What to do if you can't log into your account?

[myriverse]

Originally Posted by Kainzo [You must be logged in to view images. Log in or Register.]

I just hate that something so simple isn't possible.

From what I've heard, it's not as simple as you might think. I don't think passwords are stored in plain text, so much work needs to be done in order to retrieve them.

[tristantio]

Does the login have a limit to failed attempts?

If not, seems like you could figure it out.

Non-plain text password is a good thing, but I wonder how complex the password that is stored is?

Even if they didn't want to spend the time creating a reset password process to change the pass, giving us the crypt used to create it (or hash+salt formula) and the encrypted pass itself, would allow someone to easily discover the plain text pass they used initially by running it through something.

[loramin]

I don't think it's the technical difficulties. It's true that reading a hashed password is really hard, but replacing one hashed password with another (ie. changing your password) is really easy.

The hard part (and I imagine the reason the staff won't do password changes until that cellphone thing is ready) is making sure you're supposed to change the password. After all, I could just say "hey GMs , that account of Bob's is really mine; can you change the password for me?" and take over his account. Unless the GMs know for sure that I'm the owner of the account (ie. if I can shoot them a text message from a phone they know owns that account), they don't know whether they're helping a forgetful person or a malicious scammer.

Technology = easy ... it's the humans that are hard.

[Ele]

If you petition on the forum nicely, you might be able to get them to reassign the name and guild leadership on a new character under the same Emu account, but separate login account.

Your other stuff is lost for now though. [You must be logged in to view images. Log in or Register.]

[loramin]

P.S. You would think that you could verify people with email, but email itself can be easily hacked (see: Sarah Palin's email a few years ago). Regardless of whether email actually gets hacked or not, the devs would have to deal with people claiming that their email was hacked, and I imagine that could easily become a nightmare as it ultimately boils down to a "he said, she said" situation.

They avoid hours and hours (if not days and days) of CSR work with their current policy.

[Kainzo]

Originally Posted by loramin [You must be logged in to view images. Log in or Register.]

P.S. You would think that you could verify people with email, but email itself can be easily hacked (see: Sarah Palin's email a few years ago). Regardless of whether email actually gets hacked or not, the devs would have to deal with people claiming that their email was hacked, and I imagine that could easily become a nightmare as it ultimately boils down to a "he said, she said" situation.

They avoid hours and hours (if not days and days) of CSR work with their current policy.

Yeah, understandable - I guess I just don't have it in me to re-level and rejoin P99 heh

[baalzy]

I wonder how Rog would feel about someone trying to brute-force a LS password lol.

[Kainzo]

Originally Posted by baalzy [You must be logged in to view images. Log in or Register.]

I wonder how Rog would feel about someone trying to brute-force a LS password lol.

Has already happened... heh

[Swish]

Originally Posted by Fame [You must be logged in to view images. Log in or Register.]

[You must be logged in to view images. Log in or Register.]
[You must be logged in to view images. Log in or Register.]
[You must be logged in to view images. Log in or Register.]

[You must be logged in to view images. Log in or Register.]

[Quineloe]

Originally Posted by myriverse [You must be logged in to view images. Log in or Register.]

From what I've heard, it's not as simple as you might think. I don't think passwords are stored in plain text, so much work needs to be done in order to retrieve them.

there not being a way to reset the password tied to a specific account is pretty much amateur hour, though

But this basically is an amateur project, soooo...

choose passwords you can remember. Write down what you can't. I hate pretty much everything that is related to passwords, but don't let that get the better of you. I didn't play for 4 years and I was able to log in, because master password for everything.

Also, is there really no email account tied to our eqemu accounts?