Jump to content
jcsnider

Intersect Development Road Map

Recommended Posts

On 28/7/2016 at 3:02 AM, jcsnider said:

Password recovery/reset system. (Give server SMTP info, server sends 6 digit code, client types in the code and can reset password)

 

If you do this, could you give us the option of sending that code by default when registering so we can avoid fake-email accounts?

Share this post


Link to post
Share on other sites
3 hours ago, jcsnider said:

Might be able to convince @panda to do it.  I personally don't think it's worth the extra coding effort given how easy it is to use a fake email address regardless (http://www.fakemailgenerator.com)

 Well, if that stops a 11 years old multiaccount troll... I think it's worth. But well, is just my opinion.

Share this post


Link to post
Share on other sites
29 minutes ago, Khaikaa said:

 Well, if that stops a 11 years old multiaccount troll... I think it's worth. But well, is just my opinion.

 

Even with that, if i would want to troll a game with multiaccount i would create real one to be able to troll. Don't underestimate the time they can unnecessarily waste.

Share this post


Link to post
Share on other sites
4 hours ago, Khaikaa said:

 

If you do this, could you give us the option of sending that code by default when registering so we can avoid fake-email accounts?

 

4 hours ago, jcsnider said:

Might be able to convince @panda to do it.  I personally don't think it's worth the extra coding effort given how easy it is to use a fake email address regardless (http://www.fakemailgenerator.com)

 

42 minutes ago, Gibier said:

 

Even with that, if i would want to troll a game with multiaccount i would create real one to be able to troll. Don't underestimate the time they can unnecessarily waste.

 

For the reason Gibby provided doing this for this specific reason is pretty pointless.

 

That being said there is a good reason to do this: email verification, so that a user can make sure their account was created with the correct email address so that if they ever forget their password they know they can recover their account. This would be the reason I would add this.

Share this post


Link to post
Share on other sites
3 hours ago, Gibier said:

 

Even with that, if i would want to troll a game with multiaccount i would create real one to be able to troll. Don't underestimate the time they can unnecessarily waste.

 

I can create a little script that generates 1 new account & character per ~5secs. I can also run as many scripts as open clients at the same time. If you don't realize I'm doing that(for example, because you are sleeping) you'll find out that you have thousands of accounts wasting memory on the db. You can ban my IP, I don't care about that, know how to fake it. I can't do this if I need to verificate every email I use.

 

I think this is a basic security necesity.

Share this post


Link to post
Share on other sites
4 minutes ago, Khaikaa said:

 

I can create a little script that generates 1 new account & character per ~5secs. I can also run as many scripts as open clients at the same time. If you don't realize I'm doing that(for example, because you are sleeping) you'll find out that you have thousands of accounts wasting memory on the db. You can ban my IP, I don't care about that, know how to fake it. I can't do this if I need to verificate every email I use.

 

I think this is a basic security necesity.

I can easily bypass this verification restriction with an automated script too.

Share this post


Link to post
Share on other sites
1 minute ago, panda said:

I can easily bypass this verification restriction with an automated script too.

 teach me ( ͡° ͜ʖ ͡°)( ͡° ͜ʖ ͡°)( ͡° ͜ʖ ͡°)

Share this post


Link to post
Share on other sites
1 minute ago, Khaikaa said:

 teach me ( ͡° ͜ʖ ͡°)( ͡° ͜ʖ ͡°)( ͡° ͜ʖ ͡°)

Requires owning a domain, but the point is that the "security" necessities you are referring to aren't solved by your proposed solutions, they just add a day max to writing a bot to automate this.

 

Share this post


Link to post
Share on other sites
1 minute ago, panda said:

Requires owning a domain, but the point is that the "security" necessities you are referring to aren't solved by your proposed solutions, they just add a day max to writing a bot to automate this.

 

 

Ok, in that case I have nothing else to say about this, obviously I have less knownledge about all of this than you. I will simply trust in your decisions as I do with all the other features.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×