why reset all password?
Posted: Sat Feb 19, 2011 3:04 am
by mrlobak
how bout make annoucement in game or forum to ask player change their self since they got own email? its about some of people get hacked, then gm team make decision to reset all the password, but pls do it in rush way, coz some of people will losing their id (forgot email, simply register) , how to solve that, dear gm team? my opinion, let the player change by themselve?
Re: why reset all password?
Posted: Sat Feb 19, 2011 3:56 am
by GMTempest
Geez...this is standard protocol on severe breach of security not in only our game but pretty much everything. Just because you think you won't be affected by it doesn't mean you should automatically take look from a different point of view. We have had well over 1000 logins within a few days. Not every account is active, so if we ask people to change their password and the inactive ones come in the future that is a lot of work cut out for the already slow ticket system and we had to change it right away to prevent further breaches than the ones that already occured. We also warned players in beginning of server many times not to use the same PW as the past, but this just shows there will always be players who never listen.
Out of all the tickets I see regarding e-mails, it is only a minuscule fraction of the number of players who have had their account breached. The choice is obvious. The majority tickets are people who were given their accounts anyway, which we saw foresaw and will handle accordingly. There aren't very many people who just enter a random e-mail to play, because most people would know e-mails could be more important than the account itself. I can count everyone who didn't enter a proper e-mail with literally 1 hand. In fact, there are more people who don't understand how to reset passwords than people who entered an improper e-mail.
Now as I have mentioned before, changing everyones pass was a last resort, after discussing possibilities the only alternative was to tell players to change passwords themselves but as mentioned that has too many risks and there will always be players who don't listen. Due to system changes, we have no idea who is using the same password as previous server therefore the choice should be obvious which to make.
There are no ifs,ends, or buts around this. I am sorry you are having facing so much trouble and I assure you we had no intention of causing you such grievance. We have 2 GMs (Currently sleeping) who will be working on tickets around the clock as they wake up. Anyone facing problems regarding their e-mail will have it solved within a day.