So the amount of hackings and compromised accounts have been growing a lot lately. So what I was thinking is implementing a secondary level of protection for the their self.

Back when I was into runescape (a long time ago) they had a feature for this. Your bank account in-game had it own PIN number. So even if someone managed to hack into your account they still couldn't access your items without that PIN number. It would be nice if you could activate a PIN on your account that would be required for all item and TC transfers on your account. This would be a selectable feature in your account settings of course, so no one would be forced to use it.

Its a simple idea thats very effective. I don't see any reasons not to have it.

I find this very useful.

What about bying items from market? How would it work?

Supported

This could also be used for Shared Bank accounts, yes? You could only access a shared bank by entering the PIN, which would be more safe.

I would say that you have to enter your PIN to add an item to your market inventory, after that someone can just buy it regularly.


Shared back account is still a player account at the end of day, but I guess they could have a bypass for it. If one of the accounts with permissions to the shared back accounts accesses it then it would bypass the PIN. Though once the TC in on your account you would need to use your PIN to transfer money to other accounts or shared bank accounts. If someone logs into the bank account instead then they would need to know the bank accounts Personal PIN to transfer TC out normally.

Supported for shared banks and transfers

You can still transfer through decap prizes though ?

Thats true, but its not like you can do much about in-game transactions. Even with that this extra bit of security still fully protects the items and adds some level of protection to the TC. Its possible to still report that your account was hacked and your money was deposited into a decap prize though. Then it would just be a simple matter of looking at which IP logged into your account and tracing what accounts are linked with that. Then just checking their transaction history for the decap prize and boom, problem handled.

So yea, its not a perfect system since there is that one loop hole for TC, but the system doesn't actually cause any hard and only helps protect the account more. TC can always be refunded, but items are a bitch to track down once they've been removed from an account.

Actually to be honest, the devs could create a new chat command to allow the PIN to be required in game for use of TC in bets and decap prizes.
Could work something like this:
K0HTA has Connected to the server
/PIN 1234 *Enter*
Correct PIN Entered, TC transactions now permitted.

Just some simple chat command like that, you would have to retype it every time you join a new server in multiplayer.
I mean the only rooms you bet or put TC in a decap prize are bet rooms, so having to type this command it will never get "bothersome" or anything like that.

Brute forcing your way into a PIN (4 digits especially) isn't hard for someone who can compromise your account. See: people brute forcing into iOS lockscreens

it will act like a deterrent for most people I would guess...

Not true at all.

tyzi Moderated Message:

useless post; warned. keeping this here incase he wants to explain why