[Notice] Changes to the PIC System

[Notify]

http://maplestory.nexon.net/news/news/current/00Fu7/

Changes to the PIC System

Weve updated the Personal Identification Code (PIC) system with new features and guidelines to ensure you have the safest, most secure PIC possible.


You can now reset your PIC in-game, and youll get a reminder to change your PIC every three months.


Your PIC is the last line of defense against unauthorized attempts to log into your account, so creating a secure PIC is essential. Remember, you should never give your PIC to anyone or enter your PIC anywhere except in the game client. Log into the game or visit the website now to change your PIC.

[Zelkova]

And if we decide NOT to change our pic, you will berate us with a notice every single time we log into a character. Good job!

[Encyclopedic]

Hm. The only way to change your PIC in EMS is in-game already, andis has been like that since the release. Strange GMS took longer to get it.

[ShinkuDragon]

anyone tried changing their pic to the very same pic?

[Declaimed]

anyone tried changing their pic to the very same pic?

I just spam "cancel/no" without thinking about it.

[LoveVictim]

And if we decide NOT to change our pic, you will berate us with a notice every single time we log into a character. Good job!

Just change the PIC once and change it back again to your old one... it's that simple... I don't get why some of you make things into a mission.

[ShinkuDragon]

Just change the PIC once and change it back again to your old one... it's that simple... I don't get why some of you make things into a mission.

because it's annoying, we jut want to play!

(and i have a bunch of accounts...)

[IImaplers]

Hi Nexon. How about you make the game actually safer for us instead of BS measures like this one, which do nothing for security? The PIC is probably the easiest thing for a hacker to bypass anyway. Ever heard of the option of cell phone validation?

[MuscleWizard]

Hi Nexon. How about you make the game actually safer for us instead of BS measures like this one, which do nothing for security? The PIC is probably the easiest thing for a hacker to bypass anyway. Ever heard of the option of cell phone validation?

but too many failed password pic attempts locks out the account

[Heero]

A warning for those who try to change their PIC back, or at all: You can't use directly repeating characters in your PIC anymore.

RIP 111111
4/3/13
Never forget

[SaptaZapta]

Oh, that's lovely.

So now if a hacker gets on my account, first thing they do is change the PIC.
Now, while I wait for Nexon's website and e-mail to be able to change my PIC back again (or my password), I am locked out of my account and the hacker can empty it at leisure. Can't hope to get on while they're switching chars.

Nexon, do you even think?

[Stereo]

A warning for those who try to change their PIC back, or at all: You can't use directly repeating characters in your PIC anymore.

RIP 111111
4/3/13
Never forget

88888888, better mnemonic (couldn't use 111111 because it's the same as my account password)


Still better than the derp they did on PINs - it was stored as an int, so if you entered 0000 as your PIN, you could skip the screen entirely cause the default value was also 0. They noticed that, but 0001 would still work by entering 1 for a while.

[Zelkova]

@Girasol; how goes the Authenticator app?

[hadriel]

88888888, better mnemonic (couldn't use 111111 because it's the same as my account password)


Still better than the derp they did on PINs - it was stored as an int, so if you entered 0000 as your PIN, you could skip the screen entirely cause the default value was also 0. They noticed that, but 0001 would still work by entering 1 for a while.

That is utterly stupid. Basic security flaw.

Back then, were single-character PINs allowed?

Hadriel

[Zelkova]

That is utterly stupid. Basic security flaw.

Back then, were single-character PINs allowed?

Hadriel

No, single character PINs were not allowed. Because they were stored as an INT, 0001 was interpreted as "1" so you could just enter "1" and log in. I assume this was changed rather quickly.

[Pink Bean]

i changed it to get that message away when relogging.. asdfadsf.

[IImaplers]

but too many failed password pic attempts locks out the account

When I said bypass, I meant bypass completely. As in, the hacker doesn't have to click anything.

[LancePopcorn]

Just make it so we have to enter it at initial login, why would you want hackers looking at all your characters and stuff and then having to enter a pic.

[MountLag]

It lets you change the PIC even if you get the PIC wrong...
I punched in 111111 and still got the PIC reset prompt

[SaptaZapta]

It lets you change the PIC even if you get the PIC wrong...
I punched in 111111 and still got the PIC reset prompt

*facepalm*

Does it at least require the current PIC as part of the reset procedure? (After you click "Yes" to the reset prompt)