SECURITY!!! O_O Over 200 signatures!! Thank you, Gaia!! | Page 1 | Forum

Gaia Forums » GAIA Online » Site Feedback » Petitions

Of course. I don't want anyone in my account.		85.5%	[ 282 ]
No, I think that would be a waste of time.		3.0%	[ 10 ]
I'm not sure.		11.5%	[ 38 ]
Total Votes:	[ 330 ]

Usadari

(?)Community Member

Citizen

Offline

Post: 40926323_1 created on Wed, 11 Jun 2008 16:50:45 +0000
Posted: Wed, 11 Jun 2008 16:50:45 +0000

Attention: I cannot take a signature unless it's posted
from that specific account.
Thank you for your understanding.

I'm positive that everyone on Gaia has had an experience with either a friend getting
hacked or getting hacked themselves, and can understand how frustrating it is. Sure, it's just
pixels, but it's pixels we put hours of time into earning, or that were given to us by someone
important, or just plain mattered. I've seen some of my friends break down in tears after they
were hacked. It's an awful experience. Especially now that there are people putting so much
money into the Cash Shop. That's why I want you to help me fight for ways to make Gaia more
secure.

One idea I had was to have Gaia introduce a security question system that would prompt the
user to answer a pre-determined security question in order for the user to change the account
password or email. This way, even if your account is hacked and your items are taken, you will
still be able to get into your account and see any activity that took place, which would make it
much easier to track down the hacker.

Another idea I had would be to have a separate password for all trade and market transactions.
That way, if your account password was hacked, they would not be able to do much unless they
knew the second password as well. I think it would also be helpful in combating the Gaia
look-alike log-in windows, since that is one of the most popular traps on Gaia for stealing items.

These options could be completely voluntary, but I'm pretty sure almost everyone would take the
time to add a little more security to their accounts. I know I certainly would.

I have already sent an email to the Gaia team about this and they told me they would look into it,
but I wanted to see if I could get support for this on my own. One voice is important, but
hundreds of voices really make an impression.

If you have any additional ideas for Gaia security, or any links about communities or petitions
that relate to this, please let me know. I'll happily add them to the page. Also, if you have had
experiences in which Gaia helped you after you were hacked, or emails you have sent to Gaia
regarding hacking that you would like me to display, let me know and I'll put them up.

Here's a link out if anyone wants to help spread the word.
User Image

[url=http://gaiaonline.com/forum/t.40926323/][img]http://tinyurl.com/c82sp2[/img][/url]

And a button made by punk meow ^-^ Thank you so much!
User Image

[url=http://gaiaonline.com/forum/t.40926323/][img]http://tinyurl.com/d5ad6u[/img][/url]

Usadari

(?)Community Member

Citizen

Offline

Report Post
Post: 40926323_2 created on Wed, 11 Jun 2008 16:51:31 +0000
Posted: Wed, 11 Jun 2008 16:51:31 +0000

Additional ideas:

xBRINGxITxDOWNx

I think that you should also be able to view the ISP addresses from which your account has been accessed: That way if one of them looks fishy, you have a hint that you've been hacked, as well as a clue to who it was.

millird

great idea!

or confirmation emails, if you change your email

I will rape your pixels

I think another valid idea is that an e-mail should be sent to your old e-mail address when you are trying to change it.
If no action is taken then nothing happens and your e-mail is changed as it normally would be but if you get this e-mail and are not the one doing the changing then you simply click a link inside the e-mail that says something along the lines of - no please do not make this change on my account - and it will remain the same e-mail address.
This would not prevent hackings but would let users retain access to their accounts and coupled with a password protected storage box would minimize loses greatly.
I also agree with security questions as long as they are not obvious questions that many people might give out the answer to.

Shinzu Fauks

I'll sign this.

I have a few items given to me by people I could only speak to over Gaia. Over the years, many of them have gone their own ways. Which breaks my heart. Should anyone of those items be ripped away from me I'd be horribly crushed. And Im sure that there are many many Gaians, oldbie and newbie alike, that share this exact same outlook.

There are many different security measures that have been taken on other websites to enhance security. I've even been on a site that sends you a text message every time you change your password or email. And a phone number you can call if you didn't make that change. Immediate results. Thats a little over-the-top for Gaia, I think. They'd have to pay for people to sit by a phone 24-hours a day. I have a feeling they may not jump right on that one.

But looking at other websites. There are security questions, email notifiers, confirmation links before a change can be made. CAPTCHAs and all that. Still, people get hacked. But less often.

A simple security measure: All passwords required to have at least one number.
Or like making a hotmail account. The password must meet a certain security standard. And cannot be your first or last name. Simple things like this are easy changes. And wouldnt take much time.

punk meow

Great idea!Maybe we could get capcha [or whatever that thing where you have to type what's on the little image in] on our log in screens?It might be annoying,but it would stop users with programs from hacking into our accounts.

Usadari

(?)Community Member

Citizen

Offline

Report Post
Post: 40926323_3 created on Wed, 11 Jun 2008 16:52:15 +0000
Posted: Wed, 11 Jun 2008 16:52:15 +0000

Outstanding comments, criticisms, or suggestions:

icecheetah

Signs and puts petition in list.
You may want a poll, and to look at the other's in the security section.
Helpful petition list

Usadari

(?)Community Member

Citizen

Offline

Report Post
Post: 40926323_4 created on Wed, 11 Jun 2008 16:53:03 +0000
Posted: Wed, 11 Jun 2008 16:53:03 +0000

Appropriate links:

Defense Against Hackers

This thread was brought to my attention by another user. She was the first to think of the two passwords idea. Please support her petition.

Password Protected Storage

Another security thread for additional password protection.

Usadari

(?)Community Member

Citizen

Offline

Report Post
Post: 40926323_5 created on Wed, 11 Jun 2008 16:53:48 +0000
Posted: Wed, 11 Jun 2008 16:53:48 +0000

Emails and experiences.

Amaranth013

I was just hacked yesterday.
What's more?

My hacker actually sent me a message and I know who he is.
I've been trying to find an online moderator to talk to.

Good luck with this.

broken-hearted-assassin

*signs* i would take the time for the extra security for sure! my friend was just hacked and she is now leaving and it makes me sad because i hate the fact that there are people out there that feel the need to ruin the gaia experience for others by doing this sh*t.

Gwyn Masamune

I got hacked and had like 20M+ of items get stolen... You've got my vote!

Usadari

(?)Community Member

Citizen

Offline

Report Post
Post: 40926323_6 created on Wed, 11 Jun 2008 16:54:38 +0000
Posted: Wed, 11 Jun 2008 16:54:38 +0000

Reserved for white/black list.
A very big thank you to my main assistant, Dori-mingu. You've helped with this thread so much and I've given nothing in return. Your support is incredibly appreciated.

Usadari

(?)Community Member

Citizen

Offline