It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
avatar
Barefoot_Monkey: It's more than just a security thing. A few times people have created an account and bought a game, then came back a bit later complaining that they can't log in anymore, password resets don't work and they never even received any emails from GOG at all after signing up or buying their games. These are symptoms of people mistyping their email addresses when creating their accounts, and this situation can be avoided using email verification.
avatar
skeletonbow: Absolutely. It's a serious problem in my eyes.
Unfortunately, you are not the one calling the shots at GOG. What they consider a serious problem is to make sure you are unable to post certain four letter words in all caps (the latest forum "fix" deployed a few days ago).
avatar
gunsynd: The creditability of Gog is nil.
Unfortunately, at the moment, I am going to have to agree with you.

avatar
TheJoe: There's no vulnerability, but if you have an easy to guess password you're screwed because GOG does not email you and ask you to verify an email address change like every other website on the planet does. They just send an email to the old address telling you that it's been changed.
There is always a vulnerability, whether it is known about or not. In either case, I'm pretty sure I didn't use an easy to guess password, as I haven't done so in the past 15 years, and I don't see why I would suddenly do so now.

So, another week has gone by, and still nothing has happened to sort my account out. Absolutely ridiculous.

If this is how "fast" you deal with a security/account issue, then I sure as hell wont be buying any more games from you.

As it is, it appears I'm going to have to rely on "other means" to be able to play Witcher 3, despite having a copy on my account.

Absolutely ridiculous.
Post edited August 11, 2015 by RDPaul
avatar
gunsynd: The creditability of Gog is nil.
avatar
RDPaul: Unfortunately, at the moment, I am going to have to agree with you.

avatar
TheJoe: There's no vulnerability, but if you have an easy to guess password you're screwed because GOG does not email you and ask you to verify an email address change like every other website on the planet does. They just send an email to the old address telling you that it's been changed.
avatar
RDPaul: There is always a vulnerability, whether it is known about or not. In either case, I'm pretty sure I didn't use an easy to guess password, as I haven't done so in the past 15 years, and I don't see why I would suddenly do so now.

So, another week has gone by, and still nothing has happened to sort my account out. Absolutely ridiculous.

If this is how "fast" you deal with a security/account issue, then I sure as hell wont be buying any more games from you.

As it is, it appears I'm going to have to rely on "other means" to be able to play Witcher 3, despite having a copy on my account.

Absolutely ridiculous.
Sorry to hear of the problem RDPaul and the delay in getting the issue resolved. If you're using galaxy or direct download though you should still be able to play in offline mode if you already did the install. On the galaxy login screen there is a 'Continue Offline' button that will bypass the login, but it won't allow you to download/install anything new from your account if you haven't already done so.
avatar
gunsynd: The creditability of Gog is nil.
avatar
RDPaul: Unfortunately, at the moment, I am going to have to agree with you.

avatar
TheJoe: There's no vulnerability, but if you have an easy to guess password you're screwed because GOG does not email you and ask you to verify an email address change like every other website on the planet does. They just send an email to the old address telling you that it's been changed.
avatar
RDPaul: There is always a vulnerability, whether it is known about or not. In either case, I'm pretty sure I didn't use an easy to guess password, as I haven't done so in the past 15 years, and I don't see why I would suddenly do so now.

So, another week has gone by, and still nothing has happened to sort my account out. Absolutely ridiculous.

If this is how "fast" you deal with a security/account issue, then I sure as hell wont be buying any more games from you.

As it is, it appears I'm going to have to rely on "other means" to be able to play Witcher 3, despite having a copy on my account.

Absolutely ridiculous.
Yep and there are many of these threads now and constant requests for email verification to minimise this issue and not a word back about implementing a simple preventative measure. Accounts were being compromised months ago before I took a break.

GG GOG...

One article on this issue in any gaming media would make this a priority...
Post edited August 11, 2015 by Tarnicus
avatar
RDPaul: As it is, it appears I'm going to have to rely on "other means" to be able to play Witcher 3, despite having a copy on my account.
To play Witcher 3 (and if you don't bother about achievements) you can always start TW3 directly:

in your installation path (for me D:\GOGGames\The Witcher 3 Wild Hunt\bin\x64)

You find the witcher3.exe, with which you can start the game directly.
While I appreciate everyone trying to help, unfortunately it wont help.

I installed W3 when it first came out, however, I stopped playing it at the time due to the amount of bugs, plus waiting for the dlc and patches.

So I uninstalled it due to space on my gaming SSD being limited. Hence why I said "other means". :(
Post edited August 11, 2015 by RDPaul
avatar
RDPaul: While I appreciate everyone trying to help, unfortunately it wont help.

I installed W3 when it first came out, however, I stopped playing it at the time due to the amount of bugs, plus waiting for the dlc and patches.

So I uninstalled it due to space on my gaming SSD being limited. Hence why I said "other means". :(
If you uninstalled it, yep, not a lot you can do.....

Unless, did you ever used this?

https://www.gog.com/downloader

If so, you still might have access too:

https://www.gog.com/downloader/listing/the_witcher_3_wild_hunt_game

Just give ti a shot ;)
avatar
RDPaul: In either case, I'm pretty sure I didn't use an easy to guess password, as I haven't done so in the past 15 years, and I don't see why I would suddenly do so now.
Was the password unique to GOG, or did you possibly use it on some other services/sites as well? That's what I've considered as the most probable explanation for the hacked accounts, ie. the password was obtained from some other site (database).

But yeah, GOG should implement two-step verification for changing either the email address and/or the password. And hopefully leave it to that, as requiring the same also when connecting from a new PC or abroad causes me problems in services/sites that require that too.
Good News Everyone!

I finally have my account back! And it "only" took 3 weeks. :/

When I was working in customer service, I would have been sacked that taking that long. However, atleast I have it back now.

avatar
Goodaltgamer: Unless, did you ever used this?

If so, you still might have access too:

Just give ti a shot ;)
I was about to try that, but I no longer need to now. Thank you for trying to help. :)
avatar
timppu: Was the password unique to GOG, or did you possibly use it on some other services/sites as well?
The password was unique to GOG, as I use different passwords everywhere else, and this was the only one that had an issue.
Post edited August 17, 2015 by RDPaul