Temp Ban for False Pins?

My friend was telling me that Nexon now temp bans accounts for a day if too many wrong pins are entered.
I thought they blocked the IP from logging in for an hour or something.

Am I wrong, or is Nexon really that stupid....

It's a 5 minute ban, relax. No IP ban, just that account for ~5minutes.

._.
They actually ban the account?
Why not just block the IP logging in. D:

What if it's you putting in the wrong PIN five times? I've done that before, I have to remember three different PINs, and 6 different passwords.

If it's the real owner, then they can't log in for five minutes with the IP or account block.
If it's not the real owner, the account block would stop the real owner. A bot would keep the account 'banned' all day. ._.

what are you complaining about? I mean come on, you have to be a complete idiot to put in the wrong pin 5 time in a row.

And I tend to like security features that stop people from pin cracking my account

what are you complaining about? I mean come on, you have to be a complete idiot to put in the wrong pin 5 time in a row.

And I tend to like security features that stop people from pin cracking my account

Re-read his post and think logically for a second.

Anti-hack measures are supposed to penalize the hacker, and not the legitimate owner, whenever possible. With temp bans on accounts instead of IPs, someone could exploit the system to lock out a victim target account. With temp IP bans, only the hacker would get locked out.

Old news.

Re-read his post and think logically for a second.

Anti-hack measures are supposed to penalize the hacker, and not the legitimate owner, whenever possible. With temp bans on accounts instead of IPs, someone could exploit the system to lock out a victim target account. With temp IP bans, only the hacker would get locked out.

Think of Nexon's reasoning: Who else but someone who isnt the owner of the account would get the pin wrong 5 times in a row?

But yes, I can see how constantly blocking someone from their account could be exploitable

what are you complaining about? I mean come on, you have to be a complete idiot to put in the wrong pin 5 time in a row.

Well, sorry if I try to protect my accounts and have to help friends transfer.

Think of Nexon's reasoning: Who else but someone who isnt the owner of the account would get the pin wrong 5 times in a row?

But yes, I can see how constantly blocking someone from their account could be exploitable

The owner would be more likely to get it right though. :f6:
The trusted friend/person who got lucky with random guesses is more likely to get it wrong.

If it's the real owner, then they can't log in for five minutes with the IP or account block.
If it's not the real owner, the account block would stop the real owner. A bot would keep the account 'banned' all day. ._.

Don't give out your nexon ID?

If it's the real owner, then they can't log in for five minutes with the IP or account block.
If it's not the real owner, the account block would stop the real owner. A bot would keep the account 'banned' all day. ._.

Y'know how easy it is to bypass an ip ban?

I won't say specifically how, but think for a moment how much people have bypassed and made mults on forums.

I'm sure others could think of more complicated ip bans, but it's a really complicated matter. Personally I think it'd be easier by making it so that to unlock the ban, all you'd have to do is answer a question and type in another pin/password. I'm guessing they're planning on using Secret question #1 (?) for this purpose.

Y'know how easy it is to bypass an ip ban?

I won't say specifically how, but think for a moment how much people have bypassed and made mults on forums.

I'm sure others could think of more complicated ip bans, but it's a really complicated matter. Personally I think it'd be easier by making it so that to unlock the ban, all you'd have to do is answer a question and type in another pin/password. I'm guessing they're planning on using Secret question #1 (?) for this purpose.

It's five minutes. By the time you got your IP changed, you'd be able to log in. .__.
And yes, I know how easy it is to bypass IP checks. I've done it before. :x

What if it's you putting in the wrong PIN five times? I've done that before, I have to remember three different PINs, and 6 different passwords.

so why not making all the pins the same and all the p/w the same too?

I have to remember my friend's accounts, and one of them was hacked, so he changed the password and PIN of those. x.x