Viaje Wrote:I found another laughable hole in Nexon's security.

To change your account email address, you need to enter the answer to both security questions.
Fair enough.

Problem is you can change one security question by knowing the answer to the other question.
So, basically, that means that having two security questions actually weakens account security.

EDIT: I also really wish Nexon would suck it up and make Item Locks free.
I'm fairly sure that the lost revenue from those items would be surpassed by people buying NX because they feel secure enough to do so.

What's more, they should change the system.
While I like some suggestions I read, it'd also be rather nice if an item being locked would allow it to be account-tradeable.
I don't mind certain items being unsellable for up to a year, but I do mind being limited to one character when things like Evo Rings can't be moved.

I'm sorry, but item locking is useless since there are scrolls that destroy items... so if your pomegranate is locked, I'm sure the person wouldn't want you to have your pomegranate either so they will just destroy it... you talk about loopholes in Nexons attempt at general account security... but it seems like you're not looking at other obvious loopholes...

And why hasn't anyone mentioned other potential failiures in security... such as your email provider? (I haven't read the entire thread, but everyone seems to be assaulting nexon). And another thing: IPB and vBulletin exploits are out there too... using the same email from your nexon account on a fansite is also a security risk.