Hi azslow,
Great points and valid concerns. I'll try to address each of them - if I miss anything or just totally missed the entire point please let us know.
But what I always try to understand are consequences. What a hacker gets in case Cakewalk Store account is hacked?
Yes that is correct - if someone was to gain access to your account or our entire system the only thing they would have access to is serial numbers, registration codes, downloads, your email address and a shipping address if your purchased products through the store. Yeah that is a problem, your email address and shipping address is personal and sensitive data. We encrypt it whenever in transit to prevent man in the middle type of attacks and go to great lengths to keep it secure. When working with third parties for example that require a sample of our customer data to test functionality - we always use fake or dummy data. Most every Cakewalk employee's data is in our system as well, we take it seriously and treat it as if it was our own because well - it is.
Registration codes!
Honestly - I'm ok with that. That's a piracy problem for us, not a 'your banking or financial data was compromised' nightmare for you.
what will happened in case throw hacked account my registration numbers become public?
Once it was identified (either by the user reporting it to us or through one of our security audits) that an account was compromised we would:
- Reset your account password and lock your account until someone from Customer Service spoke with you or you reset your password and re-validated your email address
- All of your serial numbers would be added to our 'known pirated blacklist'. This would prevent them from being used for updates, tech support or registering
- We would re-issue serial numbers for your products
This is no different than what we do today right now if a similar situation arises with a user's account.
Will Cakewalk accuse me for publishing these number, and so make me responsible for illegal distribution of the products?
No of course not. What could we possibly gain by upsetting a user who was the victim of fraud or hacking? That would neither help the victim or help us retain a happy customer.
That is why I am not permanently logged into my banking, PayPal, etc. But with account merging, Cakewalk a kind of forcing me to stay logged in.
Alex touched on it earlier but staying perma-logged into an account isn't insecure provided you're doing it from your own computer. Most financial/banking sites will auto-log you out after a certain period of time, that's not because its insecure to be logged in it's because they don't trust that you're using a personal computer and aren't at a library or anything.
Specific to Cakewalk Accounts - nothing that we are changing requires you to stay logged into PayPal or your banking services. If you would prefer to not stay perma-logged in to those services then by all means sign out. This change has nothing to do with that.