CHANGE THE CS SECURITY SYSTEM

[Falco]

Hello! I wanted to give a few suggestions on how I thing CS can improve their security system.

1) Confirming linked email changes.
As of now, all you need to do to change your email is enter your password. Meaning if someone where to get into your account, they could easily switch the email to theres. This can easily be fixed by sending a "confirmation email" in order to change the email.

2) Log in confermation
I'm not too sure how easy this is to code, but when a log in occurs on an unfamiliar device or IP address, it may be useful to require a log in code. This could be an optional feature.

3) Hire more coders
I don't want Nick to be responsible for all of this, I think hiring more coders could be helpful! I've met a lot of users who are good with coding on here.


Please do not use this thread to harass people, start drama, or harbor negativity. I want to keep this up, this is a recommendation. It’s not for drama.

Please go support this thread too
Let me know of you also have suggestion!

**NEW** stamps!

By me

Code: Select all

 [url= https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img] https://cdn.discordapp.com/attachments/1124030462914986099/1124835032016633885/Untitled465_20230701155225.png[/img][/url]


Code: Select all

 [url= https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img] https://cdn.discordapp.com/attachments/1109279186092306495/1124836274310750228/Untitled466_20230701155651.png[/img][/url]

By Onion

"support 2fa on cs!"

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199#p142277490][img]https://media.discordapp.net/attachments/301500831734431745/1124839240270884914/image0.gif[/img][/url]

"let's help secure cs!"

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199#p142277490][img]https://media.discordapp.net/attachments/301500831734431745/1124839852282744892/image0.gif[/img][/url]

transparent versions, thank you ilya!


"sign a petition to help cs!"

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199#p142277490][img]https://media.discordapp.net/attachments/301500831734431745/1124840883297198191/image0.gif[/img][/url]

By Epic!
here

By Mech

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img]https://i.imgur.com/SRGsiFU.gif[/img][/url]

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img]https://i.imgur.com/Zf0dSAz.gif[/img][/url]

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img]https://i.imgur.com/ZyJTWnQ.gif[/img][/url]

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img]https://i.imgur.com/85nAo3l.gif[/img][/url]

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img]https://i.imgur.com/vNzBODf.gif[/img][/url]

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img]https://i.imgur.com/cC85ihl.gif[/img][/url]

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img]https://cdn.discordapp.com/attachments/1122224606363787264/1125017340531183727/ezgif.com-gif-maker.gif[/img][/url]

[left]

Code: Select all

[url=https://www.chickensmoothie.com/Forum/viewtopic.php?f=119&t=4876199][img]https://cdn.discordapp.com/attachments/1122224606363787264/1125017340858343506/ezgif.com-gif-maker_2.gif[/img][/url]

[melti]

heavy support on all of these ideas!

having a 2FA type of security would be super helpful in protecting all of us, and is really smart.

[ilikepokemon222]

support, the lack of email verification is kinda odd, log in confirmation is always good as it is present on most sites, and more coders would always be fun (hmu chickensmoothie mods i code /j)

[ActualWoodelf]

Support!

I think email changes absolutely need to be harder to do. I also think 2-step verification would be a great thing to implement, though I don't know how hard it might be. I feel having 2-step verification for log-ins from unfamiliar IP addresses could prevent the vast majority of "hacking."

[BARBOSSA]

Support, especially on more coders. I feel like there is just too many players for so little coders on the site.

[Lex.]

Support everything on here!

[Pinkie Cooper]

Full Support! I agree this would be a huge step in improving account security on CS! Def more coders, & staff in general. It's too simple and quick of a process to completely claim someone's account for your own, especially if any passwords have been leaked from any site, ever. Account security is, to a degree, up to the player of course, but there's also a part of this that the website is responsible for as well. Security should be a top priority!

[sunka]

absolutely support!

[beemo]

Support, but if someone doesn't have access to their email anymore that could be tricky. You know how some sites have security questions? Maybe that's something that could be implemented as well.

[ActualWoodelf]

Support, but if someone doesn't have access to their email anymore that could be tricky. You know how some sites have security questions? Maybe that's something that could be implemented as well.

That's a good point.. had it happen to myself, on sim games I played as a kid and have long since lost access to the email account attached.

Security questions sounds like a good idea, though balancing the information asked for in the question as something truly secure that someone else couldn't guess (not pet names or favorite colors, for instance) with not asking personal info from accounts potentially owned by minors (for instance, I'm not sure if CS could ask for users to input mother's maiden name), might be complicated?

Maybe they could be user-constructed security questions? Or maybe not. I'm sure they could be things unlikely to be guessed but not compromising, with a little consideration.