Click to open network menu
Join or Log In
Mobafire logo

Join the leading League of Legends community. Create and share Champion Guides and Builds.

Create an MFN Account






Or

's Forum Avatar

Missing Guides

Creator: Matt September 8, 2016 1:27am
35 posts - page 2 of 4
Matt
<Administrator>
Matt's Forum Avatar
Show more awards
Posts:
4286
Joined:
Dec 8th, 2009
Permalink | Quote | PM | +Rep September 8, 2016 7:40am | Report
Sorry for the lack of follow ups, obviously we've been quite busy sorting this out. However I wanted to chime in to explain how our passwords are stored on our server so you guys know.

We do not actually store your passwords. When you set your password, before we do anything we immediately apply what is called a salt to it, then we hash that using a strong algorithm, but we repeat it many many times over, this is called stretching. The salt is to counter dictionary attacks, because you'd need to generate a new dictionary to account for the salt and every single one of you has a unique random salt on your password. The stretching also makes dictionary attacks exponentially slower by requiring hashes to be run many times over for each attempt.

Say you're an attacker and you got a hold of someone's hashed password. You need to rehash every single password in your dictionary to include the unique salt for that password. If you have to run a complex hash on tens or hundreds of thousands of potential passwords to account for that salt, that's gonna take time. If you then also have to run that hash dozens of times for each and every possible password, it's going to take exponentially longer, even just for one password.

Hope that makes sense. Even if someone did somehow see your hashed password, it would be pretty useless to them.
Stoudamire
<Member>
Stoudamire's Forum Avatar
Show more awards
Posts:
32
Joined:
Nov 19th, 2014
Permalink | Quote | PM | +Rep September 8, 2016 7:45am | Report
do we have to change our passwords?

/edit: oh i understood. good luck and i'll wait patiently.
Matt
<Administrator>
Matt's Forum Avatar
Show more awards
Posts:
4286
Joined:
Dec 8th, 2009
Permalink | Quote | PM | +Rep September 8, 2016 7:47am | Report
It never hurts to be cautious, but your passwords should be safe. If you currently use the same password for multiple things though, this might be a good time to adopt some better practices :)
Stoudamire
<Member>
Stoudamire's Forum Avatar
Show more awards
Posts:
32
Joined:
Nov 19th, 2014
Permalink | Quote | PM | +Rep September 8, 2016 7:49am | Report
awesome. thanks
Janitsu
<Moderator>
Janitsu's Forum Avatar
Show more awards
Posts:
8829
Joined:
Jul 3rd, 2011
Permalink | Quote | PM | +Rep September 8, 2016 8:40am | Report
Why is Matt no longer admin? Why is he user???
Latest Legend
<Member>
Latest Legend's Forum Avatar
Show more awards
Posts:
3039
Joined:
Dec 7th, 2012
Permalink | Quote | PM | +Rep September 8, 2016 8:49am | Report
Good to know, thanks for the info. Sounds like your security practices are solid, that's great.

I think your follow ups are surprisingly fast and useful, no need to be sorry. Dropbox recently somewhat said they were hacked without any real useful info and it actually happened 4 years ago.

Janitsu wrote:
Why is Matt no longer admin? Why is he user???
THE HACKERS HAVE TAKEN CONTROL. I REPEAT. :^)
********'s a pretty good fertilizer
Matt
<Administrator>
Matt's Forum Avatar
Show more awards
Posts:
4286
Joined:
Dec 8th, 2009
Permalink | Quote | PM | +Rep September 8, 2016 8:52am | Report
I demoted myself temporarily as a precautionary measure :)
TheSilverDust
<Member>
TheSilverDust's Forum Avatar
Show more awards
Posts:
1611
Joined:
Jan 28th, 2015
Permalink | Quote | PM | +Rep September 9, 2016 1:03am | Report
Let us guess whose admin account was hacked. I think that Wayne's account was the one.
Sig made by me!
Aizenvolt
<Member>
Aizenvolt's Forum Avatar
Show more awards
Posts:
25
Joined:
Apr 7th, 2016
Permalink | Quote | PM | +Rep September 9, 2016 2:31am | Report
As for the guides that got deleted do you need us to send you the name of the guide to help you find whats missing or there is no problem with finding the guides that got deleted.
Matt
<Administrator>
Matt's Forum Avatar
Show more awards
Posts:
4286
Joined:
Dec 8th, 2009
Permalink | Quote | PM | +Rep September 9, 2016 8:42am | Report
We'll be able to figure it out, no worries. Keep an eye on this thread though, and once we post here saying things are settled, if you still see any missing content then let us know right away.

You need to log in before commenting.

League of Legends Champions:

Teamfight Tactics Guide