Posted by Winter

PCID is one example, and there is no PCIDFaker.

PCID isn't all that secure either. Any way to try to generate automated unique identities will probably fail because they rely on generated information that is then stored and can be subsequently faked. People have faked/changed PCID's for a while via changing some registry values. In fact, many people have lost accounts due to their PCID spontaneously changing.  

Posted by Dusty

PCID isn't all that secure either. Any way to try to generate automated unique identities will probably fail because they rely on generated information that is then stored and can be subsequently faked. People have faked/changed PCID's for a while via changing some registry values. In fact, many people have lost accounts due to their PCID spontaneously changing.

True, that is very true.. It really seems like there is no ideal way to secure an account then, without phishing, stealing, faking, and the whole mess.. On a side note, how many people actually would consider editing registry values for a Graal benefit? That's just insane lol!  

Posted by Winter

True, that is very true.. It really seems like there is no ideal way to secure an account then, without phishing, stealing, faking, and the whole mess.. On a side note, how many people actually would consider editing registry values for a Graal benefit? That's just insane lol!

It's about as insane as UDID faking. The problem is using UDID's as a means of security with no player-input(like passwords). That's insecure because it's putting faith on the fact the UDID is verifying the person is who they claim they are, when such a thing can be faked. At least with a password people KNOW that giving away their password is stupid, whereas people aren't really aware that their UDID is their password.  

Posted by Dusty

It's about as insane as UDID faking. The problem is using UDID's as a means of security with no player-input(like passwords). That's insecure because it's putting faith on the fact the UDID is verifying the person is who they claim they are, when such a thing can be faked. At least with a password people KNOW that giving away their password is stupid, whereas people aren't really aware that their UDID is their password.

Then again, passwords are subject to phishing.. I guess its really just making it harder and harder, but the faking can always still exist.  

O.o this is a necrothread.