No replies to this topic

[Peter2000]

A good move in the past to ban direct player-player trades of 'Mechs, C-Bills, and MC has meant that there is very little incentive (beyond malicious trolling) to hack another player's account. However, with the (important) introduction of allowing donations to a Merc Corp., the system does open itself up to some level of abuse.

Suddenly the incentive exists for someone to hack another (established) player's account, then join them to your Corp, sell all their stuff for C-Bills, and "Donate" it. The hacker profits slightly, and the hack-ee suffers badly.

While I'm sure that PGI will be keeping an eye on such suspicious "Donations" (and taking action against units and individuals perpetrating them), it will nonetheless create an incentive to hack accounts that does not exist currently. And while account security is ultimately the responsibility of the player, some people will probably end up getting robbed.

I'd suggest that in the event of such a hack, the controller of the email address be able to petition to reverse all donations, and restore account condition to an older state (this could be every patch, in an extreme example). This would at least allow damage to the victimized party to be mitigated somewhat.