This is a suggestion that hit me, when i failed to suggest a other suggestion called "Safety Codes" to make account security better so that hackers didn't ruin a players account. Please if you read my suggestion: READ IT WELL BEFORE YOU COMMENT!

 

 

 

So i am gonna give it a last try...

 

 

 

This suggestion, is option able so you do not need to use it. But it does help very much if you think about it.

 

 

 

It is a suggestion involving a room in Runescape to keep your account safe: I call it Room Of Safety. A example of how the room can be is, Falador Party Room. So that players can have big space to "Park" their characters. You will go talk to some tutors that will explain how the room works. They will say:

 

 

 

"This is the Room Of Safety"

 

 

 

Then the tutors will explain: You must make 3 pin codes

 

before you enter this room. Cause once you enter it, to get out you must enter these pin codes one by one. They will also say "But be careful, so you don't forget the codes, cause they are highly important to get out, or else you must wait a time before you can leave the room".

 

 

Reason For Creating The Room Of Safety: As players log out, i am sure many fear being hacked, i know i do. So this is a option for securing your account. One of the big reasons is also, to "Park" your account in this room when you take a break/or quit. Then this way your account will be in a room, that must be entered 3 pin codes to go out of: in other words to enter the real world of Runescape.

 

 

NOTE: If you forget your pin codes, you can cancel it. But it will take 5 days to get it cancelled. Within this time, i hope that this 5 days will get the hacker to "Change his/her mind" and stop being on the account.

 

 

 

Remember, this room can be accessed whenever you want, but it's optionable.

 

 

 

Please comment, but ive looked through suggestion and i can't find any mistakes.

Well, its OK...I suppose I support. But many people won't be bother to 'Park" Their character :?

Well, its OK...I suppose I support. But many people won't be bother to 'Park" Their character :?

 

 

 

Tell me, please....what wrong is it with securing your account?

 

 

 

As for parking, when someone takes a break or quits=their characters are literally "PARKED" but in a unsecure way!

Sounds great, yet the pin cancel time should be changable-from 5 days to 15 ish days, since bank pin can be canceled in 7/3 days, so banked items can be semi-safe for 7 days. My worst fear is not logging in for 7 days and finding my pin cancelled.

Erm, what if you go on holiday for like 2 weeks, and 'Park' your character in there and a hacker cancels your pin, your acc is screwed. You really need to think it through a bit more, maybe dont make it pins, maybe you could try questions, like with recovery questions, but make them un-cancel-able (if thats a word : ) because your more likely to remember personal questions that only you know.

Erm, what if you go on holiday for like 2 weeks, and 'Park' your character in there and a hacker cancels your pin, your acc is screwed.

well if someone hacks your acc now then youre screwed as soon as they do, but with this if youre gone for a day or two and get on to see your pins cancelled then youll know someone is trying to take your acc.

Im sorry, but every time i want to log out i dont want to have to go to some room of safetly just to lock it up for the night.

Im sorry, but every time i want to log out i dont want to have to go to some room of safetly just to lock it up for the night.

 

 

 

Its optional.

Firstly, if Jagex have put in place all the correct security measures into place on their database then "hacking" their database would be extremely difficult. Note I said extremely difficult, not impossible. It would take a lot of expertise and time to do and would not be worthwhile for an account or two. If some one were to hack into the Jagex database it would be for a much more malicious purpose, like delete all accounts, but then again Jagex will have backups. Basically what I am implying here is that outside the game hacking is not really a threat - the threat comes from inside "hacking"

 

 

 

Secondly, as far as I am concerned the account security is good enough IF YOU FOLLOW THE RULES (specifically rules 3, 6 12 and 13). If you don't want to read the rules then do the Stronghold of Security which will give you all the information you need.

 

 

 

However, if people want more security the following password rules could be set :

 

 

 

Don't use anything personal as a password, eg your own name, pet name, date of birth etc.

 

Don't use your RS username as a password

 

Avoid common passwords like "password", "welcome" etc (including all derivations like "p455w0rd")

 

Must be at least 8 characters

 

Must be alpha-numeric characters only (ie. no spaces, /, ?, etc)

 

Must contain at least 1 alpha and 1 numeric character

 

Must contain at least 1 capital letter

 

Must not have two consecutive characters the same

 

Forced password change on a regular basis (eg monthly)

 

Unable to use the same password twice over a set period (eg 1 year)

 

 

 

These rules (I think I have got them all :pray: ) are the industry standard for user accounts and are implemented worldwide. It would be relatively easy for Jagex to do (except the first one). :thumbsup:. However, this would not prevent the idiotic RS player who breaks the rules on accout access and giving out their password to a "friend" and then complains of being hacked.

 

 

 

If you want to go even further down the security line you could have passwords randomly generated on login and sent to the e-mail address registered to the account. This would mean every time you logged in you would have to wait for a password to be generated, even if you lost connection for a second. This is very annoying, and I don't think we want to go this far. However, this would make the accounts more "idiot" proof as the "hacker" would also need access to the RS player's e-mail.

 

 

 

Just to add, I started playing RS about 6 months before RS beta came out and, in all this time, have NEVER been hacked, simply because I follow basic password protection rules.

 

 

 

One final thing. If you do find that your RS account has been "hacked", interrogate your brother/sister, real life friends and RS "friends" BEFORE you start whining to Jagex as in 99.9% of cases one of these will be the culprit.

A pin for first logging in would be much better...

Firstly, if Jagex have put in place all the correct security measures into place on their database then "hacking" their database would be extremely difficult. Note I said extremely difficult, not impossible. It would take a lot of expertise and time to do and would not be worthwhile for an account or two. If some one were to hack into the Jagex database it would be for a much more malicious purpose, like delete all accounts, but then again Jagex will have backups. Basically what I am implying here is that outside the game hacking is not really a threat - the threat comes from inside "hacking"

 

 

 

Secondly, as far as I am concerned the account security is good enough IF YOU FOLLOW THE RULES (specifically rules 3, 6 12 and 13). If you don't want to read the rules then do the Stronghold of Security which will give you all the information you need.

 

 

 

However, if people want more security the following password rules could be set :

 

 

 

Don't use anything personal as a password, eg your own name, pet name, date of birth etc.

 

Don't use your RS username as a password

 

Avoid common passwords like "password", "welcome" etc (including all derivations like "p455w0rd")

 

Must be at least 8 characters

 

Must be alpha-numeric characters only (ie. no spaces, /, ?, etc)

 

Must contain at least 1 alpha and 1 numeric character

 

Must contain at least 1 capital letter

 

Must not have two consecutive characters the same

 

Forced password change on a regular basis (eg monthly)

 

Unable to use the same password twice over a set period (eg 1 year)

 

 

 

These rules (I think I have got them all :pray: ) are the industry standard for user accounts and are implemented worldwide. It would be relatively easy for Jagex to do (except the first one). :thumbsup:. However, this would not prevent the idiotic RS player who breaks the rules on accout access and giving out their password to a "friend" and then complains of being hacked.

 

 

 

If you want to go even further down the security line you could have passwords randomly generated on login and sent to the e-mail address registered to the account. This would mean every time you logged in you would have to wait for a password to be generated, even if you lost connection for a second. This is very annoying, and I don't think we want to go this far. However, this would make the accounts more "idiot" proof as the "hacker" would also need access to the RS player's e-mail.

 

 

 

Just to add, I started playing RS about 6 months before RS beta came out and, in all this time, have NEVER been hacked, simply because I follow basic password protection rules.

 

 

 

One final thing. If you do find that your RS account has been "hacked", interrogate your brother/sister, real life friends and RS "friends" BEFORE you start whining to Jagex as in 99.9% of cases one of these will be the culprit.

 

 

 

It's common sense that your password must be protected...and as for someone hacking you: It's not a investigation. It's a game...

 

 

 

If you make it bigger out of it, then you've lost the grasp in reality. Just like Jagex has a Backup incase someone hacks their database and deletes info, this suggestion is a Backup incase the hacker do get into your account...

 

 

 

I don't see the point of your posts: you've just mentioned things thats obvious to most of us...

 

 

 

As for security: you can never have to much of it, if it's a matter of your account being ruined.

Yea, only 1 problem. If a hacker hacks you, and sets a "parking pin" on your account.....

 

This would work towards your hacker, more than it would you. He would just hack you, and wait until you took a break or something, and set a parking pin and park your account in there. Even if you managed to recover the account, you'd be stuck from getting out...

 

Also, if your thinking about making a "recovery parking pin questions" thing, it'd be kinda pointless and totally against the security feature.

Yea, only 1 problem. If a hacker hacks you, and sets a "parking pin" on your account.....

 

This would work towards your hacker, more than it would you. He would just hack you, and wait until you took a break or something, and set a parking pin and park your account in there. Even if you managed to recover the account, you'd be stuck from getting out...

 

Also, if your thinking about making a "recovery parking pin questions" thing, it'd be kinda pointless and totally against the security feature.

 

 

 

Then again, if a hacker does HACK you, He could do more damage: than parking your character in Safety Room.

Which really brings it back to the "no point in this" issue. I mean, i liked your previous suggestion more, i mean, how many people "park" their characters in a certain place every single day. Might as well make it a "password pin" as i mentioned in your previous suggestion.

 

If you seriously want to consider continueing, you should make the "parking place" your house. I mean, not really that tough, and he can't do much if your house isn't in build mode. You could also make him have to enter the "parking pin" if he wants to switch to build mode (once of course). Also, you can teleport to your house, and its already a feature of RS, so Jagex wouldn't have to make a new room with new codeing.

Which really brings it back to the "no point in this" issue. I mean, i liked your previous suggestion more, i mean, how many people "park" their characters in a certain place every single day. Might as well make it a "password pin" as i mentioned in your previous suggestion.

 

If you seriously want to consider continueing, you should make the "parking place" your house. I mean, not really that tough, and he can't do much if your house isn't in build mode. You could also make him have to enter the "parking pin" if he wants to switch to build mode (once of course). Also, you can teleport to your house, and its already a feature of RS, so Jagex wouldn't have to make a new room with new codeing.

 

 

 

I also said "One of the big reasons i suggested this for is for players quitting/taking a break"....

Also, make sure NO RANDOM EVENTS while in the room :|

I'm kind of on the border of supporting and not, but I also suggest maybe having more than one and have them spread out around RS? So people won't have to waste a teleport to get there.

I don't really support. I'd find parking my character in one place very annoying, and to cut a long ramble short, feel that a simple bank-pin style password when logging in would be far better than having 3 different passwords to remember.

 

 

 

This is due to 2 reasons, one of which has already been stated at least once:

 

-Not many people will be willing to move their character to a specific location every time they want to log out for awhile.

 

-Three passwords are alot harder to remember than one.

 

 

 

 

 

What do three passwords do that one does not? You mention the hacking of the JaGEx database; why bother, when its far easier to set up a false site claiming to do whatever, and have people enter their passwords. Loss of a password is 99.9% of the time, the fault of the person, and being sensible about choosing a password is far better than having half a dozen.

 

 

 

 

 

Anyway, thats my two cents...

 

 

 

 

 

EDIT: 1st post for me...been browisng here for over a year though

As someone pointed out, having to take your character to a spot to park it seems unnecesary and possibly annoying to the point that few would use it. A better delivery method would be a setting that you can turn on and off from you player control panel. But I do like the security of the parking concept, as long as it's optional. I wouldn't want to be forced to enter in three different pin numbers every time that I log in, personally.

well 3 pins really aren't better than 1. The room could randomly generate 10-20 pins for you, you would need to write them down somewhere and when logging in you'd enter ONE (random, it would say you which one e.g. pin no. 3 or pin no.11) of the pins. So even if somebody sees you entering the pin, or you get a keylogger with screenshot ability your account would still be pretty safe.

well 3 pins really aren't better than 1. The room could randomly generate 10-20 pins for you, you would need to write them down somewhere and when logging in you'd enter ONE (random, it would say you which one e.g. pin no. 3 or pin no.11) of the pins. So even if somebody sees you entering the pin, or you get a keylogger with screenshot ability your account would still be pretty safe.

 

 

 

:shock: :shock: :shock:

 

 

 

You expect people to learn 20 pins!!!!

 

Even if you dont learn them, what happens if you misplace the sheet they are on :shock:

 

 

 

Just NO!

I didn't say that they should learn them. And that would probobly teach people to remember where did they put their stuff :thumbsup:

The security we have is completely fine.

 

 

 

Every password Iv ever had contains numbers, letters, capitals, and is "over" the maximum limit, but I still type it fully as I dont know where it ends.

 

Security Questions should be used in emergencies, so shouldnt be able to be keylogged like a password. Even still a bank pin.

 

 

 

The security is only as good as far as you implement and protect it.

 

 

 

Dont download things that arnt safe, so you wont have keyloggers. And, if your unlucky because a sibling or whatever gets a keylogger, that sucks, but, sorry, the whole world wont stop just because your the victim of a unfortunate circumstance.

For a start, real hacking does not happen. It's keyloggers. If you have at all decent virus protection, it will prevent that. A real hacker would have to remotely access your computer (trojan), then what? Unless you have your passwords stored in your computer, then there's nothing they can do, apart from hacking jagex, in which case jagex would know, and they could take legal action.