Southperry.net
Changes to the PIC System - Printable Version

+- Southperry.net (https://www.southperry.net)
+-- Forum: Main (https://www.southperry.net/forumdisplay.php?fid=11)
+--- Forum: Nexon Announcements (https://www.southperry.net/forumdisplay.php?fid=20)
+--- Thread: Changes to the PIC System (/showthread.php?tid=63594)

Pages: 1 2

Changes to the PIC System - Notify - 2013-04-04

http://maplestory.nexon.net/news/news/current/00Fu7/


Nexon Wrote:[Image: 00FAK-ba214571-3861-4b46-9da6-6b9356c46e62.jpg]
Changes to the PIC System

Weve updated the Personal Identification Code (PIC) system with new features and guidelines to ensure you have the safest, most secure PIC possible.


You can now reset your PIC in-game, and youll get a reminder to change your PIC every three months.


Your PIC is the last line of defense against unauthorized attempts to log into your account, so creating a secure PIC is essential. Remember, you should never give your PIC to anyone or enter your PIC anywhere except in the game client. Log into the game or visit the website now to change your PIC.



Changes to the PIC System - Zelkova - 2013-04-04

And if we decide NOT to change our pic, you will berate us with a notice every single time we log into a character. Good job!

Changes to the PIC System - Encyclopedic - 2013-04-04

Hm. The only way to change your PIC in EMS is in-game already, andis has been like that since the release. Strange GMS took longer to get it.

Changes to the PIC System - ShinkuDragon - 2013-04-04

anyone tried changing their pic to the very same pic?

Changes to the PIC System - Declaimed - 2013-04-04

ShinkuDragon Wrote:anyone tried changing their pic to the very same pic?

I just spam "cancel/no" without thinking about it.

Changes to the PIC System - LoveVictim - 2013-04-04

Zelkova Wrote:And if we decide NOT to change our pic, you will berate us with a notice every single time we log into a character. Good job!

Just change the PIC once and change it back again to your old one... it's that simple... I don't get why some of you make things into a mission.

Changes to the PIC System - ShinkuDragon - 2013-04-04

LoveVictim Wrote:Just change the PIC once and change it back again to your old one... it's that simple... I don't get why some of you make things into a mission.

because it's annoying, we jut want to play!

(and i have a bunch of accounts...)

Changes to the PIC System - IImaplers - 2013-04-04

Hi Nexon. How about you make the game actually safer for us instead of BS measures like this one, which do nothing for security? The PIC is probably the easiest thing for a hacker to bypass anyway. Ever heard of the option of cell phone validation?

Changes to the PIC System - MuscleWizard - 2013-04-04

IImaplers Wrote:Hi Nexon. How about you make the game actually safer for us instead of BS measures like this one, which do nothing for security? The PIC is probably the easiest thing for a hacker to bypass anyway. Ever heard of the option of cell phone validation?

but too many failed password pic attempts locks out the account

Changes to the PIC System - Heero - 2013-04-04

A warning for those who try to change their PIC back, or at all: You can't use directly repeating characters in your PIC anymore.

RIP 111111
4/3/13
Never forget

Changes to the PIC System - SaptaZapta - 2013-04-04

Oh, that's lovely.

So now if a hacker gets on my account, first thing they do is change the PIC.
Now, while I wait for Nexon's website and e-mail to be able to change my PIC back again (or my password), I am locked out of my account and the hacker can empty it at leisure. Can't hope to get on while they're switching chars.

Nexon, do you even think?

Changes to the PIC System - Stereo - 2013-04-04

Heero Wrote:A warning for those who try to change their PIC back, or at all: You can't use directly repeating characters in your PIC anymore.

RIP 111111
4/3/13
Never forget

88888888, better mnemonic (couldn't use 111111 because it's the same as my account password)


Still better than the derp they did on PINs - it was stored as an int, so if you entered 0000 as your PIN, you could skip the screen entirely cause the default value was also 0. They noticed that, but 0001 would still work by entering 1 for a while.

Changes to the PIC System - Zelkova - 2013-04-04

[MENTION=10355]Girasol[/MENTION]; how goes the Authenticator app?

Changes to the PIC System - hadriel - 2013-04-04

Stereo Wrote:88888888, better mnemonic (couldn't use 111111 because it's the same as my account password)


Still better than the derp they did on PINs - it was stored as an int, so if you entered 0000 as your PIN, you could skip the screen entirely cause the default value was also 0. They noticed that, but 0001 would still work by entering 1 for a while.

That is utterly stupid. Basic security flaw.

Back then, were single-character PINs allowed?

Hadriel

Changes to the PIC System - Zelkova - 2013-04-04

hadriel Wrote:That is utterly stupid. Basic security flaw.

Back then, were single-character PINs allowed?

Hadriel

No, single character PINs were not allowed. Because they were stored as an INT, 0001 was interpreted as "1" so you could just enter "1" and log in. I assume this was changed rather quickly.

Changes to the PIC System - Pink Bean - 2013-04-04

i changed it to get that message away when relogging.. asdfadsf.

Changes to the PIC System - IImaplers - 2013-04-04

MuscleWizard Wrote:but too many failed password pic attempts locks out the account
When I said bypass, I meant bypass completely. As in, the hacker doesn't have to click anything.

Changes to the PIC System - LancePopcorn - 2013-04-04

Just make it so we have to enter it at initial login, why would you want hackers looking at all your characters and stuff and then having to enter a pic.

Changes to the PIC System - MountLag - 2013-04-04

It lets you change the PIC even if you get the PIC wrong...
I punched in 111111 and still got the PIC reset prompt

Changes to the PIC System - SaptaZapta - 2013-04-04

MountLag Wrote:It lets you change the PIC even if you get the PIC wrong...
I punched in 111111 and still got the PIC reset prompt

*facepalm*

Does it at least require the current PIC as part of the reset procedure? (After you click "Yes" to the reset prompt)