[Patch 3.10: Yimake Patch] General Discussion - Page 322

On August 21 2013 21:51 Alaric wrote:
Did you try it? More than once where you got fed?

On August 21 2013 22:55 LaNague wrote:
hi 10 min loginqueue on west, havent seen you for a while.

On August 21 2013 10:02 thenexusp wrote:

There's some wrong information in here and I'll just go point by point:

- This is why you never, ever reuse the same password for multiple sites.

- xkcd's 4x dictionary words approach cannot be brute forced. The idea is that the combination of 4 (random, independent) dictionary words cannot be brute-forced, because each additional word multiplicatively increases the brute-force time.. Say the words are taken from the 10,000 most common words. A password containing a single dictionary word might be brute-forced in 0.01 second. But 4 dictionary words together exponentially increases the number of possible passwords. so instead of 10,000 things to search through you have 10,000,000,000,000,000. This takes 10,000,000,000 seconds, which is hundreds of years.

- You can get all the hashes and salts, but as long as your password is decently secure your password should still be safe. The whole point of salting & hashing your passwords is to mitigate the damage in the case of a database break-in.

- You misunderstand how password salts work. There isn't a single "Riot salt" that is applied to each password. Each user has his own salt, which is stored in the database in the same row as the user. The idea is to make it so that one can't create a comprehensive table of password->hash combinations to immediately break large sections of the database; you have to redo the work for each user because each user has a different salt.

- You should never use a password that's been leaked on one of the plaintext leaks. If you have an original, secure password, chances are you're fine.

- One way to check your password security is by asking "if the attacker knew what form my password took, how many other passwords are possible?" For example, if your password form was "common dictionary word followed by a number", there are about 10,000*10 = 100,000 possible passwords, which is horribly insecure. If you use "common dictionary word with some letters in leetspeak" you have 10,000*16ish (assuming 4 possible letters to substitute or not), which is still bad. You want something on the order of 10^14 at least, more if you're paranoid about future advances in technology.
- On the other hand, you don't need the most secure password; all you need to be is have a harder-to-crack password than the next guy. If someone were to comb through Riot's databases, and finds 100,000 people who have passwords that can be cracked in 3 minutes, he's not going to bother with yours if yours takes an hour to crack (even if it is theoretically doable). (Still, it's probably better to go with passwords that will take thousands of years)

And more stuff...

- A list of the 10,000 most common passwords: http://pastebin.com/Y1Tx2hA9
There are some interesting things on here. For example, "zaqxsw". If you think about it, you might see how someone would use this password...
Needless to say, if your password appears here you are very unsafe.

On August 21 2013 18:59 PrinceXizor wrote:
If you want to play a character as support, the main things you need to look at are:

What do i gain from playing this character,
What is unique about this character,
What impact do i have on laning,
And finally, what can i do mid-late game with mostly health stacking.

Tryndamere, Amumu, Vi, Urgot, Ezreal, Galio, fiddle, lissandra, warwick all pass these four questions pretty damn well. But some of them require unusual play from your partner to be strong, similar to how Leona does. Making it difficult to use them in solo queue in addition to general trolling that you will receive for trying.