dr who
17th November 2006, 01:29 PM
After the Game B2 Round 39 (Nov 2006) fiasco, where a whole cartel had their accounts moved and their passwords changed, I thought I would suggest a couple of ways to improve account security.
1. Before the account password can be changed, you should be required to enter additional information that only you (as the account holder) would know, such as the email you used at sign-up. This should not be too hard to implement, just an extra field on the CHANGE PASSWORD screen. Excellent short-term fix, and probably sufficient.
2. By implementing a second password (a "cartel management" password) that you can give to cabinet to use to access your account from within their account. Ideally, it would only allow access to limited commands, and it would make it easy to track who accessed the account. This suggestion may not be practical, however, it IS only a suggestion. Other ideas may spring from it.
1. Before the account password can be changed, you should be required to enter additional information that only you (as the account holder) would know, such as the email you used at sign-up. This should not be too hard to implement, just an extra field on the CHANGE PASSWORD screen. Excellent short-term fix, and probably sufficient.
2. By implementing a second password (a "cartel management" password) that you can give to cabinet to use to access your account from within their account. Ideally, it would only allow access to limited commands, and it would make it easy to track who accessed the account. This suggestion may not be practical, however, it IS only a suggestion. Other ideas may spring from it.