EVE Online: Defending our players from hackers and the evolution of account security
summary
EVE Online evolves account security from a 2008 character challenge to a full OAuth SSO backed by Redis for throttling, an in-game tradable token PLEX to reduce RMT incentives, and Steam‑style email verification when the game goes free‑to‑play. Integration of the Pwned Passwords k‑anonymity API flags breached passwords (from ~17–19% down to ~9–12%, a ~40% reduction), September 2019 traffic shows 245k unique logins with roughly 10k insecure passwords prevented, and 2FA adoption climbs from 0.7% to ~9.7%.
AI-written summary · about
chapters (4)
- 0:00Start
- 13:05Character challenge circumvention 101
- 37:372018 - Built-in browser security features
- 43:24Summary - Key learnings
related talks
43mEVE Online: Defending our players from hackers
42mChallenges in User Authentication: Balancing Security & User Experience
15mThe evolution of user logins
26mIntegrating Identity and Fraud
31mLog In Through the Front Door: Automating Defense Against...
50mHave I Been Pwned?
20mSession: AI vs. Your Game: The New Era Of Social Media Attacks
45mApplying Past Lessons for Intel-Driven Identity Threat Detection