This just hit me today. I play ffxi and noticed that their verfication of your ownership of an account is completely flawed.
In FFXI, in order to recover a lost password the only info you need is the first 4 and last 4 digits of the credit card last billed.
You could have the account holders name, a previous credit card used on the account, their social security number, address, basically every feasible piece of info that would well beyond prove ownership in any other case, yet in FFXI that won't do.
This seems to protect those accounts that have been hacked into and stolen and the accounts that have been previously sold to another user, whether through the will of the original owner or not.
Is FFXI the only mmorpg that has this way of doing things or do most of the other's operate the same way? There must be a better way of structuring protection for the account holder.
And since you can now legally buy and sell accounts through Sony's service, that shouldn't apply.
In FFXI, in order to recover a lost password the only info you need is the first 4 and last 4 digits of the credit card last billed.
You could have the account holders name, a previous credit card used on the account, their social security number, address, basically every feasible piece of info that would well beyond prove ownership in any other case, yet in FFXI that won't do.
This seems to protect those accounts that have been hacked into and stolen and the accounts that have been previously sold to another user, whether through the will of the original owner or not.
Is FFXI the only mmorpg that has this way of doing things or do most of the other's operate the same way? There must be a better way of structuring protection for the account holder.
And since you can now legally buy and sell accounts through Sony's service, that shouldn't apply.