View Single Post
  #7  
Old 11-10-2005, 12:19 AM
GrowlZ1010 GrowlZ1010 is offline
defunct
Join Date: May 2002
Posts: 187
GrowlZ1010 is on a distinguished road
Firstly, I assume you mean the IP address, since we wouldn't get much uniqueness if we assign every player the identifier "4" (or 6, but let's not go into that). Clarity is everything!

Secondly, IP addresses are not intended for authentication and certainly aren't tied to an individual computer, so let's not pretend that they are. Users with dial-up or even many kinds of residential DSL will be assigned addresses randomly from a pool of available ones; if they have to type in a password every time they reconnect, they'll not only be annoyed, but they'll also make the password as easy to remember as possible - maybe the same password, maybe the email address, maybe the username with some numbers appended, whatever - which kinda negates the security of such a scheme. (If you'd proposed some kind of psuedo-unique hardware-based hash featuring MAC addresses, or installed devices, or some other exotic combination, then maybe, but the IP just isn't good enough.)

Thirdly, there's not much GraalOnline can realistically do if you're prepared to type in all your passwords and details into third-party websites. If you're really determined to give your account away to someone, you will, no matter how many hurdles are thrown in your way, and disabling useful functionality because it might be misused is a bad idea.

The internet is a dangerous place full of electronical muggers and cyber banditos, but as long as you exercise some basic common sense - your car key isn't the same as your front door key, back door key, garage key, bank vault key, and Fred's Super Honest Happy Budget No-Fraud Credit Discount Emporium account key, is it? Do you make a habit of giving complete strangers your home address and duplicates of your keys? - and only hand out your details when you absolutely have to, you'll be fine.
Reply With Quote