Square Enix Security Token - Gimic?

Eorzea Time
 
 
 
言語: JP EN FR DE
日本語版のFFXIVPRO利用したい場合は、上記の"JP"を設定して、又はjp.ffxivpro.comを直接に利用してもいいです
users online
フォーラム » FFXI » General » Square Enix Security Token - gimic?
Square Enix Security Token - gimic?
 
Offline
Posts:
By 2009-03-11 13:00:12
 Undelete | Edit  | Link | 引用 | 返事
 
Post deleted by User.
 Gilgamesh.Alyria
VIP
Offline
サーバ: Gilgamesh
Game: FFXI
user: alyria
Posts: 13080
By Gilgamesh.Alyria 2009-03-11 13:01:50  
I know I'm not buying it lol
 Asura.Icon
Offline
サーバ: Asura
Game: FFXI
user: ic0n67
Posts: 241
By Asura.Icon 2009-03-11 13:02:49  
Alyria said:
So I believe it is NOT a keychain. :)


I'll save you the suspense. It IS a key chain. It is something that you physically hold that the code displayed on it changed very 30 second to a few minutes. Then you go to your account and you will need to log in with the current code. It is a way that you and only you can see what the password is at anytime.

Just read this:
http://en.wikipedia.org/wiki/Security_token

The talk about POL in the article is SE saying you can buy it through POL and they will mail you the token.
 Gilgamesh.Alyria
VIP
Offline
サーバ: Gilgamesh
Game: FFXI
user: alyria
Posts: 13080
By Gilgamesh.Alyria 2009-03-11 13:05:52  
Icon said:
Alyria said:
So I believe it is NOT a keychain. :)


I'll save you the suspense. It IS a key chain.


Maybe you didn't read the rest of what I said either...I said it was an opinion and I could be wrong.

Not a suspense to me anyways, i dont care for it, I'm not buying it anyways lol
 Shiva.Artemicion
Offline
サーバ: Shiva
Game: FFXI
user:
Posts: 2838
By Shiva.Artemicion 2009-03-11 13:12:22
 Delete | Edit  | Link | 引用 | 返事
 
Mabrook said:
what this key-chain does is it gives a random password that is generated every 30 seconds but for this to work you have to "manually" input this password inside your account to have this effect active.


I really hope not, considering the hoops you gotta jump through to even get to point where you are able to change your password within POL, and by the time you get there it would have made a whole new randomly generated password. It would be nice if this puppy could be linked to your account and done automatically for you, but I certainly won't hold my breath, and due to the attached "in game item", I'm gonna go on a whim and say it will probably be equally useless as the Tidal Talisman. But who knows? It might prove nifty to protect accounts that would otherwise be vulnerable.
 Asura.Icon
Offline
サーバ: Asura
Game: FFXI
user: ic0n67
Posts: 241
By Asura.Icon 2009-03-11 13:12:38  
Alyria said:
Maybe you didn't read the rest of what I said either...I said it was an opinion and I could be wrong.


umm ... I did ... and I'm just telling you and anyone else who didn't know what the device actually was that it is in fact a key chain. Just from reading the other posts other might also be confused on what it is and/or how it works.
 Midgardsormr.Invictusx
Offline
サーバ: Midgardsormr
Game: FFXI
user: Invictusx
Posts: 18
By Midgardsormr.Invictusx 2009-03-11 13:15:04  
I don't know about you guys but all I want is that AWESOME IN GAME ITEM!

/sarcasm? you be the judge
 Gilgamesh.Alyria
VIP
Offline
サーバ: Gilgamesh
Game: FFXI
user: alyria
Posts: 13080
By Gilgamesh.Alyria 2009-03-11 13:16:43  
lol sarcasm

I havent seen any in game item worth it to go for. unless it was some super anniversary type ring with 100 charges!! lol
 Midgardsormr.Serbzook
Offline
サーバ: Midgardsormr
Game: FFXI
user: niktod
Posts: 108
By Midgardsormr.Serbzook 2009-03-11 13:18:13  
Artemicion said:
Mabrook said:
what this key-chain does is it gives a random password that is generated every 30 seconds but for this to work you have to "manually" input this password inside your account to have this effect active.


I really hope not, considering the hoops you gotta jump through to even get to point where you are able to change your password within POL, and by the time you get there it would have made a whole new randomly generated password.


Im not sure i understand what your saying there. The way thees work (usually) is you are prompted for the username/password at login time, then you enter the username and the password that is displayed on the keychain and hit enter. You are not to go to your pol account and change your password to what the keychain is displayed.
 
Offline
Posts:
By 2009-03-11 13:32:36
 Undelete | Edit  | Link | 引用 | 返事
 
Post deleted by User.
 Fenrir.Mahorosama
Offline
サーバ: Fenrir
Game: FFXI
Posts: 27
By Fenrir.Mahorosama 2009-03-11 13:36:25  
In game item, could care less... feeding into my paranoia, sign me up!
 Midgardsormr.Frobeus
Offline
サーバ: Midgardsormr
Game: FFXI
user: frobeus
Posts: 1498
By Midgardsormr.Frobeus 2009-03-11 13:37:34  
Your choice of Ground King / Salvage / Ein body comes with it! ; ;

OOOOOO or, unlocks campaign body piece!
 Midgardsormr.Serbzook
Offline
サーバ: Midgardsormr
Game: FFXI
user: niktod
Posts: 108
By Midgardsormr.Serbzook 2009-03-11 13:55:39  
Mabrook said:
Serbzook said:
The way thees work (usually) is you are prompted for the username/password at login time, then you enter the username and the password that is displayed on the keychain and hit enter. You are not to go to your pol account and change your password to what the keychain is displayed.


Correct but there are 2 problems you forgot:

1) Your POL password does not work if it does not match the password registered inside POL so no go on this.

2) Obviously this key-chain does not have a USB port, bluetooth, or anything of this nature. So no it is not automatically done for you. Check the picture to see:

User submitted image


1) What pol password? Your password is refreshed on the keychain's lcd every 30sec or 1min or w/e time i didnt rlly check.

2) So what if it doesnt have those? whats not automatically done for me?

Ppl seem to have a misconception of what this really is and what it does for you. Have a glance at the wiki article Icon gave for better info (http://en.wikipedia.org/wiki/Security_token).
 
Offline
Posts:
By 2009-03-11 14:06:04
 Undelete | Edit  | Link | 引用 | 返事
 
Post deleted by User.
 Shiva.Artemicion
Offline
サーバ: Shiva
Game: FFXI
user:
Posts: 2838
By Shiva.Artemicion 2009-03-11 14:12:46
 Delete | Edit  | Link | 引用 | 返事
 
I just hope it's functionality justifies it's yet to be announced price tag. If I do pay for it, I'm paying for added security over a useless in game trinket.
 Ramuh.Bekisa
Offline
サーバ: Ramuh
Game: FFXI
Posts: 182
By Ramuh.Bekisa 2009-03-11 14:12:59  
I'm curious to see what the algorithm for this token will go off of. If it uses something like POL server time or something we can easily figure out, its only going to delay any serious hackers a few hours at most. Think keygens~

If it has a USB connector on it that syncs up with the game itself ... it can be hacked too.

Seems like this is just a deterant more than anything, with some free EX item in game included. Maybe a key for my mog safe? ...
 
Offline
Posts:
By 2009-03-11 14:14:31
 Undelete | Edit  | Link | 引用 | 返事
 
Post deleted by User.
 Shiva.Artemicion
Offline
サーバ: Shiva
Game: FFXI
user:
Posts: 2838
By Shiva.Artemicion 2009-03-11 14:16:40
 Delete | Edit  | Link | 引用 | 返事
 
Bekisa said:
I'm curious to see what the algorithm for this token will go off of. If it uses something like POL server time or something we can easily figure out, its only going to delay any serious hackers a few hours at most. Think keygens~

If it has a USB connector on it that syncs up with the game itself ... it can be hacked too.

Seems like this is just a deterant more than anything, with some free EX item in game included. Maybe a key for my mog safe? ...


Although that may be true, I feel it would make a significant improvement to security. In the mindset of a hacker, I would rather take an account that kept a static easy to obtain password that hasn't been touched or changed than one I'd have to tinker with for hours on end to get a way through it.
 Hades.Triet
Offline
サーバ: Hades
Game: FFXI
user: Sirseiko
Posts: 1615
By Hades.Triet 2009-03-11 14:34:42  
Bekisa said:
I'm curious to see what the algorithm for this token will go off of. If it uses something like POL server time or something we can easily figure out, its only going to delay any serious hackers a few hours at most. Think keygens~

If it has a USB connector on it that syncs up with the game itself ... it can be hacked too.

Seems like this is just a deterant more than anything, with some free EX item in game included. Maybe a key for my mog safe? ...


I was thinking this as well. Someone said it would be some 'alphanumeric' password, it'd only be a matter of weeks or months until some genius cracks the code. I mean look at all the WS info and programs(like FFXICalculator). . .

-V.
 Midgardsormr.Serbzook
Offline
サーバ: Midgardsormr
Game: FFXI
user: niktod
Posts: 108
By Midgardsormr.Serbzook 2009-03-11 14:58:56  
Ppl need to do some research before shouting "Hackers gonna hack it y0". A random pass generator is random (aka unpredictable).

For WS and such you have:

Some input going into a ----> [Black box] ----> and you get an output

Now if you do the thing 1001 times you will be able to simulate the black box with a math function using various methods. Its a fairly common practice in many fields.

With this gadget you only have an output... you have no idea by what process the pass was generated. It would take you less time and youd have better luck guessing whats the next password gonna be than trying to recreat the algorithm that creates them.
 Pandemonium.Luignata
Offline
サーバ: Pandemonium
Game: FFXI
user:
Posts: 505
By Pandemonium.Luignata 2009-03-11 15:07:59
 Delete | Edit  | Link | 引用 | 返事
 
Quite simple what I'm gonna do. Assuming they don't limit the amount they sell, or the time it's available, I'll just wait a few months to see if there's any major problems. If all is still ok, I'll buy it.
 Unicorn.Tavlov
Offline
サーバ: Unicorn
Game: FFXI
user: Tomas
Posts: 830
By Unicorn.Tavlov 2009-03-11 15:13:51  
Serbzook said:
Mabrook said:
Serbzook said:
The way thees work (usually) is you are prompted for the username/password at login time, then you enter the username and the password that is displayed on the keychain and hit enter. You are not to go to your pol account and change your password to what the keychain is displayed.


Correct but there are 2 problems you forgot:

1) Your POL password does not work if it does not match the password registered inside POL so no go on this.

2) Obviously this key-chain does not have a USB port, bluetooth, or anything of this nature. So no it is not automatically done for you. Check the picture to see:

User submitted image


1) What pol password? Your password is refreshed on the keychain's lcd every 30sec or 1min or w/e time i didnt rlly check.

2) So what if it doesnt have those? whats not automatically done for me?

Ppl seem to have a misconception of what this really is and what it does for you. Have a glance at the wiki article Icon gave for better info (http://en.wikipedia.org/wiki/Security_token).


I'm gonna guess that red button activates the password refresh. There could also be a usb connector that pops out the back of it.
Offline
サーバ: Remora
Game: FFXI
Posts: 165
By Remora.Disintegration 2009-03-11 15:30:20  
Adding the in-game item to this promotion seems to cheapen it all for me, especially if it's something totally useless, such as anything you receive from most holiday festivals. Is stronger security for your account not incentive enough?

We want you to come to a meeting tomorrow about your continued employment here at the company. There will be donuts.
 Siren.Clinpachi
Offline
サーバ: Siren
Game: FFXI
user: Clinpachi
Posts: 2680
By Siren.Clinpachi 2009-03-11 15:30:44  
The BEST thing i can say about this security tool is to *** three things.

1) Is it going to be around 10$ and no more then 20$
2) Do you own a relic weapon, 10 million+ gil, or insane gear/jobs leveled and much time put into your character.
3) Do you use a lot of forums or websites regarding FFXI. (your on FFXIAH.com so i assume you do)

In a combination of these three items or whatnot, you may want to consider the security. As far as security is concerned, this provides an algorithm pattern that will change often enough where with anyone smart enough to figure out an algorithm by the time they do there will be a new one set in stone.

Besides if anyone can crack an algorithm on devices like this they should be doing a lot more than stealing FFXI related items.

If you think it's a waste of money then simply don't buy it, but if you value your account such as i do... you will want this protection hands down. It's unfortunate that they are adding an in-game item because i fear this WILL jack the price.

The ONLY exclusive in-game item worth anything in my opinion was the nomad/moogle cap received from the 2007 fan festival attendance. The Tidal Talisman is ok, but god ugly and was overpriced. The moogle shield and piano collection item is very lulz.
 Bahamut.Farias
Offline
サーバ: Bahamut
Game: FFXI
user: Farias
Posts: 47
By Bahamut.Farias 2009-03-11 15:35:00  
I'm just going to assume what I've heard from my WoW playing co-worker.

1. Go to playonline.com and register your device. They will have a server specifically for handling these and timing.

2. It's not USB, you push the button and get a code which will be the same as what that server has at that moment and type it in to access your account.

He has never heard any complaints from any of his freinds that use them and they are very secure. The only people with them that get there accounts hacked are those that fall for phishing emails and give up enough account info that RMT can get in and do a password reset because use of the device is optional.

So on that note I think I might buy one for peace of mind and make sure I keep running my anti-spyware programs and such and don't be stupid with my emails.
 Unicorn.Dontsitonme
Offline
サーバ: Unicorn
Game: FFXI
Posts: 2
By Unicorn.Dontsitonme 2009-03-11 15:44:33  
taken from http://en.wikipedia.org/wiki/Security_token

Time-synchronized one-time passwords
A time-synchronized one-time passwords change constantly at a set time interval, e.g. once per minute. To do this some sort of synchronization must exist between the client's token and the authentication server. For disconnected tokens this time-synchronization is done before the token is distributed to the client, other token types do the synchronization when the token is inserted into an input device. The main problem with time-synchronized tokens is that they can, over time, become unsynchronized.[citation needed] However, some such systems, such as RSA's SecurID, allow the user to resynchronize the server with the token, sometimes by entering several consecutive passcodes. Most also cannot have replaceable batteries and only last up to 3 years before having to be replaced - so there is additional cost.
 Siren.Clinpachi
Offline
サーバ: Siren
Game: FFXI
user: Clinpachi
Posts: 2680
By Siren.Clinpachi 2009-03-11 15:46:54  
Farias said:
I'm just going to assume what I've heard from my WoW playing co-worker.

1. Go to playonline.com and register your device. They will have a server specifically for handling these and timing.

2. It's not USB, you push the button and get a code which will be the same as what that server has at that moment and type it in to access your account.

He has never heard any complaints from any of his freinds that use them and they are very secure. The only people with them that get there accounts hacked are those that fall for phishing emails and give up enough account info that RMT can get in and do a password reset because use of the device is optional.

So on that note I think I might buy one for peace of mind and make sure I keep running my anti-spyware programs and such and don't be stupid with my emails.


This is in no way a stab at you Farias so please don't take offense, but judging by your levels/player information you are in no need of this item yet. This gives perfect example to what i said a few posts up... Only people who have serious progress or gil/items should consider this from the start.

Don't misunderstand i'm not saying you SHOULDN'T get it if you really want it for your own peace of mind. Then hey go for it, but if i were someone like you i would allow others to get it and try it first. See how it protects major accounts that are much more likely to be targeted for items or gil.
 Gilgamesh.Alyria
VIP
Offline
サーバ: Gilgamesh
Game: FFXI
user: alyria
Posts: 13080
By Gilgamesh.Alyria 2009-03-11 15:47:21  
lmao I like your name Dontsitonme ^^ you must be a taru?
 Unicorn.Dontsitonme
Offline
サーバ: Unicorn
Game: FFXI
Posts: 2
By Unicorn.Dontsitonme 2009-03-11 15:49:04  
lol yes
 Gilgamesh.Alyria
VIP
Offline
サーバ: Gilgamesh
Game: FFXI
user: alyria
Posts: 13080
By Gilgamesh.Alyria 2009-03-11 15:53:04  
<3 tarus

sorry carry on with your discussion of SE scam # 312563463673467