2FA security for IL2 Sturmovik player account

[tomgor]

Dear Devs,

Could we get 2FA security for our il2sturmovik.com player accounts?

Thank you for your consideration.

All the best!

[DD_Arthur]

What is ‘2FA security’?

[JimTM]

2FA = Two-Factor Authentication

[AEthelraedUnraed]

I'm not necessarily against 2FA, but *please* keep any such things optional. My IL2 account is linked to no payment or security details of mine, and very little personal info. If it were hacked, I'd likely spend a couple of days mailing back and forth with Support to regain control over my account, but nothing really important would be affected. 

[AtomicP]

I noticed that DCS now has this or at least I saw it in the accounts page there. I think it should be standard these days.

[tomgor]

On 7/26/2021 at 7:08 PM, AEthelraedUnraed said:

I'm not necessarily against 2FA, but *please* keep any such things optional. My IL2 account is linked to no payment or security details of mine, and very little personal info. If it were hacked, I'd likely spend a couple of days mailing back and forth with Support to regain control over my account, but nothing really important would be affected. 

 

If it goes really bad for you, you may not get such chance... And surely you don't want to lose all your investment in the IL-2 series. I don't want for sure - too much money.

[AEthelraedUnraed]

1 hour ago, tomgor said:

If it goes really bad for you, you may not get such chance... And surely you don't want to lose all your investment in the IL-2 series. I don't want for sure - too much money.

Invested money that is of absolutely no interest at all to a hacker.

 

Besides, I use the Steam version, which does have 2FA, so even if some hacker would hijack my IL2 account and start playing IL2 himself (honestly, what else could a hacker do, besides spam the forum which the Moderators would soon catch up to), it would be very easy to prove to Support that I am the real AEthelraedUnraed and regain control of my account.

 

There's also barely any personal data of mine the hacker would be able to get access to, beyond what I made publicly available under my avatar, and the spam e-mail address I registered my account with. On which I fully expect to receive spam and fishing and the like, that's what I use a spam e-mail address for.

 

Working in ICT, I know of the value of 2FA and fully support it as a requirement for those services that actually matter, and as an option for the rest. But the potential costs in the unlikely event my IL2 account were hacked are not worth the extra trouble to me.

[tomgor]

3 hours ago, AEthelraedUnraed said:

Invested money that is of absolutely no interest at all to a hacker.

 

Besides, I use the Steam version, which does have 2FA, so even if some hacker would hijack my IL2 account and start playing IL2 himself (honestly, what else could a hacker do, besides spam the forum which the Moderators would soon catch up to), it would be very easy to prove to Support that I am the real AEthelraedUnraed and regain control of my account.

 

There's also barely any personal data of mine the hacker would be able to get access to, beyond what I made publicly available under my avatar, and the spam e-mail address I registered my account with. On which I fully expect to receive spam and fishing and the like, that's what I use a spam e-mail address for.

 

Working in ICT, I know of the value of 2FA and fully support it as a requirement for those services that actually matter, and as an option for the rest. But the potential costs in the unlikely event my IL2 account were hacked are not worth the extra trouble to me.

 

But invested money are absolutely of the highest interest to me. I don't want to find myself in a situation that my account is hijacked and may be transferred to someone else than the hacker, and I need to start all over again. I am not as sure as you seem to be, that hijacking an account is impossible. Also, I don't use Steam version and I am not interested in it.

[AEthelraedUnraed]

2 hours ago, tomgor said:

I don't want to find myself in a situation that my account is hijacked and may be transferred to someone else than the hacker, and I need to start all over again.

Do you honestly think there's an online illegal market for used IL2 accounts?

 

Again, I'm not against the *option* of having 2FA. I'm just against making it required. If you're afraid some nefarious Nigerian nerd will hack your account and sell your planes on the Dark Net to an equally nefarious nerd who happens to be interested enough in playing IL2 that he's willing to spend a couple of bucks on it - with the very real possibility that the account will be blocked as soon as you contact Support - then I think you should have the possibility to enable 2FA. I just cannot understand why you think I should not have the possibility to *not* enable 2FA.

[tomgor]

On 1/1/2022 at 8:21 PM, AEthelraedUnraed said:

Do you honestly think there's an online illegal market for used IL2 accounts?

 

Again, I'm not against the *option* of having 2FA. I'm just against making it required. If you're afraid some nefarious Nigerian nerd will hack your account and sell your planes on the Dark Net to an equally nefarious nerd who happens to be interested enough in playing IL2 that he's willing to spend a couple of bucks on it - with the very real possibility that the account will be blocked as soon as you contact Support - then I think you should have the possibility to enable 2FA. I just cannot understand why you think I should not have the possibility to *not* enable 2FA.

Fine with me. I have never said the 2FA for IL2 and FC was to be mandatory, even though it wouldn't be a problem for me. I just welcome 2FA as additional security measure.