Regarding the Heartbleed security bug

Riot·Apr 19, 2014·3 votes·24,554 views

There's been a lot of discussion surrounding the “Heartbleed” SSL security bug that impacted a lot of websites (this video does a good job of explaining the details). We dug into every League of Legends system and we're happy to report that no player information was exposed to this bug.

However, some players use their League of Legends login information on other websites and, because of how widespread the Heartbleed bug is, their accounts may still be vulnerable.

Just to be safe, we strongly encourage players to change their League of Legends passwords. Additionally, all League of Legends players should verify their email address for added security.

As always, we'll keep doing everything we can to protect your information and will keep you informed of any updates.

513 Comments

KnownErrorApr 19, 2014407 votes

TFW when a game company actually cares for their playerbase :3

West CorbyApr 19, 201417 votes

Its a rare breed :*)

ManTigerApr 19, 201435 votes

the poro breed!

dnlApr 19, 2014304 votes

Riot's a good company, better than most. I don't know why people complain about them.

Gurei FullbusterApr 19, 2014218 votes

Because they could be better. Does that mean I think they should be complaining? No. Does that mean I think they shouldn't be complaining? No.

What I do believe though is that I would be happier if more companies were like Riot.

derekthedog24Apr 19, 20145 votes

people complain cause they have an odd number of rp like yester day one ash them to lower a skin because he was 25 rp off from it thats why they complain not because there berrer then the creanters of dotta they complain because of the skins

NazarithApr 19, 2014379 votes

reading this gave me cancer

20350197_DELApr 19, 201435 votes

They could be much, much worse. Blizzard is one that comes to mind. Compromising credit card information, banning accounts 6 months after cancellation due to a hacker getting into it, and 'losing' beta key invitations. Trust me, if Riot ends up like that, I'll do the same thing I've done with every blizzard gave I had own; secure erase every game of theirs off my hard drive and burn their CD/DVDs in a fire.

ElemonApr 19, 20146 votes

Well that escalated quickly...

SokinaApr 19, 201419 votes

I actually had a really good run in with Blizzard support. I've had nothing but good from them, same with EA oddly enough. Blizzard support literally took my compromised account, and hooked up my brand new account with everything my compromised one had.

Just shows people have different experiences, and I'm by no means a blizzard or EA uber-fan.

Smut PornApr 19, 2014134 votes

I wonder why the game with one of the most caring companies also has one of the worst communities.

Endless MarineApr 19, 2014179 votes

Because when you give people freedom and show kindness they will abuse it and the people that play nice get forgotten and overshadowed by those that bend the rules and take advantage.

Shiny Toy GunsApr 19, 201430 votes

Any game whether it's pc or console based that puts people on any team to work together to win always has issues because not everyone has the same goal or game experience so you just end up with people getting mad. Examples: Halo, Call of Duty, Battlefield, Dota, League, Etc....

IAlexanderIApr 19, 201461 votes

I would say a very vocal minority can make it seem like the community is awful, but it seems more like a 4 to 1 ratio of decent, even kind people to the one person who's got something they think they have to prove. Sadly with a ten person game this still means about 2 trolls per game. XD

Genova FearbaneApr 19, 201431 votes

People complaining about Rito is good to a certain degree. There is a big difference between talking about Rito's flaws and what it can do better and calling it a "Faggoty, shit-ass company", which it isn't.

MeiaLuaApr 19, 201422 votes

I see a lot of people complaining about technical aspects, which is unfair. For example "Fix your servers" which is, to anyone with an ounce of knowledge or care, not that simple. Updating servers is a matter that takes a very long time. They did it a month or so ago in NA, and it caused the client to crash initially. Wouldn't you know, people complained. It bugs me when folks complain about things that Riot can't easily help. There is much better feedback to be made.

MagSecApr 19, 20148 votes

The hardest part of coding is by far debugging IMO. The more complex a game gets, the harder it is too fix too. I have played TONS of online games and I have never played one that has been glitch/bug free. It just happens that bugs affect this game more than most since it is so competitive and one thing not working could be the difference between losing and winning.

I think Riot does an exceptional job at keeping the code as bug free as possible. Especially since the game is based on imperfect code.

icydecayApr 19, 201415 votes

Complaining, to a certain extent<---, can be beneficial to a company. It shows in which areas the consumers(us) think they are lacking and could improve...though I do understand that there is a RIGHT and WRONG way of complaining

Bone ThugsApr 19, 201428 votes

jagex cough cough

Pówer of AnimeApr 19, 201415 votes

or nexon, if you've ever played maplestory you know..

blockhead3142Apr 19, 2014127 votes

Most of the internet is affected by a massive security leak? Well, better nerf Irelia.

DafuqqinMobsterApr 19, 201453 votes

More like nerf Darius bleed.

DafuqqinMobsterApr 19, 201426 votes

lmao i was referencing to the heartbleed... guess no one got it

RedMateriaApr 19, 201424 votes

OR it wasn't funny

The 8th GuardianApr 19, 201432 votes

Sorry I would have blamed Pantheon and his Heartseeker Strike for this.

SoldMyMomForRPApr 19, 201439 votes

Kha'zix Always causing problems no matter what patch

lil snupeApr 19, 201411 votes

"bug splat"

MUNDOCORPApr 19, 201436 votes

YAY MUNDOS ACOUNT WASENT STOLEN BY HAKERS

InternalBleatingApr 19, 201436 votes

Rito, you make me feel all warm and soggy in my chest-cavity.

Also; I'm sorry I left you for Smite. I wasn't thinking clearly. Please take me back.

Tempting ChaosApr 19, 201430 votes

Rito has moved on. I'm sorry.

ZemgadApr 19, 201410 votes

Why do ppl always misspell Riot for Rito 0.o

TheKrevFoxApr 19, 201416 votes

It's a sort of running joke to misspell it. I have no idea how it started though, unfortunately.

GaleWinUnleashedApr 19, 201416 votes

Oh no, it started WAY before the URF trailer. That was just Riot making use of the joke themselves.

DavX92Apr 19, 201425 votes

I feel like the poro in the new trailer with Riot the guy protecting me. item 3151 such feels.

Monkey D ŁuffyApr 19, 201422 votes

Riots care more than our own government, that "we" "elect".

Phreak 4 Prez

NetholApr 19, 201415 votes

When I looked at the tab title here I thought it said Rengar ding the heartbleed.

SichaisApr 19, 201412 votes

Phreak, is that you?

Or are yi one of his Punawans

HolyDelReyApr 19, 201413 votes

Thanks for letting us know Riot <3 We appreciate your concern.

XiSucDik4HoneyApr 19, 201412 votes

"We dug into every League of Legends system and we're happy to report that no player information was exposed to this bug." Heartbleed bug leaves no trace, if player information was exposed to the bug no-one could know except the person(s) exploiting the bug.

Anaander MianaaiApr 19, 201428 votes

But, as I understand it, only some systems were vulnerable to the bug, riot could have just been checking to see if they were using any of those in relation to player data.

Mind you, I'm a complete layman.

RiotRiot 0xGradiusApr 19, 201454 votes

That's pretty spot on. :)

AndreionsApr 19, 201410 votes

I don't understand anything of this article only that i need to change my password and verify my email.

RiotRiot 0xGradiusApr 19, 201495 votes

The reason we can say that the systems we looked at have not been exploited is because we weren't running on a version of OpenSSL that was vulnerable to the attack :)

Kira OnimeApr 19, 201417 votes

So you're saying you're running a 2+ year old version of it?

MenneskeligApr 19, 201410 votes

Nothing wrong with that, as this case points out, it lets you avoid popular exploits and afflictions.

Kira OnimeApr 19, 20144 votes

Nothing wrong with that, as this case points out, it lets you avoid popular exploits and afflictions.

Never said it was a bad thing.

RiotRiot 0xGradiusApr 19, 201447 votes

Yes, there are reasons one may chose to using an earlier version of a software library. Secondly, some *nix distributions are known to backport the security patches of libraries without pulling the entire patch line, which happened to be our case.

Though any time there's a known security flaw with a library, we do as every other service provider should and update all affected libraries.

Edit: to reply to Holykow, I didn't say we rolled back. Backporting is a common practice in RHEL *nix distros -https://access.redhat.com/site/security/updates/backporting/

Statutory VapeApr 19, 201419 votes

you shoudve just said "shut ur stupid face, were riot and we said its all good". lov u :)