Character lock no resale possible (CSM)

From sdeevelopedia
Jump to: navigation, search

All this data is potentially out of date, and should be taken with a truckload of salt

Stats[edit]

  • Raised by: mazzilliu
  • Submission Date: Sunday october 18th 16:00
  • Issue ID: tbd

Status[edit]

All character transfers must be manually approved by GMs.

Summary[edit]

Right now, anyone who can hijack an e-mail account attached to an EVE account can reset the EVE account password and clear out the EVE account immediately(via character sales or destruction of items, etc).

Solution[edit]

After certain events such as a password reset from an e-mail, or a password change, or an e-mail change, or an account login from a country different from that of the previous login- or other types of account changes that can signal a potential account hijacking- do the following:

  • add a temporary lock on the account so the person playing the character is unable to transfer the character. still allow them to play, but don't let them trash the account.
  • notify the user via e-mail that the lock has occured
  • if there was an e-mail change, send notification to the old e-mail address as well
  • if there was a password change, send notification to the current e-mail address
  • I would like to also see the account locks be able to do other things such as prevent someone from completely emptying their own wallet, corp/personal hangars, reprocess or trash items, but I understand that would require a lot more coding time.



Pros[edit]

  • more security

Cons[edit]

  • devs will have to be careful in the actual implementation otherwise it will inconvenience legitimate users.

Relevant Forum Threads[edit]

Votes[edit]

Passed 5/3