Maintenance for the week of December 15:
• PC/Mac: NA and EU megaservers for maintenance – December 15, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
• Xbox: NA and EU megaservers for maintenance – December 15, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)
• PlayStation®: NA and EU megaservers for maintenance – December 15, 4:00AM EST (9:00 UTC) - 12:00PM EST (17:00 UTC)

Was poking around the install files found game uses OpenSSL for encryption.

Vlas
Vlas
✭✭✭
What version of OpenSSL is currently being used?

A recent security flaw has been found allowing people to get the crypto key and depending on many things, people of nefarious means can/could do a lot.

arstechnica.com/security/2014/04/critical-crypto-bug-in-openssl-opens-two-thirds-of-the-web-to-eavesdropping/

If it is before the 1.0.1g version, are there plans to patch to this version?
Or perhaps apply the fix noted here? https://openssl.org/news/secadv_20140407.txt

Also quite interesting to learn about all of the open source software that is being used. If anyone is interested look under \The Elder Scrolls Online\game\client\EsoThirdParty.rtf for the open source software they use.
  • Rhoric
    Rhoric
    ✭✭✭✭✭
    This has already been taken care of. They have looked into it and they are secure.
  • Vlas
    Vlas
    ✭✭✭
    If you are talking about the encryption of data packets on sign in people were talking about in another thread, I already disproved that.

    Im talking about something completely different.
  • Rhoric
    Rhoric
    ✭✭✭✭✭
    it is talking about the same thing as the heartbleed
  • Vlas
    Vlas
    ✭✭✭
    oh ok.
  • GossiTheDog
    GossiTheDog
    ✭✭✭✭✭
    The issue with OpenSSL at server side implemention, not on clients. Just FYI. Basically, this shouldn't be an issue.
  • KerinKor
    KerinKor
    ✭✭✭✭✭
    Vlas wrote: »
    If it is before the 1.0.1g version, are there plans to patch to this version?.
    This game isn't a server, the library version is irrelevant .. you don't know what you're talking about.

  • Vlas
    Vlas
    ✭✭✭
    The issue with OpenSSL at server side implemention, not on clients. Just FYI. Basically, this shouldn't be an issue.

    Funny, because the release notes I linked from Openssl itself state it is client and server side.
  • Vlas
    Vlas
    ✭✭✭
    KerinKor wrote: »
    Vlas wrote: »
    If it is before the 1.0.1g version, are there plans to patch to this version?.
    This game isn't a server, the library version is irrelevant .. you don't know what you're talking about.

    Mkay.. dont quit your job... you will have a tough time finding a new one.
  • jaschacasadiob16_ESO
    jaschacasadiob16_ESO
    ✭✭✭✭✭
    Amazon contacted all AWS clients about this problem. Given ESO relies on EC2, S3, ... they should ...know.
    "Yesterday while searching a barrel in vVoM I found a lemon. Best drop of the whole run."

    Protect the weak. Heal the sick.
    Treasure the gifts of friendship. Seek joy and inspiration in the mysteries of love.
    Honor the Earth, its creatures, and the spirits. Use Nature's gifts wisely. Respect her power. Fear her fury.
  • Vlas
    Vlas
    ✭✭✭
    Amazon contacted all AWS clients about this problem. Given ESO relies on EC2, S3, ... they should ...know.

    I didnt ask if they knew, just asked if they applied one of the two fixes available.
Sign In or Register to comment.