|
Hello,
The virulent danger of KL'ing via suspicious links has reared its ugly head once again in a series of cyberattacks on the Clans and Guilds subforum. Clans have been stolen from their respective owners and their members exiled without warning. Communities have been broken up by thugs who've tricked our young membership into clicking on suspicious links.
This is unacceptable.
In light of these attacks, I have come to propose that ROBLOX implement a two-fold authentication system in order to mitigate the effects of these kinds of cyberattacks.
Such a system consists of two parts.
1. Your typical log-in, with ROBLOX account and PW.
2. At each login, ROBLOX will send an email to the address associated with the account in question. The owner of the account must authenticate that individual login through the email before being allowed to access the account.
While this may cause a slight inconvenience for ROBLOX as a whole, the security benefits will far outweigh any work the ROBLOX staff may have to do to implement such an authentication system.
Thank you for your time and consideration.
Sincerely,
FalseWarrior000, a concerned ROBLOXian |
|
|
support but can it be toggled? |
|
eeoaJoin Date: 2011-07-26
Post Count: 32600 |
Support
Another good idea would be to require email verification if the account was being accessed on a different device than usual.
|
|
tkMalakaiJoin Date: 2014-06-06
Post Count: 384 |
Would take too long to log in, just dont be dumb.
-OG Malakai
|
|
|
support
(uaf_flaminquo 3 day'd) Ashley | Patrian Colonel, Alversian Lieutenant | For the Motherland! |
|
|
While that is an interesting thought, it'd have to be done differently, the best way would be to only send an authentication email if the account is being logged into from a different IP address than the prior login. |
|
|
support!
varyx - #1 in the hood |
|
xEnforcerJoin Date: 2011-06-03
Post Count: 1077 |
Support |
|
|
Agreed, not to mention that those who opt-in to two factor authentication could no longer have the cookie stealing method use against them either.
~Moo~ |
|
SentineIzJoin Date: 2015-12-26
Post Count: 955 |
Yeah, this is a big problem to a few of us.
|
|
AzurralJoin Date: 2013-04-02
Post Count: 280 |
Support!
UAF Lieutenant |
|
ChatikaJoin Date: 2012-10-17
Post Count: 982 |
support
-UAF colonel emorphis
|~There is no need to be upset~| |
|
|
The reason this was suggested was that a group of 20 thousand members was hacked in and every single one of their members exiled. |
|
ITBVJoin Date: 2013-12-27
Post Count: 954 |
Do what steam are doing and add an authenticator system (By using mobile phone or something to act as an authenticator). |
|
|
GeekFoxJoin Date: 2016-01-10
Post Count: 10 |
Support but that would be a lot of email spam. Maybe a question after you log in like a security, pick a random one out of 3?
|
|
Diggy25Join Date: 2010-02-15
Post Count: 886 |
support |
|
ChauGJoin Date: 2011-06-03
Post Count: 436 |
Support fc #1
awoo~ |
|
|
This could be modified, but I think it's a sound basis for ROBLOX to expand on and streamline. |
|
|
Support.
Even you could go as far as adding a text message authentication code. As much money as we put into this game, it seems our security is of utmost importance.
[UAFCOL] JoJoVader12
|
|
|
|
|
Support for the Motherland! |
|
|
|
Support but should be toggled like other guy said, not forced. |
|