2013-10-19, 08:37 PM
Daakun Wrote:Devil's advocate here... what if this service has its database swiped?
Now the guys know which characters have valuables on them and know who to target in the actual game.
Haishiro Wrote:Personal info doesn't have to be stored in the database: the website could log your info in a .csv/.xml/whatever file and let you download it/reupload when you want to update/view your info.
If they can get into a database to get the info they can certainly get into flat files. More so in fact since the flat files would have to be somewhere downloadable whereas a database only has to be accessible to the server itself ( user -> website -> db, not user -> db) , not the entire internet. And of course if you're storing the flat files in a database you've hit the threshold of absurdity because you then have all the flaws and none of the advantages.
The bottom line is regardless how your personal information is stored by a 3rd party, if that 3rd party is breached your info is more than likely public. There is no sugar coating that fact. Even if it's encrypted if your security was so bad they got in at all, they probably got any necessary keys too and/or can brute force it since most reversible encryption can be broken with a few GPUs now days.
It's not having what you want - It's wanting what you've got.