my account stolen

[loftar]

Would it be possible to send a confirmation e-mail and if that e-mail is not addressed by clicking a link or some such within X days/weeks then the account is transferred over to the new e-mail? That way if it is fraudulent then the original owner can block it but if it's legitimate then they'll be able to transfer it over safely.

I don't obviously see how this would be better than the "revert back" link that I mentioned.

[TeckXKnight]

Would it be possible to send a confirmation e-mail and if that e-mail is not addressed by clicking a link or some such within X days/weeks then the account is transferred over to the new e-mail? That way if it is fraudulent then the original owner can block it but if it's legitimate then they'll be able to transfer it over safely.

I don't obviously see how this would be better than the "revert back" link that I mentioned.

Initially I was thinking that it adds a bit of delay to the transfer process but if they already have your password, then that delay isn't meaningful.

[loftar]

I'll admit I also got caught for a moment in that trap. :)

[borka]

Also Teck - if you've lost access to your email account (some german email companies can be very restrictive and acting faster than light when you're not fast enough with your prepay for the next quarter) you're happy about an easy method to change the email adress here.

The main point is still: don't share your password if you want to keep the account for yourself...

Good that you blocked the account loftar ... i'm eager to read when the overtaker calls in ... and Svetlana prolly likes to know too

[Arcanist]

An email is sent to the old address saying that someone is trying to change the e-mail. There is one link to say 'Wait! that's not me, i'm being hacked!!!' and another to give the all clear.

If neither is pressed within 7 days, or the all clear is given, the email is changed, and a recipt is sent to the new email.

Hmm, this might not be a completely terribad thing to do. I'll consider it.

All of this has happened before, and will happen again

[loftar]

All of this has happened before, and will happen again

As long as people keep giving their passwords away, I'm sure it will.

[Sverek]

I think it should introduce a change confirmation e-mail by phone or with the mail. The first time I had a problem in that mail, which was registered account has been deleted. Therefore, to confirm it did not work out to. It is also possible secret question. More options for protection, I do not know.

On account password. I do not exclude that the blame for my friend. Therefore, do not ask me anything return. But I see no error to give the password to a friend. If my e-mail and password could not be changed without confirmation, the problem would not exist. Maximum can kill characters in the game, but a claim by the other.

[txtrung0]

Said email should have a "yes it's fine" button also, and when pressed will send a mail to the new email account "change made"
The reason is that if people really want to transfer their account they can't scam people and then "revert" back, rinse and repeat.

[loftar]

But I see no error to give the password to a friend.

I don't really care about that per se. Whar I do care all the more about is my time being wasted on the conflicts resulting from that, which are really none of my business. I'm so frigging tired of these cases that I'm in a good mood banning you just for even hinting that this is somehow my responsibility.

[bitza]

I don't really care about that per se. Whar I do care all the more about is my time being wasted on the conflicts resulting from that, which are really none of my business. I'm so frigging tired of these cases that I'm in a good mood banning you just for even hinting that this is somehow my responsibility.

you wouldn't have to waste any time on resolving stolen accounts, if it weren't possible to hijack them through the "change email" function