Endless Comic!

Endless Comic!

Wednesday, February 6, 2008

Re: February 5, 2008:Password Recovery

As stated on the EO Report, i decided to public post my reply on my blog. :)

Original Post (http://www.endlessreport.blogspot.com/):

You guys know that I'm against bringing back password recovery right?I mean, I'm a big fan of Nezlo and all but I just don't agree for a number of reasons.

1. If you've got a level 30 account and you've forgotten your password you're an idiot. How many times would you have to enter it on the way to level 30? I'm not even level 20 and I've entered mine thousands of times. If you've got a level 10 then it doesn't really matter. You can get it back in a couple of weeks. Write the damned thing down if your brain cells are destroyed by pot.

2. If you've lost your account because you've been scammed/"hacked" then you don't deserve to get your password back. Sorry. Everyone who is hacked, keylogged, or scammed deserves to lose their account. The official rule of Endless-Online regarding hacked/scammed accounts is that IT'S YOUR FAULT. You should know better. And if you don't know better -- well now you do.

3. Password recovery has a huge security issue connected to it that allowed certain players to perform a SQL Injection and actually hack accounts. That's why it was brought down in the first place. If Vult-R brings it back then everyone is at risk -- no thanks.

4. Password recovery also allows account scammers to sell their accounts and reclaim them later on. Selling them again and again. Once again -- no thanks.There are NO legitimate reasons to bring back password recovery. If you are too stupid to write your password down, keep your computer safe, or guard your personal information then you don't deserve your account back.

Password recovery is a bad idea. It's always been a bad idea. Don't bring it back.

Period.


Wikky



Well, my reply is this:

I Agree to most of the points thats Wicky made, but I do NOT feel it is always the player's fault that they have lost thier account.

Case and point:

Linkfan was hacked and deleted in v.22. I did not download anything relating to EO, i didnt even go to any websites relating to EO (besides the EO main page); hell i didnt even go in the forums much if at all. Yet, i was still hacked and deleted.

But; That was over a year ago, i managed to get into contact with Vult though Aengie, and we had a meeting, and remade Linkfan on my new account (My current one), with 40k gold, my title, and most of my exp (about 50k less exp, to even it off at 100k) I was off the top 100, but i had Linkfan back.

But like i said, this was a long time ago, and with EO in the trashhole it has been for the passed few versions, Vult and the other Admins do not have the time of day to help players like this (I priorly knew vult, so he knew i wasnt really lying)

So with this; comes my solotion. Keep password recovery gone, it poses too many risks for EO to help the few people who lost account is beyond their control, or accidently lost: (ie. my friend recently lost her account durring changing her password, she typoed twice and has no clue what it is now) And of course, Avamay's account which was lost for unknown reasons, like mine was.

Okay, but for those who DO lose their account, there should be a solotion, possibley a better way to get in touch with an admin, like I had. But we need to wait for EO to calm down cheating wise for this to happen; Or more HGMs to be instated, along with more GMs and LGs, this has been an issue for a long time, the password recorvery is just another way it is hurting EO.


~~Linkfan~~

6 comments:

Nez said...

Ahh nice post and well stated, I agree Vult-r needs to make/fix the recovery, It's not that hard to do, Hell I could make one myself that doesn't have flaws like the old one but that's EO for ya =\

Anonymous said...

Why dont you try to make one, and submit it on your blog as a possiblity? I mean, it obviously wont work and recover passwords, because you dont have access to those files, but you can make a consept file maybe.

Nez said...

Not my responsibility, I am way too busy for that lol, I'm already doing the blog to help out and run a nice cheater free guild.

Trust me, Vult can make one very easily if he wanted to, Not sure what he's waiting for.

Anonymous said...

If they get password recovery back it would be a good idea to have an email confirmination.

Anonymous said...

Maybe he is just waiting for a new version, or just the time of day. You know how it is, you keep putting off the simplest thing that will take the shortest time, to do things you see as more important.

Thaiger said...

What happend to you, Linkfan, is exactly what happend to me. I've not visited any websites besides Wickedfrost, Nezlo, and your blogsites and I was still hacked. I think the main problem is that there are not enough admins to look into this kind of problem and help find a solution for people who have actually lost their accounts due to hacking. This is yet another growing problem with EO because alot my own friends have been hacked in the same fashion and, because of this, have quit playing Endless altogether. Maybe someone here can get Thaiger back to me if it's not too much trouble. ={