The issue as I understand it:
There are people out there with outdated Eqemu forum databases dumps with hashes of all the forum passwords. Any method of recovery has to take this into account.
Why not make a new form hosted on EQemu that for a short time will allow people to reassociate their loginserver account with another forum account? Make it last two weeks or a month to give everyone a chance and those who miss it, too bad (if you're that inactive does it matter if hackers control your accounts?).
Then after this grace period you can react whatever recovery method you want knowing most accounts are secured. Those who lost access to their EQemu forum account but still had access to their LS account have had a chance to get it straighten out.
I like the idea of e-mail being included someway in the recovery option but that's up to you.
Something as successful as EQEmu and P1999 really needs a password recovery option. I've lost access to one of my LS accounts and I cry a little every night thinking how much time I wasted that I can't recover. <-- Truth
|