|
I am always logged in here at Paizo.
Now, when I want to go to "My Account" or "My Subscriptions" or "My Downloads" I get always asked to log in again, even if at the uppermost line of this site, it reads "Welcome, Tom Ganz", which indicates that I am logged in already.
The dots, showing me were the threads are at which I've posted are also gone. I now disabled my "remember payment method for future purchases" just in case.
Would be cool if you could check that, please.
Greetz,
Tom
I'm getting this as well. Some threads I post in are showing dots, but some aren't.
Same here...dots on some, no dots on others. The dots are getting spotty...
Senior Software Developer
|
This is a change we rolled out yesterday. The idea is that whenever you connect to our secure server -- for your My Account, My Subscriptions, My Downloads, etc. pages, or your profile page, or proceed to checkout -- we re-verify that it's really you at the keyboard.
We use a browser cookie to keep you logged in to the site, but that's not good enough to know that it's really you and not someone else using your computer. Asking for your password again lets us know that it's you (or someone you trust enough to give your password to, I suppose).
I know it's a bit inconvenient, but it's better than what could happen (someone else buying stuff on your credit card, for example).
RPG Superstar 2010 Top 16
|
I'm experiencing the same issues as Dryder. And another datum: when I click on links to check threads in my "recent posts" list, it's taking me to the top post on the first page on those threads, rather than to my most recent post.
At the least, for things like going to my profile, could I just enter my password, instead of my mailing address, too? It's getting to be a little annoying.
|
Director of Sales
|
I know it's a bit inconvenient, but it's better than what could happen (someone else buying stuff on your credit card, for example).Has this been a problem, or is this a preemptive security measure?
Not really any problems (that I know of), per se... but there have been one or two very minor incidences that have very profound implications. So it's more or less preemptive.
|
Chief Technical Officer
|
I'm experiencing the same issues as Dryder. And another datum: when I click on links to check threads in my "recent posts" list, it's taking me to the top post on the first page on those threads, rather than to my most recent post.
I think that's a different issue—one that's tied to the "post not appearing right away" problem.
At the least, for things like going to my profile, could I just enter my password, instead of my mailing address, too? It's getting to be a little annoying.
I assume you mean e-mail address and not mailing address. I'm not sure if that's feasible or not—Gary would have to chime in on that.
|
This is a change we rolled out yesterday. The idea is that whenever you connect to our secure server -- for your My Account, My Subscriptions, My Downloads, etc. pages, or your profile page, or proceed to checkout -- we re-verify that it's really you at the keyboard.
We use a browser cookie to keep you logged in to the site, but that's not good enough to know that it's really you and not someone else using your computer. Asking for your password again lets us know that it's you (or someone you trust enough to give your password to, I suppose).
I know it's a bit inconvenient, but it's better than what could happen (someone else buying stuff on your credit card, for example).
Inconvenient it is, at one might even say it gets on ones nerves. I nevertheless appreciate this change. Some of us might not have encountered Online-Fraud, Data-Theft and such as much as others.
Keep in mind, that Orders are done by charging your Credit Card and quite a few out here clicked the "remember for future orders" box. Leave your computer for a few minutes and some mean fellow might be able to do some serious damage. Those that don't opt to lock on their account an any PC than their own home computer might deem this unnecessary, but I belief that quite a dew, if not more than 50% use other PC to log on.
I rather have a save account and secure credit card than easy switching from thread to account.
@ Paizo: Thanks for this additional security effort. I only wish that some banks would be that responsible in regards to their access methods to ones account, be it ATM or in the www
|
|
Thanx to you all for explaining what happened.
I normally get a bit worried when I get asked my pasword in places where I was never asked before. But it helps making things secure, so its a good change!
I once had a store sending me an eMail, asking if I really placed an order (which I had not). I asked how they came to ask me this, and they explained that I normally ordered stuff for below 20 bucks, and than came that huge order of over 500 euros. So they got worried. I was glad they asked, and the order never got out.
One GOOD example of how "knowing" consumer behaviour might help.
|
|
Yes, thanks for caring about the security of our data. I too was a bit worried from time to time about the "always logged on"-function. This solution is perfect. I can access the board and post right away. When I have to enter the security section, I normally have the time to re-enter my PW, because I don't have to go there that often. Thanks for the effort, Gary!