking my email account for the unlock code?

I hate hackers

AceOfSpade90

Originally posted by Sukiyaki

I can see it now:

Players e-mail account will be pished/keylogged either for the code and they keep crying about their game account to be "hacked" and the coin lock doing nothing, because they are too smart to be pished/keylogged.

Their objective is to protect their game... not the e-mail account you use. That is a problem for the e-mail server admins, not Trion's problem.

Trion doesn't care if you use a hijacked e-mail adress, they care about the game. For them, they fixed the problem, and I see they did. If you have a bad e-mail address, too bad because it ain't trion's department to check your personal e-mail account and server for hackers... unless you want Trion's to sutenly "control" the hotmail/gmail/etc servers. It would be silly.

Amana

Please do not create new threads regarding account security when there is a stickied thread at the top for these discussions and other open threads on the subject. We'd like to keep information centralized and not spread out over many threads.