Introducing the Square Enix Security Token

[sleekmotorwurkz]

how is this gonna work though??
like is there gonna be an option on your POL account to click "yes" to Square Enix Security Token " and then enter password... i dont get it lol

I would assume if your account has the security token active, you have to put it in

So whats the story with this.. im at work and cant get onto POL. Is it available now? coming soon? date?
edit: Nvm i got so excited I didnt read the whole post.

[dejet]

get this for my main acc if they can keep it at a ok price... sadly my 2nd acc is a shared one(that i dont give 2 shits about its a nude 75 rdm that was given to me) with my co leader. but hay my main acc that i care about can be safe now^^

and if RMT somehow find a way yo crack this i hope to hell they tell me so i can crack the ones used for banks like my mom uses lol. ]

if they found a way to break into this system, they would not be going after FFXI accs worth like at max $2,000 lol

[avelle]

I'm really surprised it took them this long to do this, given all the account hackings and such that went on last year.

[Hanyoko]

I'm no security expert, but I wonder how much more secure this is then a dongle. The dongle would have a serial number that you would tie to your account. Since SE made it they would know the encryption/decryption keys for a given dongle. Thus when you login the server sees that this is a Secured account and requests a Verification. PoL then asks the dongle for a 'thing' and passes it to the server; the server decrypts/verifies and returns something encrypted. PoL receives that reply and runs it through the dongle to decrypt modify in some fashion then encrypt the results. This is returned to the server and if everything checks out lets you login.

[Achika]

I've skimmed a bit of this thread, but I see a lot of complaining. It's optional, if you don't want it, don't get it. Don't come crying here later because your account got hacked because you didn't feel this was worth getting at all.

I have one for my WoW account. I haven't invested near the amount of time into my WoW chars as I did with my FFXI chars. For a basic explanation of how it works, at least for the Blizzard one, you get sent the device, and you have to log in to your account management. There, you add the authenticator with a code on the device that's unique to the device.

When you log into WoW, it gives a prompt for the code from the authenticator. You press the button, it gives you a six digit code, and you enter that into the prompt.

With the WoW one, you can use it for multiple accounts. From how the SE one sounds, you may have to get one for each of your accounts if you have multiple. Honestly though, with the amount of work I've put into my two accounts? Hell yeah I'd buy two. I'd buy two even without the in-game gift.

For people worried about losing it, I keep mine on a bright yellow lanyard. It's not on the same one I keep my keys on, in case I have someone else's keys. I play at work, and I keep it on my neck, tucked into my shirt, once I got into the habit of remembering to grab it. It stays there until I get home, where I make sure it's either in front of my keyboard, or on top of my tower.

When I was sick recently and unable to get to my computer often, but could get to another computer that had WoW on it, I had to get someone to get my authenticator if I left it by either computer. After awhile, I kept it around my neck all day at home except when I was sleeping or showering. It worked fairly well for me.

[dejet]

no one is mad about the in game item!?

SE should make it like a rid or a D ring so people have to get it...
anyone who gets hacked after this is added its all you then.

[Aesctaa]

Looks like a VASCO unit, i believe they are sole producers of the WoW equivalent also, which has been in extremely high demand since its release.

As far as the system is concerned it is for all intents and purposes proven 100% secure, but knowing SE they will be slow as fuck processing linking accounts and dealing with people that lose them.

[dejet]

so can we make a thread now that says

"i lost my Security Token. ;; goodbye FFXI"

[Devek]

I'm surprised no one (as far as I can see) has mentioned the ramifications of this device. As a security measure this is an amazingly good step by SE, but A LOT of people share account info within LSs. If you get this for your account NO ONE ELSE can log into your account without YOUR key chain.

Brilliant move by SE, a little late in the implementation but sucks for those who want to share their accounts with friends.

I'm pretty sure people are smart enough to realize the "ramifications" of getting this device.

If a friend needs to use my account, they can just call me on my cell phone and ask me what my password is. If you're not on good enough terms with someone to, I don't know, talk to them on the phone at least... you probably should not be letting them use your account anyway. People tend not to jack your stuff when you know where they live.

[Cloudius]

I have the PayPal RSA token (just a rebranded Verisign one) and I love it. It was 5$, I hear the Blizzard one was 6.50$. Cheap enough that you can buy a few, and authorize multiple ones (this would allow you to dualbox a friends account who has one) if they follow the PayPal token model.

Doesn't SE's store has a 23$ minimum? I remember I read that somewhere here.

[Bingbong]

The big hangup, imo, is going to be price. Where does the cost become prohibitive. For me, I think anyway, the magic number is under 10 bucks. It concerns me though that they show off the product, and they don't mention the price. The car commercials that employee this strategy are usually the type of cars that if you have to ask the price, you aren't buying one anyway.

[Arthars]

:O Spira your a SG too?

nice work on your ZNM and Stronghold BCNM chart, i like it and using it hehehe

Yea i prefer SMS 1 time p/w as well, cos carrying this device around for internet banking is retarded.

i believe if you wanna play FFXI outside home, the best bet is turn off the token option(if any, oh yes please have it tbh) so you dont have to bring the token around and risk losing it.

honestly if the ingame item is good, ima get it

Defending ring sounds right for this token. DEFEND YOUR ACCOUNT!

[fantasticdan]

So what happens when somebody buys one of these security tokens for a stolen account?

[Arthars]

wtf?

i believe you buy this thing, then tie it to your acct on POL before it work

either that or i dont know what you saying XD

[Devek]

Normal account recovery procedures would take place, just like someone stole your account and changed the password.

Losing the device would be handled just like a lost password.

The one thing SE needs to do also, is give us a way to opt out of having our personal information available from within the playonline vieiwer. I hate the thought of someone hacking my account and finding out where I live and potentially be able to use that information to jack my account again from me later through an account recovery procedure..

[dejet]

So what happens when somebody buys one of these security tokens for a stolen account?

this could cut back on the selling and buying on accounts(however who knows it might make selling accounts safer really) you could have one, and then link it the second you get the acc info? idk it wont do much for selling of accounts people will do it.

[nivlac]

guess the only problem i see with this is... if any of us tend to lose important things .. wouldnt be a good idea to get this lol. or are accident prone , like spilling coffee all over the place, or have kids that like to flush things down the toilet lol, again wouldnt be a good idea to get this xd
but if you are not one of those, get it, NO hacked accounts ftw :D

[ninjafox]

I use these at work. The token will be tied to your user account. If you lose it they can either disable it or unassign it from your account and provide you with a temp token number until you receive a new one provided you provide them with some information verifying that you are who you say you are.

[fantasticdan]

wtf?

i believe you buy this thing, then tie it to your acct on POL before it work

either that or i dont know what you saying XD

I mean like player A doesn't have one of these dongles for his account. Player B steals player A's account, and buys one of these dongles to try and 'defend' the account from being recovered by player A.

Normal account recovery procedures would take place, just like someone stole your account and changed the password.

Losing the device would be handled just like a lost password.

The one thing SE needs to do also, is give us a way to opt out of having our personal information available from within the playonline vieiwer. I hate the thought of someone hacking my account and finding out where I live and potentially be able to use that information to jack my account again from me later through an account recovery procedure..

Well that's how it should work, but SE is also retarded. I can see them not having the proper measures in place to deactivate these through customer service when they first start selling them. Ideally only the original owner would be able to buy one of these in the first place, but again...

As for your address/information in PoL, you/they can only see your contact information or whatever it's called, which can be be 100% fake, and it can all be changed whenever except for the name. You/they can't see the billing address/name, which is the only thing that needs to be accurate, and AFAIK is the only info used by PoL for account recovery.

[barber2006]

Hopefully you don't need to registration codes to buy one of these.