DUST Search - Potential Email Address Disclosure

Shion Typhon wrote:

Jaqen Morghalis wrote:

Mithridates VI wrote:

Jaqen Morghalis wrote:

Maybe if you could explain how this grievous oversight and negligence on CCP's part might potentially cause me more than a slight inconvenience, I might share your concern over this "threat" to my personal security.

I'm not going to enumerate the possible attacks based on having the personal details and PSN login of another player because I don't want to give anyone any ideas. Sorry if that doesn't convince you, but I'm mainly looking to advise people who feel it significant.

I still don't understand (honestly, sorry if I'm being dense). I thought you said a person could get my email address, so where are they getting "personal details" and my login password from?

Without those, what's the worst they could do, send me emails?

How is my email address alone enough information to be in any way useful?

Because one of those 100 internet sites / services you've signed up for with your email as your username has $hit security and allows you to reset your password w/o a second level of authentication. Then in that 1 site you've also input your date of birth or home address which is the authentication factor for 3 more sites which then .... etc etc etc. 15 steps later they're in a site/game that has your credit card saved on file and is susceptible to buying in-game currency which can be RMT'd or whatever.

Security breaches occur across a multitude of interconnections, often run by people other than the original source. You might split your emails but having your primary gaming email in the wild is rarely awesome.


Author	Thread Statistics \| Show CCP posts - 2 post(s)
Jaqen Morghalis Abandoned Privilege General Tso's Alliance 76	Posted - 2013.07.03 10:28:00 - [1] - Quote Oh, no! Not my email address! That information is supposed to be top-secret level 5 classified! Now my secret identity is blown! My loved ones are in danger!
Jaqen Morghalis Abandoned Privilege General Tso's Alliance 77	Posted - 2013.07.03 10:45:00 - [2] - Quote Mithridates VI wrote: Jaqen Morghalis wrote: Oh, no! Not my email address! That information is supposed to be top-secret level 5 classified! Now my secret identity is blown! My loved ones are in danger! Seroiusly, though, what's the worst-case scenario here, some extra spam emails? Derp. I'm glad you don't suffer at all from having your email address known. Some would prefer their FirstName.LastName@gmail not be attached to their character. I don't mind giving them that right. I'm out of this thread now. Those who are pleased to know, you're welcome. Those who inevitably react with"OMG MITHILEAKS", I'm not going to engage with because it would look too much like returning to the forums. Sorry, but I just don't see how this as the seroius issue that people are making it out to be. It's not my home address or credit card number, it's my email address, something that gets given out ALL the time! Maybe if you could explain how this grievous oversight and negligence on CCP's part might potentially cause me more than a slight inconvenience, I might share your concern over this "threat" to my personal security.
Jaqen Morghalis Abandoned Privilege General Tso's Alliance 77	Posted - 2013.07.03 10:54:00 - [3] - Quote Mithridates VI wrote: Jaqen Morghalis wrote: Maybe if you could explain how this grievous oversight and negligence on CCP's part might potentially cause me more than a slight inconvenience, I might share your concern over this "threat" to my personal security. I'm not going to enumerate the possible attacks based on having the personal details and PSN login of another player because I don't want to give anyone any ideas. Sorry if that doesn't convince you, but I'm mainly looking to advise people who feel it significant. I still don't understand (honestly, sorry if I'm being dense). I thought you said a person could get my email address, so where are they getting "personal details" and my login password from? Without those, what's the worst they could do, send me emails? How is my email address alone enough information to be in any way useful?
Jaqen Morghalis Abandoned Privilege General Tso's Alliance 77	Posted - 2013.07.03 11:03:00 - [4] - Quote It's an email address. That thing is on my business cards! I give them out to strangers! Gasp! Oh noooooeeeeeesssssss!!!!! Just seems like an awful lot of trouble for someone to go through just to spam me with emails. There are far easier, and more effective, ways to cause me harm, if someone really wanted to.
Jaqen Morghalis Abandoned Privilege General Tso's Alliance 77	Posted - 2013.07.03 11:16:00 - [5] - Quote Shion Typhon wrote: Jaqen Morghalis wrote: Mithridates VI wrote: Jaqen Morghalis wrote: Maybe if you could explain how this grievous oversight and negligence on CCP's part might potentially cause me more than a slight inconvenience, I might share your concern over this "threat" to my personal security. I'm not going to enumerate the possible attacks based on having the personal details and PSN login of another player because I don't want to give anyone any ideas. Sorry if that doesn't convince you, but I'm mainly looking to advise people who feel it significant. I still don't understand (honestly, sorry if I'm being dense). I thought you said a person could get my email address, so where are they getting "personal details" and my login password from? Without those, what's the worst they could do, send me emails? How is my email address alone enough information to be in any way useful? Because one of those 100 internet sites / services you've signed up for with your email as your username has $hit security and allows you to reset your password w/o a second level of authentication. Then in that 1 site you've also input your date of birth or home address which is the authentication factor for 3 more sites which then .... etc etc etc. 15 steps later they're in a site/game that has your credit card saved on file and is susceptible to buying in-game currency which can be RMT'd or whatever. Security breaches occur across a multitude of interconnections, often run by people other than the original source. You might split your emails but having your primary gaming email in the wild is rarely awesome. Fair enough, thank you for the explanation. Still not too worried, though.
Jaqen Morghalis Abandoned Privilege General Tso's Alliance 78	Posted - 2013.07.03 13:03:00 - [6] - Quote steadyhand amarr wrote: To day I learned how little people know about internet security and how damage can be done with just your email :-( Meh, a little common sense and due caution goes a long way. I generally don't volunteer any personal info when registering on forums and such, I rarely use my credit card online (and when I do, it's with sites that I am reasonably confident are as secure as possible), I monitor my credit card balance frequently and regularly, I use PSN Cards for PSN purchases, and I've got multiple "junk" emails, all with different passwords. To do me any real harm, a person would need much more than just this one email address (even factoring in any other information about me that they could possibly extrapolate from it). I'm not saying it isn't possible but, to target me specifically, a person would have to be pretty determined, and spend quite a bit of time and effort to expand that one email address into something that would actually hurt me. If they're THAT determined, then they've got a serious vendetta against me for some reason, and will probably find some other, easier, more effective and direct way to hurt me, even if they didn't have my email address. The only other way this could affect me is if I'm just unfortunate enough to be either randomly selected, or one of many victims in some sort of mass-fraud, and the common sense and due caution that I mentioned above should protect me. Besides, I could also get hit by a bus on my way to work, that doesn't mean I'll never go outside again. Face it, stuff happens and, personally, I prefer not to spend my life worrying about every little thing that might possibly happen under just the right set of circumstances. You can't protect yourself from everything. Obviously I do whatever I reasonably can to protect myself, but I'm not going to lose any sleep because someone might have access to one of my email addresses. Living in fear is not living. /rant
Jaqen Morghalis Abandoned Privilege General Tso's Alliance 78	Posted - 2013.07.03 14:28:00 - [7] - Quote lol, you make it sound like they can just type my email address into the magic internet box and the magic computer bots do their computer magic and PRESTO, they have full access to my entire life! Is it possible that someone could conceivably use information from the internet to steal my identity and/or access my money? I suppose so, which is why I do take certain reasonable precautions when conducting business online. On the other hand, It's also possible that I could be randomly shot by a total stranger while walking down the street. But, is it likely? Probably not.