The Xbox Update; Or Why I Learned to Hate Security

The Xbox Update; Or Why I Learned to Hate Security

You know there was an update for the Xbox 360 recently? I’ve never enjoyed these updates. They take forever, usually make the console worse and less responsive, and – on one occasion – broke my Xbox.

This new one appears to do two things:

  1. Replace Microsoft Points with actual pound values, and
  2. Make me want to stab people at Microsoft in the face.

You see, there’s now a forced “two factor” logon. Which is good, for security. But the way it’s implemented nearly drove me insane.

After the update, I was asked to sign in to Xbox Live. Which I couldn’t do, as I was already signed in. So I signed out, then tried to sign back in. It asked me for my email address and password again, which is fine, and then asked me for a second email address, a “text”, or a phone call to use as a second authentication contact. Again, this is fine.

I went ahead and gave my mobile number for “text”. I got sent a code, and on the 360 I could type this in. I was then told I couldn’t use this number as I had to authenticate it first on account.live.com/p.

I duly went to account.live.com/p on my computer, and it asked me to sign in. I did, and it told me it needed to send a code to my email address as a security method. I said OK, and got the code. I typed the code into the website, and it asked me to sign in again. So I did, and then it told me it needed to send a code to my email address as a security method. I said OK, and got the code. I typed the code into the website, and it asked me to sign in again. So I did, and then it told me it needed to send a code to my email address as a security method. I said OK, and got the code. I typed the code into the website, and it asked me to sign in again. So I did, and then it told me it needed to send a code to my email address as a security method. I said OK, and got the code. I typed the code into the website, and it asked me to sign in again. So I did, and then it told me it needed to… you get the idea.

I decided to just log into my Live account normally (which worked), and go to my account settings, were, lo, my mobile number was already listed. There was a “verify” link next to it, so I clicked that, and was told it needed to send a code to my mobile number as a security method. I said OK, and got the code, and was told to go to sms.live.com to complete verification.

So I went to sms.live.com and was asked to sign in. I did, and it told me it needed to send a code to my email address as a security method. I said OK, and got the code. I typed the code into the website, and it asked me to sign in again. I did, and it told me it needed to send a code to my email address as a security method. I said OK, and got the code. I typed the code into the website, and it asked me to sign in again.

Sigh.

Returning to my Xbox, I tried to put my number in again and have another code sent to my phone, but now it just says I need to complete verification by visiting account.live.com/p which puts me in the same loop as before.

Stupid, stupid system. The upshot is, I’m currently unable to sign into Live on my 360. And why am I signing into Live? Because I want the free Gold-only copy of Magic the Gathering 2013. “Just grab it from xbox.com!” I hear you cry. Well, I can’t. I can log in there, just fine, but when I go to buy it (for £0) I’m told I have no payment options available. Why I need money or a credit card linked to my account to buy a FREE game (when I don’t need it to “buy” a free demo) I have no idea. I’m certainly not adding a new card to my account for this purpose.

0 Comments

  1. Oh, tell me about it. Have you ever tried removing a payment option? I have an expired credit card attached to my account because I can’t remove it without adding another option first, and I don’t want to do that because I don’t know if I’ll want to renew my account next time (switching off autorenewal is a pain in the arse as well). At least I can still download free stuff on it.

    Also, my Live ID is an email address that doesn’t exist any more because they send a confirmation to the address you want to remove, not to any new ones you’ve added. I can change the preferred address, which is something I suppose, but not remove the defunct one.

    And Microsoft wonder why people don’t like them. Sony’s no better. CD rootkits, anyone? The next gen is one of those battles you wish both sides could lose.

    (By the way, you can log in to Live on the ‘Box without two-factor ID. I do it all the time because, well, what you just said. As far as I remember without the thing in front of me – because it’s basically just bloody-minded button-mashing – you sign in offline, sign in to Live from your account, it signs your account out but leaves Live connected, then you sign back in again. I don’t know whether this is a bug or a deliberate annoyance designed to harrass you into giving them your mobile number. It’s hard to tell with Microsoft. But fuck ’em; it works for now.)

    Duncan Snowden
  2. I found this website after just experiencing the exact same thing and needing to vent…trid to log into live to impulse buy the dishonoured dlcs and spent an hour going through endless circles just to try and give them my money. I’m sick of companies needing my entire web identity and family lineage just to give them money for a product, that by the time i get to be able to purchase i no longer wish to give them my money

  3. Same issue. Plain in the arse…!

    My fix was;
    -Try it, lose all hope
    -…Cancel and it takes you to dashboard
    -Start a game, (this worked for COD/BF3..)
    -Sign in when it says you need to connect to Live to play Online
    -…should work…

    Probably an easier way but this seemed quickest for me today (at least the game was running!)

    I did all the SMS and email crap between rounds. Really not worth it. I only have a hotmail account to have an Xbox Live account!

    Dave
  4. Oh f**k me! I feel your pain .. I went through the same process. Microsoft! Do you EVER test your products!? This post captures the absolute insanity that anyone like us has had the misfortune to experience

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.