Serious Concerns about Security in Neverwinter.

weaver936 · September 2016

With all the claims by Cryptic/PWE about Botting and other issues with connectivity etc because of the Gateway and other things... with so much of the game being taken out of the game because of the Dev's not be willing or ABLE to fix systems in game... the question comes to mind. What ELSE is insecure or beyond the capacity of this team to keep under control?

Should we trust that our Credit Card info or personal information is secure with this company? Or do they outsource the security of our information to another company? If so... what company? Is it a cheap cost effective (for them) company that meets whatever their limited budget a lot funds for?

I'm not making accusations of any sort... other than saying.. if they have to remove SIGNIFICANT and FUNDAMENTAL parts of the game (which they have complete control over as Developers)... then, how can we trust their ability to protect things that are important to us?

The above post is an example of the types of doubts that creep up in the Player Base's minds when the Developer's Actions and Words don't lend themselves to developing an atmosphere of trust.

If you can't protect your own game.... how can you protect our interests? If you have to remove whole sections of your game because of your inability to manage security issues in relation to it... how can we TRUST you to protect our info or our INVESTMENT of time or money into your product?

I know I haven't stated my case very well here... but, what if someone else with a much better intellect and vocabulary and a place to post a better argument than I have to many more people decided to do so?

You guys really need to focus more on your image, reputation, and relationship with your player base. All it takes is for some really angry, really intelligent, and really influential people to start a PR Campaign against you... and this would not only effect one of your games.. but all of them.

I'd HATE it if this happened... but.. if you all don't care about how you look to the public... and aren't willing to do anything about it (with more than just words)... then I'm not going to worry about it either.

I just hate the idea that I may have invested years and hundreds of dollars (maybe thousands) into a lost cause.

namelesshero347 · September 2016

You are confusing two issues here - hacking to steal personal and financial information, and botting to win in the game.

Every web site and financial system will be subject to hacking. You can minimize your risk by using third party payment system like paypal and steam. And provide as little information about yourself as possible.

Every popular game will have people trying to game the system to win. If you want to avoid issues like botting, play an unpopular game no one cares about.

Unknown · September 2016

This content has been removed.

kvet · September 2016

If you are concerned about your personal financial information (credit/debit card numbers, for example) being compromised or otherwise unsafe, here are three solid options. There's probably others, but these three will absolutely protect your info from compromise should PWE have any problems.

1: Purchase VISA gift cards and use those instead of your credit card number.
2: Many credit card issuers have a tool that allows you to create one-time or limited use credit card numbers. If you're not sure about a vendor, or even if you are given how often even very reputable companies get hacked these days, you should make use of these tools. This is true even if you use a 3rd party (like Steam or Paypal).
3: Don't give Cryptic any money.

I'm going with option 3, but previous to that when the game was worth paying for I went with option 1 (though WAAAAAY back I used Rixty cards, but they stopped taking those something like 2 years ago). I've never trusted Cryptic or PWE with my financial information, but then, I don't trust ANY online vendor/retailer with that, not even Amazon.

Pro tip: NEVER EVER use your visa/mc debit card for online transaction. ever.

tripsofthrymr · September 2016

kvet said:

Pro tip: NEVER EVER use your visa/mc debit card for online transaction. ever.

+1, just google major data breaches 2016

iandarksword · September 2016

I have always used the Prepaid cards and would recommend that method to anyone concerned about security. They aren't always available at everyone's local store though.

mentinmindmaker · September 2016

Never use debit cards on the Internet.
Credit cards are somewhat ok, since you can complain about transactions on those before the money goes.
One-time cards are the best solution.

Comment to OP: The botting does not constitue a security breach. The botting is unintended use of intended game mechanisms. They just did not see the consequence of some of the game mechanisms at the time they made it. Basically:
* Some game mechanisms are/were too easy to use with automated play. (Invoke, anything on GW, crafting) Which is why they systematically move things behind fighting/questing protection - fighting/questing being harder to automate.
* Game is too dependent on purchased goods. Compare to ESO, I am told there is limited botting there since there really is not much of value you can buy, nor easily automated tasks.

Those two together makes for extended botting activity.

But it is not a security breach, since everything in game operates the way it is supposed to.
Actually, the techniques used for botting in game sees extensive legit use for automated software testing etc.

solbergx · September 2016

iandarksword said:
I have always used the Prepaid cards and would recommend that method to anyone concerned about security. They aren't always available at everyone's local store though.

Me too, and i switch them with time!!!

brun2000 · September 2016

It has been said here already, but you're confusing information hacking with game botting. Game botting requires a lot more effort into protecting because they just have to make a new account to enter the game, nothing more.
Information hacking is much, much harder to gain access to, especially if the company is experienced with dealing with money, which I know Perfect World (now ARC Games) is very experienced with, they are already in the business for a very long time. Most companies like this never touch your transaction information or even see it, it will be encrypted from the start to finish with a very complex encryption using third party websites. In fact, your computer is more prone to hacking from keyloggers than the website itself, so do not take these people as amateurs, they may have game problems, but but money is something they don't want to lose.

lewstelamon01 · September 2016

brun2000 said:
It has been said here already, but you're confusing information hacking with game botting. Game botting requires a lot more effort into protecting because they just have to make a new account to enter the game, nothing more.
Information hacking is much, much harder to gain access to, especially if the company is experienced with dealing with money, which I know Perfect World (now ARC Games) is very experienced with, they are already in the business for a very long time. Most companies like this never touch your transaction information or even see it, it will be encrypted from the start to finish with a very complex encryption using third party websites. In fact, your computer is more prone to hacking from keyloggers than the website itself, so do not take these people as amateurs, they may have game problems, but but money is something they don't want to lose.

True, but again, check current events. No system is completely impervious to hacking--as evidenced by the increase in data breaches of late.

Serious Concerns about Security in Neverwinter.

Comments