+- Southperry.net (https://www.southperry.net)
+-- Forum: Main (https://www.southperry.net/forumdisplay.php?fid=11)
+--- Forum: Nexon Announcements (https://www.southperry.net/forumdisplay.php?fid=20)
+--- Thread: PIC Reset Security Campaign (/showthread.php?tid=64748)
PIC Reset Security Campaign - Notify - 2013-06-05
http://maplestory.nexon.net/news/news/current/00G5M/
Nexon Wrote:
As part of our ongoing security campaign, we will be resetting account PICs. Maintaining a strong PIC gives you an extra line of defense against hackers, and changing your PIC every 3 months is essential to maintaining a secure account.
To reset your PIC, log into your account on the website, then visit the My PIC Info page here.
You can learn more about our security campaign in the Security Awareness Month posts here and here, and you can read up on the most recent changes to the PIC System here.
Thank you for keeping MapleStory secure!
![[Image: 00FAK-ba214571-3861-4b46-9da6-6b9356c46e62.jpg]](http://nxcache.nexon.net/spotlight/292/00FAK-ba214571-3861-4b46-9da6-6b9356c46e62.jpg)
PIC Reset Security Campaign - PirateIzzy - 2013-06-05
And for the people without access to their email, sucks to be them :/
PIC Reset Security Campaign - ¬Rob - 2013-06-05
They didn't reset them, just error'd half of the people to try logging in. I somehow expected this to happen, them saying it's all intended.
Gonna be irritating fixing all my accounts. :/
PIC Reset Security Campaign - Viener - 2013-06-05
PirateIzzy Wrote:And for the people without access to their email, sucks to be them :/
I have about 30 mules without e-mails so erm...
fml.
PIC Reset Security Campaign - icephoenix21 - 2013-06-05
Typical, nexon.
Not like I recall the emails for some accounts.
PIC Reset Security Campaign - SaptaZapta - 2013-06-05
Gee, thanks for the warning, Nexon.
Or did you have a database break-in and have to do this reset unexpectedly?
Ah well, only one account I don't have the e-mail for. I think.
PIC Reset Security Campaign - ChaoticCJ - 2013-06-05
Just a tip or heads up, if your PIC was reset (like all of my accounts) you can log in via gamelauncher and just type your new PIC twice.
PIC Reset Security Campaign - ChronosXIII - 2013-06-05
Would have been nice for a little warning during the maintenance.
Seems like my main didn't get the PIC reset though. Guess it's only for those accounts that had that annoying message pop-up every time you didn't want to reset it.
PIC Reset Security Campaign - tecul1 - 2013-06-05
But, if we just update our PIC every 2 months, we would never need access to our email, right?
PIC Reset Security Campaign - MountLag - 2013-06-05
ChronosXIII Wrote:Would have been nice for a little warning during the maintenance.
Seems like my main didn't get the PIC reset though. Guess it's only for those accounts that had that annoying message pop-up every time you didn't want to reset it.
I haven't reset any of my accounts' PICs and didn't get a PIC reset on the 3 I logged into. idk
PIC Reset Security Campaign - Elven Emily - 2013-06-05
Man, now I can't have my super easy pic anymore.
PIC Reset Security Campaign - SaptaZapta - 2013-06-05
ChaoticCJ Wrote:Just a tip or heads up, if your PIC was reset (like all of my accounts) you can log in via gamelauncher and just type your new PIC twice.
Oh bloody hell.
So now in the interest of our security, Nexon has left all accounts PICless?
PIC Reset Security Campaign - Rinax - 2013-06-05
Good thing the only account that I have no access to the email is deactivated.
PIC Reset Security Campaign - Girasol - 2013-06-05
PirateIzzy Wrote:And for the people without access to their email, sucks to be them :/
Viener Wrote:I have about 30 mules without e-mails so erm...
icephoenix21 Wrote:Not like I recall the emails for some accounts.
tecul1 Wrote:But, if we just update our PIC every 2 months, we would never need access to our email, right?
Rinax Wrote:Good thing the only account that I have no access to the email is deactivated.
If you don't have access to your e-mail, you can change it through the website. You do not need access to your old e-mail to set a new e-mail address, but you will need answers to your security questions.
¬Rob Wrote:They didn't reset them, just error'd half of the people to try logging in. I somehow expected this to happen, them saying it's all intended.
This has actually been in the process for a few months now. Basically, anyone who didn't reset their PICs back when we changed the system in April were forcibly reset.
SaptaZapta Wrote:So now in the interest of our security, Nexon has left all accounts PICless?
No, only accounts which had been recently logged in were given that sort of reset (where they only need to log in and could set a new PIC). The rest will have to actually log into their account on the website to change their PIC through the normal method.
Long story short, we noticed a huge trend between hacked accounts and the last time someone changed their PIC. Some people literally had not changed their PIC since it was last known as a PIN. This is why we implemented the 3 month timer for PICs. However, many people ignored that strong hint (which we assumed they would), so we have actually forced the PIC reset itself.
Like any password, you should update your PIC frequently.
PIC Reset Security Campaign - ResistGreen - 2013-06-05
Two step verification anyone..?
PIC Reset Security Campaign - Stereo - 2013-06-05
The circumstances around the PIC make me unlikely to ever rely on it for account security -- it's very annoying to type anything that could be considered at all secure (8+ characters alphanumeric case sensitive), and even if I do choose something secure, I'd have to change it so frequently that I'd be forced to remember it by writing it down cause PIC input doesn't trigger the kind of muscle memory I need on secure passwords.
Any PIC that's got letters in it doesn't need anything so sophisticated as a keylogger - it's entered so slowly, and unobscured, that you can just stand near a person and read it off.
Gonna be sticking to "1111222233334444" type pics thanks all the same.
PIC Reset Security Campaign - ¬Rob - 2013-06-05
Girasol Wrote:This has actually been in the process for a few months now. Basically, anyone who didn't reset their PICs back when we changed the system in April were forcibly reset.Well, some notification given in advance(like on the SC notice) would have been nice. Eh though, it's not that bad.
I've used the same PIC since it's release, it's pretty secure, how long must I wait to change it back to that? (I tried changing it back right after updating, it said it's been used too recently. D: )
PIC Reset Security Campaign - SaptaZapta - 2013-06-05
¬Rob Wrote:Well, some notification given in advance(like on the SC notice) would have been nice. Eh though, it's not that bad.
I've used the same PIC since it's release, it's pretty secure, how long must I wait to change it back to that? (I tried changing it back right after updating, it said it's been used too recently. D: )
Nothing is secure when Nexon's database can get broken into. Which I strongly suspect they think might have happened, or they wouldn't have got so aggressive about forcing this change without advance warning.
PIC Reset Security Campaign - Hanzor - 2013-06-05
Girasol Wrote:No, only accounts which had been recently logged in were given that sort of reset (where they only need to log in and could set a new PIC). The rest will have to actually log into their account on the website to change their PIC through the normal method.
This is weird because it was completely opposite for me. All my accounts in which i hadn't log in months got the "Easy login way" while my main, which i logged yesterday got owned, had to reset the pic the hard way and i had no idea how to do it..... God forbid but i had to actually "Do some reasearch"
Scary.EDIT: Nevermind, this happened because it was right after the patch, now that i finally logged out, i got THAT forced Reset, =P Now that i had reset on my own manually..... heh, at least i learned something new.
PIC Reset Security Campaign - Rinax - 2013-06-06
Girasol Wrote:If you don't have access to your e-mail, you can change it through the website. You do not need access to your old e-mail to set a new e-mail address, but you will need answers to your security questions.
That account is ancient and I don't think there was security questions way back in 2006. I've pretty much given up trying to regain access to it anyway.