FID

[Comrade Tea]

Greetings CMDR's,

I'm currently working on a project that is based around ED and it got me thinking, is the FID shown on the main menu sensitive information?

Thanks for any help.
o7

[Bordric]

What?

[Bordric]

There is no modding.

[Dolphin Bottlenose]

FID is your Frontier account ID.
https://customersupport.frontier.co.uk/hc/en-us/articles/360011922219-What-is-an-FID-PC

[Bordric]

Well maybe in the future say that?

[Bordric]

API is what he is working on?

[Comrade Tea]

Thanks for the info. I assume because it's only used for support, it wouldn't matter if it's publicly visible.

[Dolphin Bottlenose]

Originally posted by The Tea Kettle:

Thanks for the info. I assume because it's only used for support, it wouldn't matter if it's publicly visible.

You might want to check it with the support first. What if somebody asks the support to do some nasty stuff with your account, baking the request with your FID?

[Comrade Tea]

Originally posted by Dolphin Bottlenose:

Originally posted by The Tea Kettle:

Thanks for the info. I assume because it's only used for support, it wouldn't matter if it's publicly visible.

You might want to check it with the support first. What if somebody asks the support to do some nasty stuff with your account, baking the request with your FID?

That's a great idea, I'll let you know what they say. Thanks!

[Asphe]

I'm sure they'll authenticate with another method as well but since most people use their email address as a userID, common among many games/platforms, you are better off never showing that screen (AFAIK, it only shows up in the Main Menu screen). Only FDev needs to see it, ever. Even the log files don't have it (presumably they x-ref with my FD Account ID aka SteamID/email/etc).

There are many other games that do show some form of ID, i.e. Mihoio's Genshin Impact, has a UID in their screenshots, accountID scrapable off their website... well that's two vectors of attack already (there's at least two more currently accessible). Hence their periodic bouts of account hijacks. I have not known FDev to be that dumb.

[Comrade Tea]

I emailed support and they replied with:
"Your FID is not the only (nor major) indicator used to identify your account or for us to take player-requested action on your account.."

Asphe hit the nail on the head. I'm glad FD has better common sense than Mihoyo xD

Thank you all,
o7 Commanders!