Bug bounties aren't new, especially in the tech world.

@Infisrael

Ай бұрын

But Valve doesn't? Why?

@ecszst.croixe3573

Ай бұрын

Of course. But then there's CS2. Both are leading games in their respective genres.

@RadionYT

Ай бұрын

@@Infisrael because valve is indie developer, they cant afford to pay other people

@BobbyDigMOB

Ай бұрын

@@Infisrael valve has one you should google it but beforfe claiming it doesnt exist

@Linkman8912

Ай бұрын

​@@RadionYTwon't somebody please think of the corps?

every tech company on the planet does this

@Infisrael

Ай бұрын

Except Valve

@ecszst.croixe3573

Ай бұрын

But then there's CS2.

@konosuba350

Ай бұрын

Cs2

@MtFoxt

Ай бұрын

Apex

@datmanjay420

Ай бұрын

@@Infisrael you people didn't even finish the video. Valve pays out bounties for Steam vulns and CS vulns. Bounties just aren't as competitive as Riot -- take that as you will.

Fun fact I have a riot gun buddy for this exact thing. Find a hack, report source code, get a riot buddy. Gotta have some connections to do this but they do it

@datmanjay420

Ай бұрын

see you in Dallas buddy.

@undercherry

Ай бұрын

​@@datmanjay420😂😂

@DW-iv6cc

Ай бұрын

i just rewatched that reaction video and it is genuinely impressive how 10k hours in aimlabs has reduced your mental capacity to that of a primate

@han453

Ай бұрын

Bros happy with a riot buddy instead of cash

@DS-nv2ni

Ай бұрын

Fun fact: No one cares.

It is actually a great idea! Similar to bug bounty programs at big companies, its an amazing way to reverse engineer and fix problems. Wish they could do something similar to cs2 :(

@Franwow

Ай бұрын

It isn't "similar," it's literally the exact same thing.

@user-pi4cr1fh9j

Ай бұрын

Valve have bug bounty programs for games

@MrArkaneMage

Ай бұрын

Valve does not cooperate with cheat-coders, theres has been an interview with the biggest cs2 cheat dev just a few days ago by ohnepixel... :)

@Franwow

Ай бұрын

@@MrArkaneMage That's ONE interview, just saying.

@MrArkaneMage

Ай бұрын

@@Franwow And the moon is gone when nobody is looking at it. I can make statements without proof too, doesnt make it true.

100k is way to low... Imagine the kind of money you could force riot to pay if you got your security breach up and running on millions of PCs...

@Rfxomega

Ай бұрын

Yeah kernel level RCE good god, for all val and league players worldwide the potential is massive

@taoofjester4113

Ай бұрын

​@LetsPlayBojangles you should have done a few minutes of research before you made that claim. It is not SOP. While the number of companies that are paying ransom is getting fewer, there are still a lot of big businesses dropping serious cash. As an example an insurance company dropped 22 million to get their data back from hackers. It is in the best interest of the hacker to hold uo their end of the bargain. If they don't, they know companies will not pay out and that kills their golden goose.

@LordMegatherium

Ай бұрын

@@LetsPlayBojangles And this is why you don't ask gamers these kinds of techjnical questions. Gamers consider themselves somewhat technically savvy but are for the most part crayon chewers that regurgitate unsubstantiated bullcrap that a dead badger could've tossed out for lack of intellectual soundness.

@cousinpatsey2471

Ай бұрын

A couple of points: You take on immense risk of doing that, and waiting for your end to be set up without them finding it first. If they find you in the act, or a government gets involved, you're fucked. A lot of hackers are actually fairly ethical. They hack because they want to exploit, they hack because they want to "solve the puzzle" so to speak. They don't want to hurt others. A great example of this is PirateSoftware. And getting known by these companies for this sort of thing, and on their good side, can often lead to much more than just 100k. It leads to jobs, contacts, and a lot of money without the risks of point 1.

@thecipher8495

21 күн бұрын

@@taoofjester4113 So they gave out the data back first and hoping the company pays? That's a huge risk for a criminal offense and all the work in vain

Anyone who says that he cares about privacy and therefore will not run Vanguard and has a smartphone in his pocket is just an ignorant.

Absolute normal that concerns pay hackers to find weak spots in the own network.

Destroyer2009, trolling the ALGS: You guys are getting paid?

Bug bounties are a good idea in theory but in practice they pay far far less than taking advantage of the found bug

@burgerbait

Ай бұрын

without the risk

@catmando268

Ай бұрын

This.

@cousinpatsey2471

Ай бұрын

They also have no risk, can lead to contacts and future employment, and are ethically far better. Taking advantage of security issues is a far worse idea than it sounds most of the time.

I love the hat removal clip in the intro. Well played.

I already have games I play with kernel level access because of EAC. If anything, I should be more worried about those because EAC doesn't have as big of a reputation as Riot does. If EAC gets hacked and compromises users, big uproar, nobody cares within 2 weeks. If Vanguard gets hacked and compromises users, Riot is done forever.

@koala-ytt

Ай бұрын

EAC is not always-on. Besides, reputation doesn’t prevent bugs or hacks from happening.

@Hibernape

Ай бұрын

@@koala-ytt Reputation is money.... CHINA money. They're not going to let that slip by fucking up with their very intrusive, already dubious anti-cheat.

@psychokuca302

Ай бұрын

@@koala-ytt So when you play games with EAC you turn off all your mdeias, browsers, when you play the game and suddenyl wanted to order a pizza you close a game? And etc etc?

@koala-ytt

Ай бұрын

@@psychokuca302 Remember the Apex RCE scare? The difference is you won't be affected unless you open the game, if EAC exploit was the problem.

@psychokuca302

Ай бұрын

@@koala-ytt Do you browse internet bofre opening to game to find out if EAC was compromised? Will the EAC dev team react fast enough to fix the issue? Will games using EAC get this EAC update fast enough? There are a lot of reason why even EAC is "unsafe", on the same lvl as Vangaurd.

I guess riot doesn’t know about the trigger bot yet which has been going around undetected for last 2 months

Skynet has indeed a great packaging

This should have been a 10+ minute video explaining bug bounty programs more, and how its helped so many more companies with anti-cheat. Not only that but the $100k reward for kernel level exploits has so much more stuff in it that's really interesting.

League does not have a hacker problem, they have a botted account problem... they combine the numbers to make it seem like there is a hacker in every other game. I can recall in the last 14 years playing two times someone was obviously scripting. Sure there were a few that were more hidden with it but we are talking such low numbers. Kernel level anti-cheat is not required for league but they want to force it through with unfair data representation.

@eijitoh6252

Ай бұрын

because Riot are also the ones running those bots. They oerfected this in wildrift where there is 3-5 bots per game

@shadowflare2838

Ай бұрын

What elo are you? I have seen quite a number of scripters recently

@coasterthekid8867

Ай бұрын

Your lobbies do not have a hacker problem because you do not play at a high enough rank to see any hackers. You run into bots because your rank is low enough to where those bots can blend in to all the other trash players. Masters is filled to the brim with scripters and I’d much rather have a kernel level anti-cheat then be locked into a 30 minute game with a Nidalee that hits max range spears on people she doesn’t even have a vision of.

@slick571

Ай бұрын

well said

@kylemcneil5932

Ай бұрын

@@shadowflare2838 diamond 4, I haven't seen anyone blatantly scripting this season yet

not gonna lie their bounties are low

@scottknightwsp

Ай бұрын

most of the low ones are for simple low level cheats that would be easy to create. anything of really big value like $10,000 for aimbot or wall hacking would still definitely be worth it for anyone who stumbles across that

@anonapache

Ай бұрын

@@scottknightwsp Not at all. Cheat developers make tens of thousands minimum per month, with only a couple hundred of customers.

MY BOY DEVIN GOT THE BOXR BHOP SHIRT

Always entertained by your content, it's awesome!

While I don't really have an issue with kernel level anti cheat (and frankly welcome it if it keeps lobbies at least semi to mostly cheater free), Vanguard for whatever reason causes so many issues with my system no matter how fresh of a windows install I have that I had to stop playing Valorant pretty early on, and more recently uninstalled LoL, the account of which I've had since beta. Every bit of response I've gotten from support on the matter is basically "Sorry tough shit.". Quite frustrating since at it's core I really enjoyed Valorant, and LoL was my goto time waster for jumping on for a few ARAMs or whatever the in cycle custom game mode was.

yall should do a video on whats happening with tarkov rn the whole communitys pissed and some are filling lawsuits

My mouse keyboard have been acting up on startup. Keyboard settled, but mouse didn't until I exited all my apps and reloaded. I didn't clue in that Vanguard is likely why, all of a sudden, until now! xD

I want a League experience without toxicity, stupidity and smurfing ruining it.

This won't stop Tencent from having the power to brick your PC at any time.

@ViperDivinity

16 күн бұрын

I've heard about it all day long.... Let's just ignore that your phone was made in China... Privacy is very hard to hide nowadays, even VPNs

Keep your enemies close, or so they say.

those bug bounties are too small to be a reward for hackers. They would rather put these exploits on the market and make bank.

Imagine you are a hacker that has an exploit that can execute code without user interaction on a kernel level on millions of PC's with Vanguard installed on them, why would you take 100k?

@ommyotter4064

Ай бұрын

I'd imagine if you were to do something malicious that got you more than $100K, there's a good chance you could get caught and sent to prison for many years. Much easier to just get your $100K and walk away.

@thehypnotoad5184

Ай бұрын

Because you can put the 100k into your bank account without ever having to worry about potentially going to jail and losing any money you've made by being a criminal.

@psychokuca302

Ай бұрын

Get 100k and walk away freely, or walk away with 10mils but become a criminal and need to hide,basically,forever?

@jeos7241

Ай бұрын

@@ommyotter4064 ​ @thehypnotoad5184 ​ @psychokuca302 Some steal millions and never get caught, while others do, but it seems like a really hard thing to do. I tend to think that someone with that kind of knowledge is either already working in cybersecurity or is already a criminal. Maybe someone gets lucky randomly and takes the money for sure, but a bad actor can do harm as well. I see the bad actor scenario as way more possible in my opinion.

@LetsPlayBojangles

Ай бұрын

Because the 100K bounty is legal, not everyone wants to run malware on other people's machines.

@3:15 it’s $11,000 not $1,100

$100,000 is nothing compared to $1/user for access to their pc. If i hypothetically found an exploit, there's millions of users, so selling the exploit to bad actor is much more money than riot is offering.

This is industry standard. White hat hacking is a field that's been around for as long as computers became a part of the business world

I dont have league installed for like 14 years.

the titles puts a negative twist on bug bounty program. its completely legit, these arent black hats who are not malicious if anyone was wondering

2.000-20.000$ for a cheat that will be sought after by millions willing to pay 100$ a month....the sad truth is that even tho its nice and honest work...probably all who try to cheat in league do it for the potential to sell it later and not for the one time payment of not even a monthly income if they were to sell the cheat.

1 in 15 matches figure was used for League of legends

As someone who works in tech... Yes they do work and they've been going on for decades.

@anonapache

Ай бұрын

Then you should also know, that the figures they are paying, are way too low.

I’m so broke that the hacker will feel bad for me.

Billion Dollar company putting out 100$ bounties. I would sell my hacks instead of telling Riot. It's just a joke.

Ive never had league downloaded 😂😭

China's state cyberwarfare operation has a history of employing hackers that they catch. The US does as well to a lesser degree. I would hope that Riot would flip that kind of talent to their side with the promise of money.

They can do whatever they want, but Vanguard is never going to be impenetrable. It's just sad at this point

@albertoaltahona88

Ай бұрын

But its the best anti cheat right now for games

@yggreuyri5822

Ай бұрын

@@albertoaltahona88 And I'm here waiting for the inevitable with a popcorn 🤤🍿

Running the game in a VM would alleviate a lot of concerns people have about the anticheat having kernel level access. However, the anticheat probably won't let you run the game in a VM for the same reason, it won't have access to anything outside the VM. It becomes an arms race to hide yourself from the anticheat, the same as cheat developers.

i can't wait for vanguard to arrive. having a untouchable player in the opposing team is so frustrating... we are so uninterested in privacy and so on that the majority of people use passwords like 1234567890 or some bullshit like that, and when i say the majority i mean about 99% of the player base. and if we get a ban, game termination like in valve, and we lose 0 lp it is awesome. what i am happy about is the reward system, that has explicit values. white hat Hackers, or even black hat ones can get money easily... thou i know there are programs all over the world for breaches, the money are not so spread on individual types of hacks, bugs etc.

Uninstalling league on my main computer and getting a second computer only for gaming. There is no way in he** im running a software on my main computer with kernal access.

Yea big Banks & hedge funds do this. Its so common in the Tech and Business world since someone else will try to do it. They do it to find loop holes before some other hacker from somewhere else does it... What is the big story here like am i missing something

It’s called white hat hacking. It’s been around for a long time. Fun fact though rocket league also gives out their most expensive item to people who do this and find issues. “The white hat”.

@cousinpatsey2471

Ай бұрын

Rocket League used to, iirc that program stopped within the past year.

tbh 2-20k for a Cheat might sound to be a lot of money, but with the right Marketing you can make that within a Week selling it

Without watching the video, three words: White Hat Hackers.

Low-level learning mentioned ❤

If Valve created a kernel level anti cheat like Vanguard I will trust that more for suree

They should offer full RP refunds to the players that don't want vanguard tho, as it's literally force added to the game 10+ years after release lol

The only reason why i thought about uninstalling lol was bc i don't have a good PC and it might not run lol with vanguard, but it does so i'm still playing and i will till my PC can't run it anymore. Btw, if u are concerned about ur security and integrity just dont give any of ur data to ur pc, bro. There are places way more dangerous than league wich can steal ur data....

Google does it, and I'm sure everyone big tech company does it.

Allowing Kernel Anti-Cheat on your system is as equal to leaving your door open for anybody at anytime.

@phanthanhlam6612

Ай бұрын

but don't every other anti cheat run at kernel level ? faceit, easy anti cheat, battle eye, .. they all run at kernel level, you can't stop cheats without kernel level acess at this point

@MikeGrau0hr

Ай бұрын

hm. isnt it rather like employing a security company to watch your door? your argument is like "any security system can be breached" but disregarding the fact that some are still safer than others it feels.. dont get me wrong - i used to argue the exact same way. but atm 90% of the cheating issues i encounter personally in apex legends could not happen with kernel level anti cheat afaik.

riot will have to choose which government they fear the most sooner than later lol

After I head that riot is in owner ship of Chinese company. I uninstalled valorant and vanguard.

then the hackers use the same vulnerability of the new inmunity to sell more cheats

@KokoroKatsura

Ай бұрын

a n i m e n i m e

what a dumb question to ask... paying for pen testing was always a thing like.... what?!?

before the dumb ppl come in this is a great thing. if u find problems/ cheats in a game its a lot easier to deal with than to hunt and wait for a cheater to mess up to ban them

Haven’t been able to play video games really for the past 2 years due to personal reasons, bought myself a gaming laptop to maybe get into it again soon, but yeah this is gonna stop me from trying CS2, LOL and Valorant

I haven't logged into LoL since vanguard was announced. Seeing this video just reminded me I actually need to uninstall it entirely.

I do care about my privacy and my security.

I never really played any riot games.

I just hate that I can't use OperaGX with Vanguard.

@Yaboyshock

Ай бұрын

yeah you can who said you cant

@izabelreyes3915

Ай бұрын

@@Yaboyshock a lot of people say OperaGX causes issues with Vanguard so I just don't want to risk it

@FrenchDinosaur

Ай бұрын

​@@izabelreyes3915I've been doing it for years. What's so different about our devices for you to be so scared for your life? The thing here is the "many" who keep on saying that are, in truth, the vocal minority.

@TwinkieShip

Ай бұрын

@@izabelreyes3915 ive been playing Valorant for years and OperaGX is open 24/7. dont know what your on about here, there is ZERO risk

@anonapache

Ай бұрын

OperaGX is just as bad as Vanguard.

in what region and elo do you get a scripter every 15 games? i play for years and spotted only a handful

Im still debating wether to uninstall or not. Furthermore I know of some people talking to lawyers to get money back spend in League since they basically kill the game for some.

Honestly riot makes so much money off skin sales and micro transactions that them having access to whatever they want and being able to sell or use all you’re info isn’t worth the amount they make. Let’s say they did and someone found out the backlash would be crazy to the point it wouldn’t be worth them to do so financially.

@PedroBaleeiro

Ай бұрын

Sure it's not a move that the multi-million dollar company will take without lots of consideration, but knowing the mind of rich people, rich want to get richer. It takes one greedy person in a position of power and some subordinates to make a big bad impact on many people's PCs.

Meanwhile in valve...

tbf riot have doe articles about this for YEARS they've been working with hackers scripters and the like for ages.

The only reason i am uninstalling league its because back then, Vanguard made my pc slower, booted slower, bsod began to happen and a lot of issues more that got solved once i uninstalled it. It has been a few years and maybe it won't happen again, becayse i have a beefier pc, but i dont want to risk it.

fck. now i wna learn how to hack. Wonder if YT has tutorials.

I already play Valorant, so I don't care about Vanguard coming to League

VALVE WRITE THIS DOWN PLEASE

valve about to go bankcrupt lmao

You sure about valve?💀

i feel like is the past few years cheating in video games have gotten way worse. cs 2 r6s, LoL, cod etc.

@lolsakus

Ай бұрын

Of course, since it's also partly due to covid where people wanted games that could be played WITHOUT having to go against the people that actually deserve the elo

already have!

they can make more selling it else where ;) imagine programmers were paid like athletes and got huge transfer fees lol

we pay a lot more collectively than riot can ever pay them plus we are more loyal. sorry Rito you will never win.

I mean if you can't beat them buy them right?

Lol, this is a common practice.

Yeah just make it more profitable to turn in the hacks than sell them

$5-$100,000 only? But they can sell the exploit up to $500,000-$1M in the black market😂

Riot is a BILLION dollar earner. 100k is nothing for a cheater who could make more selling good cheats.

@frygonkis

Ай бұрын

Unless you charge +1k$ for some incredibly well-performing cheats, i doubt a cheater would ever get 100k for solely selling good cheats. Considering 79$ is standard for 30-day cheats

@williamhermanson9753

Ай бұрын

@@frygonkis You think that most cheaters make there money selling 30 day cheats to strangers online? What a joke.

if i can execute kernel level code and i get offered 100k for it i laugh, also i will never allow a Chinese company to have that access to my pc, already uninstalled.

These anti-cheaters are making more money than actual cheat developers and not getting sued.

is it just leauge or also valorant?

@MassedHerBait

Ай бұрын

Both

Im gonna use vangaurd as an opportunity to take a break from league for at least a few weeks. If its bricking peoples PCs or people are finding that its beaming home telemetry info that it shouldnt be ill just play CS2 instead.

oh i will not uninstall league even if vanguard is being added. and i'm not even a league player, im valorant player. compared to cs2? it's undeniable.

For a game that doesnt have replay after 4 years, its pretty funny to trust scummy riot for telling them the exploit where they might patch it and scam u saying this exploit is not enough for 500k 😂

dont mind spyware, anon. everybody doing it. just shut up and consoom.

So they paying money to found how they could spy on it's users

Valorants consers haven't gone down it's been increased sadly

I know that people prefer A cheater free game than data but Vanguard not only takes your data also your PC performance. I was having an issue of lag/rendering in GTA . I uninstalled valorant recently since I don't play it at all cuz it's not fun personally. After that my GTA performance is fixed

already uninstall, the day riot send me that message league was gone.

i would uninstall everything related to riot games on your PC now. The Chinese have figured out another way to harvest data and spy on the rest of the world, now through the ownership of a triple A game studio and force players to willingly install spyware onto their PC's in order to play the games.

@nekogami87

Ай бұрын

If tencent wanted to spy on you, they wouldn't have needed to announce Vanguard, you are already installing their game... pretty sure they could make the process install the equivalent without having to scapegoat Vanguard. Don't get me wrong, you and I both aren't playing any Riot games (or other) because of that. But I really think that Tencent is not the thing to worry about, but rather who is going to be able to break it.

like pirate software himself has said if your anti cheat is good you dont need kernel level of access to a machine

@namo2403

Ай бұрын

name me an anticheat from a major game that does not run on kernel level yes in theory ac doesn't NEED kernel level to be proficient but the reality is that no company bother to develop it when there is an "easier" route of going kernel level vanguard, fortnite eac, faceit all run on kernel level, there is currently 0 non-ring0 ac that is used in the market

CS2 could never

1 in 15 and 11k

The problem was never that Vanguard "could" be exploited by malicious hackers (even though it definitely is a problem too). The problem was always that certain interest groups (mostly state level interest groups) could be granted access to this kernel-level execution environment on all affected PCs. There is literally no way that scripters can mitigate ANY issue facing kernel level anti-cheat outside of more cheat prevention. Really wierd way to frame the issue and the situation in general. Very misguided. Scripters are not the ones collecting the big bounties regarding kernel level execution. These bounties are collected by security researchers and experienced white hat exploiters.

@adamhenriksson6007

Ай бұрын

With that said, no one really cares, me included lmao.

Imagine how much money Koreans are earning with this by DDoSing LCK. 💀☠

This isn't a new thing.