Introducing the Square Enix Security Token

[Araelus]

Then it works as social engineering to make them go outside. >_>

[Snprphnx]

kudos to SE for think of something... that has been out for years for business and trader accts. Next up, a new type of PvP, that looks a lot like WoW. And after that, an external macro system, for writing endless macros, kinda like windower uses.

But seriously. Its good SE cares, i may get one if the price point is reasonable.

To BG Moderators, can you turn this into a poll, for us to vote on how many will get?

[Tricen]

Awesome! These new patch updates and this is sounding out to be kinda good. But let's not get hasty in our assumptions

[orson]

Any bets on this only being sold through the EU and US based site? I hope it'll be available in other regions but I'm not holding my breath.

[Khajit]

I find it interesting that SE is able to make so many "awesome" update teasers each day with a month left before the patch. Normally you don't see anything remotely as good as what we're learning about until we're within a week of the actual update. Or at least that's what it normally feels like with the update notes for me.

[alabamahotpocket]

... unless the user is an idiot...

You call them idiots, i call them "people with less knowledge about computer security". And theres plenty of them out there, i see them every day.

In theory, theres no difference between a keylogger that steals passwords and a trojan which executes a set of commands to steal your in-game items/gil. They both are installed on your PC without your permission, and end result is same: you lose your hard earned items/gil.

While your account password is safe with Security Token and SE dont have to deal with recovering accounts anymore, in-game transactions between different accounts are still not protected.

every plugin through windowers website is gone through with a fine tooth comb by the lead dev, if you are downloading 3rd party plugins and tools without verifying the creator first you deserve to get your shit hijacked

Ive been windower user since juni 2005 and i respect its devs. They been doing great job. I only used LL as example because of its name and the original author. Maybe i should have used NASA instead, but im not sure how it works. If its true that it modifies packets sent to game server like its been discussed in other threads, then hijacking items/gil from NASA users would be possible without even opening the trade window.

Anyway, there are still big money in RMT and RMT companys are getting more advanced. They now hire experienced programmers to develop tools to steal players items because thats alot more effective than leveling up high lvl farming characters that get banned anyway.

[Reapz]

I guess it will be worldwide due to being posted on the EU POL etc, but I imported FFXI from US so would the EU token work (haven't read through posts if this was already said sorry!), many questions

[Yugl]

You could just call the person and ask them to hit the button to give you the PW that displays no? If you're going as far as to give someone your account, you might as well get their number too.

[MaachaQ]

Any bets on this only being sold through the EU and US based site? I hope it'll be available in other regions but I'm not holding my breath.

I'm sure within days of release people in the areas that SE is able to ship to will be reselling these to places that SE does not ship to (Canada being a prime example). If the cost is really less than $10 from the official site, you can probably expect resellers to be doubling that and still being able to sell them easily.

Not sure they'll have the limit on how many each person can buy like they did on the Tidal Talismans... they may have to if their supply is limited and they don't want resellers to get them all before regular buyers do...

[Araelus]

Since it's available "for purchase through the PlayOnline Viewer" I imagine reselling won't be possible.

Or at least they'll only sell you one per account.

[Ansems]

I can put it on muh key chain!

[Attila]

I would pay double for a usb attachment so I don't have to manually enter it every time I log back in.

Note that is is a SE online security token and just not a FFXI one. It also says it will be used through playonline. I bet they are adding this exclusively for preparation for rapture but they might as well get it out there now since rapture is a year away from any serious release. They just blatantly stole the idea from blizzard anyways so it would not have been hard to implement.

For me this pretty much confirms rapture will go though playonline. Hopefully we will get a playonline over haul though.

yeah, obviously b/c blizzard did it first, they are ripping them off.

[Sykes]

yeah, obviously b/c blizzard did it first, they are ripping them off.

Not really "ripping them off," but they were certainly inspired by Blizzard's move. They even specifically referenced that they were looking in to the technology used for the Blizzard Authenticator when they were questioned about account security during the 2008 Premier Site Summit. Besides, the device pictured is a Vasco Digipass Go 6, which is the exact same key fob that Blizzard uses.

[Seraph]

You call them idiots, i call them "people with less knowledge about computer security". And theres plenty of them out there, i see them every day.

Using a computer without knowing how it works or the ramifications of what you are doing is just as stupid as using anything else and not knowing how it works. Sugar coat it and call it 'less knowledge', 'ignorance', or whatever. A rose by any other name...

[Snowknight26]

All you need is the private key and then you're home free.

[Moosey]

yeah, obviously b/c blizzard did it first, they are ripping them off.

Even if it is "ripping it off", it's a very good idea, so why not use it?

[Yugl]

Using a computer without knowing how it works or the ramifications of what you are doing is just as stupid as using anything else and not knowing how it works. Sugar coat it and call it 'less knowledge', 'ignorance', or whatever. A rose by any other name...

It's kind of like how people play a game without knowing the ramifications of breaking the rules, then bitch when the rules are enforced right?

On a more relevant note, I never heard of Noscript until I read about it on this forum. Obviously, some of you are too distant from reality to realize that such information isn't always publicly known.

[mackerel]

Humanity is working around the clock to build a better idiot.

I still have yet to hear a realistic example from anyone on how this new security measure could possibly backfire, unless the user is an idiot. The only thing I can think of is eventually the battery life of the key will die, or will eventually be lost to hardware failure. Even then, it should be fairly easy to get a new one. Plus, if this system is too potentially inconvenient for some people, you don't even need to get it.

Forget stupid Pandy Warden PR announcements. SE just needs to keep doing stuff like this to keep in the good graces.

Given that we're working with Square Enix, here's how the system will break. One day after logging in, you'll put your Secure Login Token in your pocket instead of back in your fireproof safe. While on your way to save a small child from a burning building, you'll rescue an old lady from an onrushing 18 wheeler. In the process, your Secure Login Token will fall from your pocket and be crushed. You'll rush home and log into PlayOnline to report your token lost or stolen, but you'll be unable to log in and experience the 15 layers of confirmation screens since you no longer own a working token. You'll call SE for customer service, but since the unfortunate event happened at 5:01 on a Friday evening, you're stuck until Monday, at which time you'll be required to provide your name, address, credit card number, maternal grandmother's first grade teacher's place of birth, registration codes, and a subpoena from your local and state police departments. 6-8 weeks after they receive that information, they'll email you a form to have notarized and mail back. Within 3 weeks of receiving your notarized form, they'll email you a one-time login password, allowing you to log in and explain the situation to a GM, who will then refer you to the Information Center.

[shaddix]

Using a computer without knowing how it works or the ramifications of what you are doing is just as stupid as using anything else and not knowing how it works. Sugar coat it and call it 'less knowledge', 'ignorance', or whatever. A rose by any other name...

stupid != ignorant lulz.


Also, I'm buying one of these. I'm thinking of how to hold onto it though, maybe velcro to pc display? I lose things far too often and wouldn't trust it on a keychain.

[Spira]

You call them idiots, i call them "people with less knowledge about computer security". And theres plenty of them out there, i see them every day.

In theory, theres no difference between a keylogger that steals passwords and a trojan which executes a set of commands to steal your in-game items/gil. They both are installed on your PC without your permission, and end result is same: you lose your hard earned items/gil.

While your account password is safe with Security Token and SE dont have to deal with recovering accounts anymore, in-game transactions between different accounts are still not protected.



Ive been windower user since juni 2005 and i respect its devs. They been doing great job. I only used LL as example because of its name and the original author. Maybe i should have used NASA instead, but im not sure how it works. If its true that it modifies packets sent to game server like its been discussed in other threads, then hijacking items/gil from NASA users would be possible without even opening the trade window.

Anyway, there are still big money in RMT and RMT companys are getting more advanced. They now hire experienced programmers to develop tools to steal players items because thats alot more effective than leveling up high lvl farming characters that get banned anyway.

RMT are also profit driven.. if a particular game is becoming too much of a hassle to earn virtual currency to sell to others, and the 'exchange rate' isn't that great away, they can always switch to a more profitable game - it makes sense that buying the reg codes on a game for multiple terminals is cheaper than hiring a programmer to hack for them (then again they could also just trains someone within to do it, but that takes time). With some games all you need is time and 1-2 characters and you could be earning the big bucks - huge payoffs for less effort/time.

Lets face it, FFXI isn't the most popular MMO around, but it does have one of the most aggressive anti-RMT teams working on it. As new MMOs spring up and get more popular, and the demand for FFXI in general declines, there will be less of a market for RMT here, and more elsewhere, so they'd naturally gravitate to those games which might be easier to profit in than this one..
this doesn't mean we'll never see RMT here anymore tho.. they might still operate here since less RMT work here, the demand for gil buying, or 'exchange rate' increases and they have less people to compete against for gilselling.. but if SE is aggressive enough, they might just give up entirely..
its all about economics..
FFXI is the industry for 1 good - gil
Gilbuyers represent the DD
RMT represent the SS
and SE is the government that taxes the RMT very heavily every one in a while... something like that