Account Security and Theft Policy - READ THIS

Yep,i got my stuff stolen as well,5 years of WoW,and several other games,and never have been hacked once,and now this.


Now no disrespect or anything,but how did you manage to create as awesome game as PoE?
I am asking this because this ''security'' measure does not make any sense.
It's not even a security measure,it's an official email telling you that you have been screwed over,and just to add the cherry on top,you have to re-active your account that has been locked AFTER you have been hacked.
Now what is the point of that?
I mean it has no logic in it at all.

You want a proper security measure? here is an idea,country lock as an optional security feature.
The ability to lock access to your account only from IPs that are from your own country,this would eliminate any risk of some random third world Chinese dude grabbing your gear.

But this account lock and mail thing is useless,what's the point of it?

I apologize if this has already been stated, but I have a question about the new account security features set up, where when someone from a different IP logs into your account the login fully locks - Is there currently any feature set the same to prevent the same from happening on the website? I know recently my account got locked because of a login attempt from China. I of course changed my password immediately then logged back in, but I noticed I was able to log into the website to actually change my password before using the lockout code.

My concern to this is what stops someone who has your password from logging into the website and changing your password / email on you?

"

Kaldris wrote:

I apologize if this has already been stated, but I have a question about the new account security features set up, where when someone from a different IP logs into your account the login fully locks - Is there currently any feature set the same to prevent the same from happening on the website? I know recently my account got locked because of a login attempt from China. I of course changed my password immediately then logged back in, but I noticed I was able to log into the website to actually change my password before using the lockout code.

My concern to this is what stops someone who has your password from logging into the website and changing your password / email on you?

Boom! and change your email

"

Daiena wrote:

Yep,i got my stuff stolen as well,5 years of WoW,and several other games,and never have been hacked once,and now this.


Now no disrespect or anything,but how did you manage to create as awesome game as PoE?
I am asking this because this ''security'' measure does not make any sense.
It's not even a security measure,it's an official email telling you that you have been screwed over,and just to add the cherry on top,you have to re-active your account that has been locked AFTER you have been hacked.
Now what is the point of that?
I mean it has no logic in it at all.

You want a proper security measure? here is an idea,country lock as an optional security feature.
The ability to lock access to your account only from IPs that are from your own country,this would eliminate any risk of some random third world Chinese dude grabbing your gear.

But this account lock and mail thing is useless,what's the point of it?

The account lock is a good thing. It prevents that mystery IP from being able to get into the game and steal/delete your stuff. The thing is you were probably compromised before this was put into place (like I was) so your stuff may be gone. If that is the case I am sorry, I am currently working at trying to get this policy changed a bit to help those who were hurt before the security was put into place, but it is an uphill battle.

so i havent played in weeks, i go to sign on and it says my acc, is locked, and someone signed onto my account in the SAME state i live in about 3 hours away... i dont use any maphacks or real money sites or any of that, and my password is different than any of my other passwords, any suggestions, nothing was stolen, because it hink GGG locked it as soon as they logged in,

well daienia, they locked my account and my shit didnt get jacked?

"

jedimind207 wrote:

so i havent played in weeks, i go to sign on and it says my acc, is locked, and someone signed onto my account in the SAME state i live in about 3 hours away... i dont use any maphacks or real money sites or any of that, and my password is different than any of my other passwords, any suggestions, nothing was stolen, because it hink GGG locked it as soon as they logged in,

I am guessing you are asking for security advice? Either that, or you are asking for suggestions as to how you could have been hacked. I will answer both just to be sure.

Security Advice:
Change the email you use for the game to a brand new email, you can then forward that email account to your regular one if you want, or leave it alone (totally up to you there, it is just a matter of ease of use). I would also generate a random collection of 3 four lettered words then replace all of the vowels into numbers and alternate the capitalization of your letters. Do a scan on your system using malwarebytes (a free anti-malware program) to make sure you don't have any key loggers and you should be good to go.

How it could have happened:
One theory is that you may have used the same combo of password/email on another site, and then that site was compromised (this is pretty common actually, way more common than people admit to). If you have WiFi someone can hijack your WiFi and use a packet sniffer, but this is highly unlikely unless you have a hacker friend that wants to play a prank on you. They could just have a list of gamer email addresses from some unsecured site and they are using dictionary crackers or icebreakers to hack the password, also pretty unlikely, but far more likely than your WiFi being the issue.

The main thing is if you want the convenience of using the same email/password you risk security, the new system in place just helps you to keep from losing your stuff. However if they every manage to hack your email, you will be boned as they will have the key to unlock the account.

"

jedimind207 wrote:

so i havent played in weeks, i go to sign on and it says my acc, is locked, and someone signed onto my account in the SAME state i live in about 3 hours away... i dont use any maphacks or real money sites or any of that, and my password is different than any of my other passwords, any suggestions, nothing was stolen, because it hink GGG locked it as soon as they logged in,

Could be you were not hacked at all, if you have a big ISP and your IP is not static, the IP they give you may be from many other areas close to your house depending which pool they gave you one from.

"

wonko33 wrote:

"

jedimind207 wrote:

so i havent played in weeks, i go to sign on and it says my acc, is locked, and someone signed onto my account in the SAME state i live in about 3 hours away... i dont use any maphacks or real money sites or any of that, and my password is different than any of my other passwords, any suggestions, nothing was stolen, because it hink GGG locked it as soon as they logged in,

Could be you were not hacked at all, if you have a big ISP and your IP is not static, the IP they give you may be from many other areas close to your house depending which pool they gave you one from.

The IP ranges will all come from the nearest junction box now, so it can't be too much more than 10 miles away (depending on the Media it is going through).

"

barbzilla wrote:

The IP ranges will all come from the nearest junction box now, so it can't be too much more than 10 miles away (depending on the Media it is going through).

Wonko is correct. My IP address does the exact same thing. It's sometimes X, Y or Z. These areas are in the same state; maybe an hour or two away.