Uhm EA, you might want to attend to something on your website...(security issue)

**Tabbitha** · 16th October 2007, 01:32 AM

source

Recently I paged a gm about an issue...

(and as expected didn't get the courtesy of a actual GM appearing, but thats a customer service issue that you really should reconsider...

Anyway...please bring back 'in game GM's' you'd be surprized how far the human touch goes...

I want smurfs (counselors) back too...)

The EA website that the GM sent me to requested my userid and password and was NOT a secure website.

Thats all. So instead of worrying about getting hacked by putting my userid and pw out there for anyone to sniff off the web I just dropped it.

and

Doesn't anyone care about this? Accounts are getting hacked and when we page a gm we are sent to a insecure website?

I wish somebody would make this sticky until a developer responds.

Its a wee bit important, eh?

~~~~

EA itself sent you to an unsecure website?? Was it an EA website or what?

~~~~

Yes a GM sent me to a EA website and it was insecure.

~~~~

Do you have the link?

E. Jeremy Dalberg
UO Community Coordinator
EA Mythic

~~~~

Not as urgent an issue as uohamsters, but while you're checking that one out, can you also find out why this is still happening :

Go to UOHerald front page, hit the account management options - I get taken to

https://account.ea.com/myacct/uo/uo-hub.jsp?skin=uo

Choose the first of the 'banner' options on the page, "Account Management", and get sent to

https://www.ultima-registration.com/

"There is a problem with this website's security certificate.

The security certificate presented by this website has expired or is not yet valid.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website.
Click here to close this webpage.
Continue to this website (not recommended).
More information "

~~~~

jeepers..oh my lordy....no more using the EA website then.....

~~~~

No, it's one specific page - if you use the account management page, NOT that link on the panel across the top of that page, you go to the right, secure, properly certified pages for account creation and modification - it's just that link that takes you to a now redundant page, looks like it's just a 'leftover' forgotten from the old site.

~~~~

Ah, ok. Will go pester the various relevant people.

E. Jeremy Dalberg
UO Community Coordinator
EA Mythic

16th October 2007, 01:32 AM	#1
Tabbitha Administrator Join Date: Mar 2006 Shard: Europa/Snowbourn Posts: 5,896 Gold: 49,149 Blog Entries: 6 Thanks: 208 Thanked 205 Times in 116 Posts Awards Showcase Total Awards: 1	Uhm EA, you might want to attend to something on your website...(security issue) source Recently I paged a gm about an issue... (and as expected didn't get the courtesy of a actual GM appearing, but thats a customer service issue that you really should reconsider... Anyway...please bring back 'in game GM's' you'd be surprized how far the human touch goes... I want smurfs (counselors) back too...) The EA website that the GM sent me to requested my userid and password and was NOT a secure website. Thats all. So instead of worrying about getting hacked by putting my userid and pw out there for anyone to sniff off the web I just dropped it. and Doesn't anyone care about this? Accounts are getting hacked and when we page a gm we are sent to a insecure website? I wish somebody would make this sticky until a developer responds. Its a wee bit important, eh? ~~~~ EA itself sent you to an unsecure website?? Was it an EA website or what? ~~~~ Yes a GM sent me to a EA website and it was insecure. ~~~~ Do you have the link? E. Jeremy Dalberg UO Community Coordinator EA Mythic ~~~~ Not as urgent an issue as uohamsters, but while you're checking that one out, can you also find out why this is still happening : Go to UOHerald front page, hit the account management options - I get taken to https://account.ea.com/myacct/uo/uo-hub.jsp?skin=uo Choose the first of the 'banner' options on the page, "Account Management", and get sent to https://www.ultima-registration.com/ "There is a problem with this website's security certificate. The security certificate presented by this website has expired or is not yet valid. Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server. We recommend that you close this webpage and do not continue to this website. Click here to close this webpage. Continue to this website (not recommended). More information " ~~~~ jeepers..oh my lordy....no more using the EA website then..... ~~~~ No, it's one specific page - if you use the account management page, NOT that link on the panel across the top of that page, you go to the right, secure, properly certified pages for account creation and modification - it's just that link that takes you to a now redundant page, looks like it's just a 'leftover' forgotten from the old site. ~~~~ Ah, ok. Will go pester the various relevant people. E. Jeremy Dalberg UO Community Coordinator EA Mythic

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Account Security and the Security Challenge Question	Adam	UO News & Developer's posts	14	13th September 2007 04:56 AM
[ NB.discussess a sensitive issue ] The "r" word... An old issue that needs to go.	Tabbitha	UO News & Developer's posts	6	23rd January 2007 10:55 AM
Runebook security?	kitiara	Ultima Online General Discussion	1	17th January 2007 10:24 AM
Anyone attend the event lastnight?	SoccerMom	Chesapeake	1	20th October 2005 05:57 PM