Because of the recent threads of a lot of people getting hacked, I got paranoid and decided to check my own security, which I thought was good and I was wrong.
This is my current security
Google email (With very long and unique password)
2-step verification on my Gmail (You need codes from my phone)
NCSoft account (With long and unique password)
2-step verification with my NCSoft account(Only 1 IP can log in without it asking code from email)
2-step verification on the game (if you want to play you need Google verification codes from my phone)
Cool, you must be now wondering how can something like this get hacked? Let me tell you; Hacker does not need access to your email at any point.
Only security you have on your account is the IP verification on Blade and Soul website and your password. If hacker could possible spoof the IP, you did not set your IP or they found a way to go around it, then you are done.
Once I got on my account, I could change:
Change my Email without any confirmation from the previous email (90 days cooldown)
I could disable the 2-step verification on my account (google auth) after changing email because it now asks confirmation from the new email (I lol'd at this)
I could see all the personal info on the account: Phone number, Name, Address and all the relevant stuff
I could disable the IP verification
Basically, I got ownership of the account knowing it's password, and if NCSoft was hacked and everyone's passwords are compromised then change them NOW! Also enable the IP verification, ordinary hackers can not get past that.
For more information welcome to our site, and you can buy blade and soul gold