Some sort of hacking prevention system.

Hey Sythe,

I was thinking of something that might reduce the hacking's on Sythe,
When a big trader gets hacked there are countless amount of victims and millions of gp's are lost. I was wondering if we could import something like JAG or the Facebook stuff on sythe. Like when you try to log in it monitors your IP and when it's diffident then your main one. Access will be denied until you enter your secret sentence that you need. ( the one you enter when you register on the forums ).

If one is not able to enter the sentence. The next time that person logs into his account from his main IP he'll get a screen or PM saying someone wanted to access your account from an IP in this or that country or state. Then you can choose to ban that IP from accessing your account for good. Or granting access so that you can use it without problems.

This is just a suggestion and I wouldn't really mind if it doesn't come through. ( which im almost certain of ) But I'm curous about you guys's opinion ;>

Thanks for reading,

Have a nice day.

 

there is SMS verification at the moment but only for mods :C

 

maybe they could implement this for all users?

 

Highly trusted users/OMM only would be better.

 

Yeah, not everyone has a mobile phone they can use.

 

This would be good, It's mainly aimed for the larger hackings like arcus isidar ans so.

 

I'd be fine with having a master pin kind of like how Liberty Reserve has. So when you change IP's, you have to enter the 3 or 4 digit pin in to access any kind of personal info, or to PM and post.

 

This is a very good idea, but at the same time it was Arcus's site that got hacked, irrelevant to sythe. Nonetheless some sort of thing along these lines should be implemented. It should be for all accounts in my opinion, there should be a phrase, or some sort of security question if a new ip is logged.

Something simple that can be done, but something a hacker wouldn't be able to get his hands on easily.

 

People don't want to have facebook shit attached to sythe. I mean theres maybe a handful of members who have my fb. I don't think this is anyhing that will happen ever.

I don't support. Hackers will hack no matter what, and we do have a way to trace ip's and we can tell if people who are hacked or if they are lying.

 

Sounds like a good idea to me (if it can be implemented that is)

Something as simple as a message and a pin number entered would be perfect.

edit:

Yeah, facebook isn't a good idea.

I don't understand why you don't support it though. The system could see when you login from a foreign ip and ask you for a pin verification. This could stop the hacking from taking place instead of figuring out later that it happened and paying back the money that someone scammed on your account.

 

It has nothing to do with facebook itself, facebook is just an example. as it shows what country the IP was from that wanted to access your account.

 

I would love a two-factor auth for OMM/Staff.

 

I simply support this because increasing the safety of Sythe's members is always a good thing.

It has to be simple and effective enough to implent though.

 

Why just OMM/Staff

wouldn't this be beneficial to everyone?

Agreed.

 

You do realise Arcus' sythe wasn't hacked, it was his website..

I would like to see this, but only for OMM's really as well as staff, it would take far too much effort for the average user, maybe high donators aswell. I personally use sythe on my phone so it'd cost me a fortune in verification SMS'.

 

Alright I think it should be available as maybe a donor rank? Like 100$? OMM's and maybe other mini rank holders?

Also It doens't have to be SMS, It can also be somethign you choose yourself on your main IP. like a password.

 

A second password or a set of 5 recovery questions, but 3 randoms ones appear each time would be a better system.

 

I agree.

 

You could be required to just input a 4-5 digit pin number if you log in from an unrecognized ip address. It doesn't really need to be a sms verification system.
It could be additional security that is optional for your account, and you would really only have to enter it once in a blue moon when you log in from a different ip.

 

This is perfect, also when you fail to do this. A PM will be send to the Sythe account regarding people wanting access toy our account.