Heartbleed status?

bpreble

According to LastPass, Elder Scrolls Online (and Bethesda servers in general) are impacted by Heartbleed. They're advising customers to wait before changing passwords, as Bethesda has yet to confirm updating its software.

My assumption is that LastPass is confused, since their "test" only applies to HTTP If not, you really should contact them.

ironicsilence

bumping this thread as its actually related to customer support which is a rarity in this forum

Jake71887

It can take a while for an official response unfortunately =/

ironicsilence

might get a faster response if there wasnt a new game feedback thread raised in the customer support forums every few seconds that is just a dupe of an already raised point.

Nooblet

They already discussed it when it first came out. Did things change since then?

Jake71887

Sometimes tagging a mod helps too... For instance: @ZOS_GinaBruno

Rhoric

This issue was already taken care of. It was addressed the day after this came to light.

KerinKor

bpreble wrote: »

My assumption is that LastPass is confused, since their "test" only applies to HTTP If not, you really should contact them.

Er, HTTP does NOT use SSL, so I don't understand what you're saying here, by definition HTTP can't be impacted so 'testing' HTTP is a pointless exercise by them.

Rhoric

Read this post in this topic.

http://forums.elderscrollsonline.com/discussion/comment/590610/#Comment_590610

darkkterror_ESO

KerinKor wrote: »

Rhoric wrote: »

This issue was already taken care of. It was addressed the day after this came to light.

According to the OP a well-known password management developer is claiming Bethsoft and other ES 'properties' are still impacted.

http://forums.elderscrollsonline.com/discussion/comment/590610/#Comment_590610

Official ZoS response right there. While I respect LastPass (I use it myself), I am more inclined to believe a response from the company actually running the server(s) than an outside party.

bpreble

KerinKor wrote: »

bpreble wrote: »

My assumption is that LastPass is confused, since their "test" only applies to HTTP If not, you really should contact them.

Er, HTTP does NOT use SSL, so I don't understand what you're saying here, by definition HTTP can't be impacted so 'testing' HTTP is a pointless exercise by them.

I realize that. I mentioned it because LastPass's test site automatically adds HTTPS:// to any URL you enter, and thus fails when pointed to www.elderscrollsonline.com. Since I've already changed all passwords, it's not a big deal for me. The fact that Bethesda has given the all-clear in the forums is even better. It sounds like the only issue is LastPass' erroneous reporting.