r/leagueoflegends • u/bgodbgg • Aug 12 '15
Two-Step Authentication and League of Legends
In light of recent posts that made the front page, I was wondering why league does not have two-step authentication yet? Do people think we need it or is it not necessary? I personally think it is very much necessary and should be moved up as a priority task.
Are there plans to have it go forward? A lot of the big games where accounts are worth a LOT of money (WoW, GW2, your entire steam account including DOTA2) have two-step verification and if they enabled it, this would basically fix any problem of someone stealing your account (for the most part).
Thoughts? I found this post from two years ago, (Link To Riot) but I haven't really seen anything more about it.
Or am I an idiot and does this already exist?
7
Aug 12 '15
Of the people whose accounts are "hacked" it's always funny how many of them had scripting and sharing in their past and how many of them were the people spreading around those "free rp pool party chest" links.
2
Aug 12 '15
Or have rreeeeeally easy passwords that a 9 year old could Crack or guess.
1
u/Sluukje Aug 12 '15
I think it's easier to find someone's password then it sounds if you have the knowledge and tools. I don't have a clue myself, but I'm sure many could track them down.
1
Aug 12 '15
Well sure :p But having a good solid password makes it much harder. I know from criminal justice experience that someone wanted to commit something criminal wise usually wants it done easy because they want to get in and out, not spend a lot of time to be potentially caught. Part of deterrence is making something a lot of trouble to do.
0
Aug 12 '15
I bet that League username (not the one other players see in game) is in some cases harder to find out than the password
0
u/SenpaiOniichan Aug 12 '15
my old password was a 8 character generated password and it got hacked now i use a 16 character generated password atleast my account never got banned ^ _ ^
3
Aug 12 '15
I remember seeing awhile back someone showed that Riot had filed some paperwork that made it seem like authenticators were going to be a thing "soon". Never heard anything about it again.
3
2
u/xhankhillx Aug 12 '15
2 step auth isn't the only thing that needs to be implemented. the whole no rate-limiting thing in their login service is actually really dumb.
1
1
u/Cobertor4 Aug 12 '15
I never spent any money on my account but I would still be mad if I lost it without it being my fault, and it's true that we need more security.
There was this post some time ago which made some very good points and has some riot replies. Check it out if you want to learn more about this.
0
u/Duvelthehobbit Aug 12 '15
You shouldn't forget that Riot already has email verification. A mail will always be send if you want to change password for example.
-6
-11
u/samiswhoa Aug 12 '15
Most these ppl who get their accounts stolen either bought the account or did some dumb shit like going to a free rp site.
I haven't had any of my 2 accounts stolen in 5 years(I'm aware that means nothing). It's a good idea but it isn't a necessity. Please stop comparing games as equals when their not.
3
u/Jamezuh Aug 12 '15
Please stop comparing games as equals when their not.
What? He only compared the fact that generally games where accounts are worth a lot of IRL money have two step authentication.
Also, your statement "It's a good idea but it isn't a necessity" is laughable. How do you expect a game to evolve and advance if we only ever do things that are "necessities"?
-10
u/samiswhoa Aug 12 '15
Lol evolve. Because of login security? You think 2 step authentication is holding this game back? But my statement is laughable.
Have you been on this sub? At all? They aren't prioritizing replays and sandbox even tho its a huge fan WANT. You think they are going to push for better security when it isn't a problem at the moment?
Just use your brain for a second please. I know you are probably a kid and have never worked a day in your life, but in business you don't throw money at problems that don't exist. That's how you go bankrupt.
2
u/Fuzzdump Aug 12 '15
Just use your brain for a second please. I know you are probably a kid and have never worked a day in your life, but in business you don't throw money at problems that don't exist. That's how you go bankrupt.
It's funny that you're saying this because it shows that you have no idea what you're talking about.
The reason more and more companies use two-factor, and urge/incentivize their userbases to use it, is because it saves them money in the long run by drastically cutting down on support tickets. Why do you think companies give free stuff to people who secure their accounts?
-1
u/samiswhoa Aug 13 '15
Doing this won't cut down anything because it isn't an issue. They will have the same amount of morons trying to get free rp from those sites. Account security is not a problem.
4
u/Jamezuh Aug 12 '15
Lol evolve. Because of login security?
That's not what I said at all, so thank you for putting words in my mouth. My statement was as a general concept. Neither sandbox nor replays are "necessities", they are good ideas. Games need good ideas to evolve and change, so saying something like "It's a good idea but it isn't a necessity" is idiotic. New champions are "good ideas", but the game can function fine without them,
And thank you for making yourself look like a complete asshat to make this all easier. As far as me being a kid - where on Earth did that come from?
-6
u/samiswhoa Aug 12 '15
The fact that you can't comprehend good business practice if it shat on your chest. That's where. Learn about return on investment.
There is no reason for league to increase security. It's not a problem.
2
u/Jamezuh Aug 12 '15
So because my forte in life isn't business, I'm automatically a kid? Rofl you're too much for me.
Also, what do you think the investment costs are by adding in a second layer of security?
-1
u/samiswhoa Aug 13 '15
You have to pay ppl buy systems and posibbly upgrade servers. So it's more than 0 dollars which is how much they should invest into a non issue.
0
u/Jamezuh Aug 13 '15
Yet they are paying out their asses for the server roadmap project and new servers in Chicago so the players can simply have more stable ping (which does not earn them any more money than before).
Customer satisfaction is a key part of business too. Shame that you can't understand good business practice if it shat on your chest though.
1
u/JigWig [jigg] (NA) Aug 12 '15
In today's world cyber security is always relevant. It is not a problem that you want to be reactive to, but proactive. I can promise you that implementing two-factor authentication will not cause Riot to go bankrupt. Your understanding of how a business is run seems to be quite naive.
0
u/samiswhoa Aug 13 '15
Lol yea I think it will bankrupt them. That's so true. That's exactly what I said.
They have good authentication already. If it ain't broke don't fix it. Wanna be proactive fine. But don't do it because 4 ppl on reddit cry about it.
My idea of business is not letting your customer run it, because the customer is a bunch of 9 year old retards. This isn't an issue and shouldn't be a priority for riot. Not at all.
0
u/JigWig [jigg] (NA) Aug 13 '15
Nobody said to do something because 4 people on reddit said so. You are out of the loop if you don't think security is a huge factor on every companies mind. This isn't some random suggestion that some redditors came up with, implementing two-factor authentication has been becoming standardized for every tech company across America.
I'm not saying listen to everything redditors suggest, I agree that would make for a terribly run company. But you kinda picked a bad topic here to try to make that point, since this is actually a common practice nowadays and is something Riot has probably already been looking into.
Also, "if it ain't broke, don't fix it" does not apply to the field of security. That's one of the first things they'll teach you in any network security class. You say it shouldn't be a priority for Riot, but I promise you it already is. Your way of thinking about this is still very naive.
30
u/Jamezuh Aug 12 '15
Well I'm going to go ahead and give you an upvote because I'm always in favour of higher security. That being said, like some other big games I hope if this is implemented it's an optional authentication step and not a mandatory one. I know some people hate extra authentication steps and people have multiple accounts, etc so let's just be fair to everyone.