2 ms·
Riot should be a case study on how to handle leaks. Immediately releasing all that they know and forcing password resets. Good on them!
by Oculus 13y ago
Riot should be a case study on how to handle leaks. Immediately releasing all that they know and forcing password resets. Good on them!
- sillysaurus 13y agoAlso a case study on how not to store passwords. They enforce a maximum length on the user's password. It's something short, like 12 chars. The only reason they would enforce a maximum length is if they were storing the plaintext password in a database somewhere.
- Pengwin 13y agoThis has happened numerous times this year. The same response to me both these times. Crytek: http://www.eurogamer.net/articles/2013-08-05-crytek-pulls-websites-after-suspicious-activity-detected http://www.eurogamer.net/articles/2013-08-05-crytek-pulls-we... Ubisoft: http://forums.ubi.com/showthread.php/779040-Security-update-regarding-your-Ubisoft-account-please-create-a-new-password http://forums.ubi.com/showthread.php/779040-Security-update-... And even the PSN outage in 2011. I for one am sick and tired of these account breaches. Not only do account details get disclosed, but I am forced to create these accounts to access games which I play. I have a perfectly accessible steam account with an authentication API available that only a handful of games decide to not use. If you want me to have another account, fine. But promise these two things: 1 - It is worth my time and effort to create the account (I think League of Legends is fine here,they have a large ecosystem, however my two examples above are not.) 2 - You take care of my details. (Which they have all failed.)