Dura Lex

[Trenial]

brute forcing is easily caught. and easily flagged.

[Orcling]

brute forcing is easily caught. and easily flagged.

That too. Account security is a player problem that dev's shouldn't involve themselves with.

[Cheena]

Well maybe I lack some informations about how to hack an account (I certainly do actually, I never damn tried to do that) but I witnessed several people getting hacked on other games, after leaving those games ages ago and never sharing their accounts. I don't see why it couldn't be the same here and sharing the accounts just makes it more complicated for the devs to find out if there is a real hacking problem or not -_-

[Orcling]

after leaving those games ages ago and never sharing their accounts.

They probably used the same account names and passwords on different games, or servers of the same game. It doesn't matter how folks got their passwords. But you never get 'hacked'. Don't use that word. The fault lies with the player, always.

Use a different password for every account you own, on every game. Make it a relatively complex password or something so absurd no one will ever guess it. Change it regularly. You will never get 'hacked' if you follow these simple steps.

[MagicManICT]

If you want all the benefits of having alts, put in the work for them or only share with people you really trust to not cause issues.

So you can accountshare and everything will be fine as long as no one complains about the sharing? Did I get that right? Y'all contradicting eachother, this is getting confusing.

Don't know. I'm just a volunteer here. That's what I'm reading in all this. (Apologies all around if it appears that I'm making statements otherwise.) Nobody complains, there's no reason to dig through the account logs. Then again, maybe there'll be those few hours to spare somewhere to create a bot to check and flag all of this one day and *boom,* you just got banned without anyone complaining about account sharing. Like all things in life that are grey, tread lightly. Just because it's being "lightly enforced" now doesn't mean it stays this way.

I think it all comes to resource management.
Do we prefer JC working on updates ? or him sorting account sharing/hacking issues ?

I think we can all agree on the former, though in the case of actual hacks, it should probably take the priority over everything, as if the hack is a real hack and not just a brute force pw attempt, it really needs to be squashed quickly.

As far as getting passwords stolen, yeah, we should all make better passwords, but no matter how good your PW is, it can still be randomly guessed. Part of that is making sure you avoid illegitimate websites, too, that exist strictly to steal passwords (like those "log into battle.net.abc123.za now to resolve a password hack attempt!!"). Teaching your kids how to be safe on the Internet is like it used to be teaching your daughter how to avoid the "bad boys".

[Feone]

Well maybe I lack some informations about how to hack an account (I certainly do actually, I never damn tried to do that) but I witnessed several people getting hacked on other games, after leaving those games ages ago and never sharing their accounts. I don't see why it couldn't be the same here and sharing the accounts just makes it more complicated for the devs to find out if there is a real hacking problem or not -_-

People always say they did nothing of the sort after they got hacked.
Most of the time they did it anyway.

For major games with millions of players random phising mails and general purpose trojans might even be used as well as info from breaches elsewhere. Simply because so many play(ed) them. Salem is not such a game, if anyone is going to steal an account it'll be targetted on a specific account or a phising website specifically made for Salem by someone who is really desperate for account info. In either case it can easily be prevented.

Going on an account deletion or banning spree over something as harmless as account sharing (harmless to others, not the people in question neccesarily) seems like an utter waste of dev time and a good way to punish people who don't much deserve it.

[lachlaan]

In the case of sites someone frequents that get hacked themselves, and are then infected with a trojan/virus/keylogger/what have you that dodges a player's antivirus protection, what actual defense should a player have? I mean I tried applying for tech savvy spider senses, but they denied my request. And just so we're clear, I'm not talking about pron, I'm talking about some of my habitually visited web-comic sites that often enough get infected. One day one such infection will elude my antivirus, same might happen to anyone else.

What I'm saying isn't that everyone should be allowed to call hax when it's convenient. But if you call hax and it turns out there's extensive proof your friend was allowed access by you to the account, then when JC unleashes his rage on you it's your own damn fault. Ideally, if you got screwed over sharing account info, suck it up and report nothing, deal with it and change password/email. If you feel like "tricking" the devs, feel free to report, ideally get caught and enjoy account deletion rage, because I don't want the purity patch pushed back on account of douches being douches. However if someone actually manages to get hacked, and with some of our backstabby players in-game I don't put that past anyone else, I feel the blame should be put on whoever is actively trying to sabotage someone else, not the person with less than optimal tech knowledge and AV protection. I mean I doubt anyone thinks Salem is mainstream enough to have phishing attempts the likes of World of Spoofcraft(no advertising here, look away). Any and all attempts to get someone's info will be by the community, or comissioned by the community, and the blame should never be on the victim but on the malicious party attempting to exploit. Actually says so in teh EULA, and unless you did something stupid like setting your password to "password" , that's imo where the argument should end.

[JohnCarver]

I appreciate your responses to the matter and I had some time to get back to the development team, and thus am now in a better mood after not spending hours rifling through server access logs.

Nothing has changed though. If an account owner complains or files a report against another account owner (Owners being defined, identified and verified by their registered E-mails And/Or Paypal Purchase history) then everybody who touched the compromised account gets banned.

The victim gets banned for sharing his password, the password users get banned for accessing accounts that do not belong to them.

You kill people in Salem by breaking into their bases and summon killing them, or finding them in the wild and killing them. You DO NOT kill people in Salem by becoming close enough friends with them to get their account password and then log a scent-less character on in the middle of the night to kill it. Simple as that.

The risks at this point quite obviously outweigh the gains. Play on your own accounts only.

[KruskDaMangled]

Multi-accounting is a must if you are a hermit with a town claim. You don't want to have your one and only character die and get you locked out of your town.

That could change, you know.

Something that could go in with inheritance deals is being able to have your next character inherit keys too, with any associated keys for the guy who was sadly, dead and rapidly mouldering into a sad little charlie brown skeleton simply working for the next guy/gal.

[Potjeh]

I'm more concerned with getting town membership.