Deterring Account Hacking

While this wouldn't prevent people losing their accounts to keyloggers, it might help those who log in with a unique IP. I played another mmo and in our accounts online, we were able to IP-lock/geo-lock our accounts to prevent them from being hacked by someone in another part of the world even if our login/password was compromised. Is it possible or worth the effort to create a similar system here?

 

Why bother with something so complex when you can simply enable the character pin retail has?

Just open ...\game\config\default.config in the server files and change these values
gameserver.passkey.enable = true
gameserver.passkey.wrong.maxcount = 3

The char pin numpad is randomized and you have to click it with a mouse every time so you cannot mouse record or keylog it. Far simpler to set this up.

edit: I doubt your method would work for several reasons
1. Many of us have a dynamic IP so you would end up with the same garbage retail has on their forum. You have to authorize the IP and answer 2 security questions literally every day you decide to login to the forums. It is a huge burden.
2. Geo lock doesn't work when people keylog you at a local net cafe. When Pinoys keylog other Pinoys, this feature does nothing.
3. People at net cafes all have the same IP so basically you just authorized everybody who goes there.

 

That's allowed right? Not considered changing the behavior of the client or anything since it's just another attempt to further protect your account?

 

I did say server files, it is a server side configuration that triggers the client function xD You can't do this by yourself, they have to enable it. The feature is already there, just disabled.

If it was client side, people would just turn it off if they wanted to scam someone xD

 

Q____________Q

 

Well you can't really choose, either everyone gets it or nobody does. You could make a poll if people want this since yes it can be an annoyance but at the same time it provides a great level of security for all your gear. Then again, if people don't like it they can just set the pin to 11111111 or something so it is easier. With 3 tries, even simple things like this can be a decent protection for some time

 

If I remember it is a choice to use either way. plus, aside that beside people forgetting pws if they forget that code imagine the headache.

however a character pin would be useful on plenty of cases.

if I get the time to, I'll see about discussing it with alente. would most likely be best for him to make a poll on it the discuss with Carl