Heightened Security on the Windows PlayOnline Viewer

[Gobo]

Due to the sudden increase in unauthorized access on the internet, PlayOnline has decided to heighten the security for all of its related services. As part of these security measures, we have introduced the following features.

- The software keyboard
We have implemented a special field for entering passwords (PlayOnline passwords and PlayOnline mail passwords) and other important information through a software-based keyboard that uses the mouse for text entry.

The software keyboard is displayed when you select one of the password-entry fields on the PlayOnline Viewer. Because each key is entered by clicking with the mouse, this software is effective against a type of spyware known as a keylogger that is capable of stealing information entered through regular keyboards.
You can, of course, still enter your password with a keyboard as usual, but we recommend using the software keyboard to improve your private information’s safety. The software keyboard provides safety and security for users who enter their passwords each time without saving them.


- Security Settings
We introduced "Security Settings" to manage PlayOnline passwords with even further heightened security.

Because passwords entered on the PlayOnline Viewer are encrypted and saved to the hard drive to prevent other computers from decrypting them, even if the corresponding file is stolen, no password information will be accessible.
To advance our security technology even further in dealing with spyware, we have made the encryption key for each computer randomly generated and saved to a destination folder the user designates in "Security Settings." For example, if the user saves the key file to an external device such as a USB memory card and disconnects the device when it is not needed, security will be considerably strengthened.

"Security Settings" has been added to the PlayOnline Viewer's Login menu. After selecting it and designating a destination folder for the encryption key, a file name composed of random alphanumeric characters will be created in that folder.

*The encrypted PlayOnline password and encryption key will not only be accessed when starting the PlayOnline Viewer and logging in, but will also be periodically accessed while playing an online game or using the Viewer. In particular, be careful about the following things:
- If you have saved the encryption key to an external device or a network drive, do not disconnect the device while playing a game or using the PlayOnline Viewer.
- If you have saved the file to an external device or a network drive, make sure the drive is the same as the one designated in "Security Settings."
*If the PlayOnline Viewer cannot access the encryption key, the saved PlayOnline password information will be erased and the encryption key will become unusable. In such a case, your account will not be affected, but you will need to re-enter your PlayOnline password to save it to a new encryption key. Each time you use "Security Settings," a new key file is generated with a new random file name and different contents. Deleting an old file will not cause any problems.
*"Security Settings" are shared by all registered members, and users cannot designate different folders for each member. Also, if PlayOnline password information is erased, it will be necessary for all registered members to re-enter their PlayOnline passwords once more.

[eticket109]

damn, i came here to post this.

nice changes though

[Feba]

hurray for false senses of security.

[Zempten]

hurray for annoying password entry >.>

[WishMaster3K]

I approve of this speed bump.

[Novae]

Hurray for effort?

[Sabaron]

hurray for annoying password entry >.>

You don't have to use it.

[Feba]

No.

Effort should've been put into making the POL viewer able to download files WITHOUT SUCKING (as in, build in a torrent client) since they're putting out a large update.

Effort should not be put into giving your users the false idea that they're more secure. I can already think of how to exploit the software keyboard, and I'm not a hacker.

[Novae]

No.

Effort should've been put into making the POL viewer able to download files WITHOUT SUCKING (as in, build in a torrent client) since they're putting out a large update.

Effort should not be put into giving your users the false idea that they're more secure. I can already think of how to exploit the software keyboard, and I'm not a hacker.

Then go send SE an angry email.

[Feba]

Eh. There are plenty of places where SE could put in effort if they wanted to.

But they just don't really care about their users that much. They're going to keep on doing whatever the hell they want, regardless of how many letters we write.

[Novae]

If your so thoroughly convinced it's giving false senses of security and it bothers you enough to state you don't appreciate the effort than you may as well do something about it. If nobody ever acted the world would be a pretty boring world of "what ifs".

Personally I'm just taking it as it comes, it shows is that there noticing/observing the problem..

[Mhurron]

Effort should not be put into giving your users the false idea that they're more secure. I can already think of how to exploit the software keyboard, and I'm not a hacker.

A - By your own admission, you're probably wrong

B - Both recent account jacking waves were keyloggers, and this addresses that. Since these exploits will be floating around for some time, this is a security update.

C - Reducing the opportunity to break an encrypted string does increase security.

D - Simply because there are ways around new security measures is not a reason to implement said measures when what they fix is currently being exploited.

E - WTF do you care anyway

[Feba]

I can't do anything about it. I have no power with SE. Again, they don't care what people say to them.

It does no more good to tell SE they're doing things wrong than it does to tell the mountains they are blocking your journey.
______________________________
A; this doesn't really pertain to computers. It's more a matter of common sense.

B; treating a symptom and not the cause. Yes, what's out there now is keyloggers. In a month, they'll be tracking keyboard AND mouse input, and we'll be back at square one.

C, D; I'm not saying that adding security is bad. I'm saying that what they need to do is deal with the problem (users not being secure) and THEN worry about helping to cover people in 'worst case scenario's.

E; I don't, really. Idiots will get their shit messed up. SE continues to put a tenth of the work they should. Why do you care about my opinion?

[eticket109]

If your so thoroughly convinced it's giving false senses of security and it bothers you enough to state you don't appreciate the effort than you may as well do something about it. If nobody ever acted the world would be a pretty boring world of "what ifs".

Personally I'm just taking it as it comes, it shows is that there noticing/observing the problem..

Welcome to FFXIOnline.com. Please don't feed the Feba.

[Murphie]

I'm not sure what you expect SE to do about users who don't know how to protect themselves against keyloggers, Feba. That part of it really isn't their problem.