Retail Security Concern

[atom0s]

Hello everyone,

I am making an announcement in regard to a major security vulnerability I have recently discovered on retail that can affect literally every single player. At this time, I will not be disclosing the vulnerability publicly, but do wish to help ensure the community is safe the best I can with what I can share at the moment. Due to ongoing issues with getting into contact with `Square Enix`, I feel it's best to still inform the community of measures you can take to help keep your account(s) safe.

If you have ever shared your account with anyone, regardless if they are a friend or family, or if you have purchased an account from another, then I highly encourage you to specifically change your `PlayOnline Password`. Regardless if you have recently changed your `Square Enix` account password, this is critical. Also, even if you have a One-Time Password / security token connected to your account, your account is not safe from this vulnerability.

You can log into the `Square Enix` account management portal to change your password by visiting the `PlayOnline` website and clicking the `Square Enix Account Management System` button at the top. From there you can log into the SE account system and navigate to the proper page to specifically change your accounts `PlayOnline` password. I encourage you to do this for all accounts you have/use.

If you are an employee with Square Enix, part of the Final Fantasy XI development team, or know someone that is; please get in touch with me via direct messages. I am working to get in contact with the proper team to report these issues in full and get them addressed as soon as possible. While I have reported the issues to SE already, the means in which that they offer so far are less than stellar in ensuring they reach the proper people.

[Prothescar]

I've forwarded this to someone at SE.

[atom0s]

I've forwarded this to someone at SE.

Thank you. Was dealing with their email and live chat support, which at first started out decent but turned into them shuffling/shift changing to another staff member that has told me to post the vulnerability public on the official forums.. I'm not doing that. So hoping to get in touch with someone higher up / part of the development team to get this fixed asap.

[Funkworkz]

I reached out to a few as well.

[atom0s]

Thanks as well Funk.

At this time, I have been informed that the appropriate parties are informed and involved now. While I have not been contacted directly yet, I will assume what I have been told is true.
Hopefully this is taken serious and resolved.