Disturbance notice regarding Gold Card security system

Eli said:

You store your EU username and password on your phone too?

Click to expand...

No.
But that is irrelevant, as this is the second line of defense, and the username/password the first.

Wollongong said:

No.
But that is irrelevant, as this is the second line of defense, and the username/password the first.

Click to expand...

Defence against what? The roving gangs of thieves out to get access to a videogame where they would have to wait 60 days to withdraw?

The whole point of 2-factor auth is that the login comes from 2 authentication sources, i.e. U/Pword on your computer and 6-digit code from a GC reader or app. It's to stop targeted digital attacks such as keylogging, snooping, data interception etc.

Being worried about someone finding you, stealing your phone, keylogging your u/pword, downloading the game on their own system, making an avatar, logging in to yours and stripping it, and then logging into theirs and withdrawing (crossing their fingers that in 60 days you don't contact MA about the theft) is about as paranoid as it gets.