Questions about Biller/Password Protection!

[Deathboy-evil]

Post any Questions you have here!

The following 2 questions were asked by 2d spaceship game

 

1. Is it possible for staff to rename people's account at their request without resetting it? For those who's identical name in SSC is owned or hijacked by someone else, and they would not be able to get to their account if it is not renamed when the SSC biller is on.

 

2. Why is it so !@#$%^&* hard to modify the message saying "Now entering Hyperspace. Note that your current money and item statuses may not reflect their actual values." to "Now entering Hyperspace. Note that your current money and item statuses may not reflect their actual values. Newly created accounts have NO password by default, you MUST password protect your account using ?passwd=yourp!@#$%^&*word"? Sure, you have the warning in many other places, but this is by far more visible than anything else, and beside, gosh, WHAT HARM WOULD IT DO TO DO THAT? Even if 1 person protects his account this way its already worth it.

[Deathboy-evil]

1. Is it possible for staff to rename people's account at their request without resetting it? For those who's identical name in SSC is owned or hijacked by someone else, and they would not be able to get to their account if it is not renamed when the SSC biller is on.

 

2. Why is it so !@#$%^&* hard to modify the message saying "Now entering Hyperspace. Note that your current money and item statuses may not reflect their actual values." to "Now entering Hyperspace. Note that your current money and item statuses may not reflect their actual values. Newly created accounts have NO password by default, you MUST password protect your account using ?passwd=yourp!@#$%^&*word"? Sure, you have the warning in many other places, but this is by far more visible than anything else, and beside, gosh, WHAT HARM WOULD IT DO TO DO THAT? Even if 1 person protects his account this way its already worth it.

 

1. It is not possible for staff to rename anyone's account, or reset one's password. The SSC accounts are out of our control.

2. At the time it was edited to "Now entering Hyperspace. Note that your current money and item statuses may not reflect their actual values.", the ?passwd= command was not known to the public, so when it was edited, it was in best interest that we rather not put the "?passwd=" command into the enterance message due to the possibility of people taking over other people's accounts, right away. Even for the newcomers, if we were to put the command into the enterance message, people that are new still do not read it, and for those who do, their is still the chance that they will make an attempt to take action by taking over other people's accounts. Overall, we have are in progress of getting a biller soon, and we have been working on possible solutions to fix the zone up when the biller is back up. We already have many, banning will play a big roll in it as well.

[2d spaceship gamer]

1. It is not possible for staff to rename anyone's account, or reset one's password. The SSC accounts are out of our control.

 

You didn't understand me. I didn't ask about renaming SSC accounts. I asked about renaming LOCAL HS accounts BEFORE HS goes to SSC.

 

For example, the following sequence...

 

1. A guy registers an account JohnSmith and password 12345 on HS and plays 24/7. This account is NOT registered in SSC, just on the local HS server.

2. An evil hacker finds out that JohnSmith has 8 TW passes and decides to steal the account. He registers an account IN SSC by the name of JohnSmith and password 54321.

3. John realizes the SSC account is taken by someone else, but he can do nothing about it.

4. HS goes SSC. JohnSmith's local password of 12345 is overridden by the SSC password of the same account (54321)

5. John is locked out of his JohnSmith account. The hacker can now use it.

 

...could be changed to the following sequence.

 

1. A guy registers an account JohnSmith and password 12345 on HS and plays 24/7. This account is NOT registered in SSC, just on the local HS server.

2. An evil hacker finds out that JohnSmith has 8 TW passes and decides to steal the account. He registers an account IN SSC by the name of JohnSmith and password 54321.

3. John realizes the SSC account is taken by someone else, he then asks HS mods to rename his local HS account to JohnSmith2, and promptly goes to SSC and registers an account by the same name and password there.

4. HS goes SSC. JohnSmith2's password stays 12345 (as the SSC password of JohnSmith2 was also 12345), and the hacker-registered JohnSmith is still 54321.

5. John can use his newly renamed JohnSmith2:12345 account in SSC, and the hacker is left with a useless JohnSmith:54321 account.

Edited March 3, 2007 by 2d spaceship gamer

[»D1st0rt]

Yeah we can do that

[2d spaceship gamer]

Yeah we can do that

 

Great. You might want to make this a notice to players who do NOT have access to the SSC account of the same name, for whatever reason, that they have a chance to get their account renamed. At least those who care will do it, and those who don't care, well can't do much, they'll learn the hard way.

[Shia' Tan]

whats all this about ssc passwords? why would u need to register on ssc? what exactly IS ssc?

 

please explain...

[Dr Brain]

Deleted DBE's post because he posted inaccurate info.

 

SSC stands for the SubSpace Council, a group that runs the largest billing server (password server) in subspace. We used to have access as part of SSCI, but moving to a new server blocked our access.

 

Billers are password servers, so if the biller says you don't have access to an account you've been using in hyperspace, you'll no longer be able to play with that name.