The Australian Behind Two Of League Of Legends’ Biggest Hacks

The Australian Behind Two Of League Of Legends’ Biggest Hacks

In both 2011 and 2013, the servers of Riot Games, operators of League of Legends, were compromised. It’s easy to think the attacks were the work of a group of sophisticated criminals, but much of the work was really done by a 21-year-old Australian.

Currently out on bail after his home was raided in March, Shane Duffy has spoken with The Daily Dot in a great, lengthy feature about his role in the attacks. Which isn’t something I’d be doing if the Police still had me under investigation and a potential court case was on the way, but that’s why I work here, and not as a mysterious international hacker.

Duffy seemed somewhat nonplussed about the whole thing when we spoke to him. Released on bail pending further investigation, he laughed about how easy it had been to compromise the North American servers. He said it wasn’t “hacking” at all. While he needed hacking skills for his first attack in 2012, he said, it was only Riot’s ineptitude that was to blame for the 2013 attack.

You can, and should, read the whole thing here.

The hacker who went to war with Riot Games [The Daily Dot]


  • Like a murderer saying it is not murder at all. Took a knife and just slowly push it into that persons heart. Too easy compare to the preparations he did when he killed the first person.

    • Pretty much, denial of personal responsibility seems to be the go to theses days “It wasn’t rape, look at how she was dressed.”.

    • If you read the article, instead of trying to sound insightful, you’d know it was because Riot didn’t clean out their previous damage properly that allowed him to do the second set of breaches. So no he didn’t have to hack it again in 2013, it was just still compromised.

      • True but it doesn’t mean he is right in exploting it again which was the point I was trying to make.

        • He wasn’t “right” to do it in the first place but comparing him to a murderer or a rapist as @vaegrand did is so far out of the analogy ballpark it’s no longer baseball

          • What me and @vaegrand were trying to say is that when a person commit a crime, it is a crime regardless of how he justify it. It is an extreme analogy that I presented but it is just the point I’m trying to make.

          • I am not trying to draw a direct comparison, I was stating that claiming it is some one else’s fault that he hacked their website is a joke. If you see a wallet sitting on a park bench you should hand it in, not help yourself and if it happens again then yes the person who left it behind is stupid; however it doesn’t admonish the fact that taking it is stealing.

            It was just the first thing that popped into my head.

  • In both 2011 and 2013
    While he needed hacking skills for his first attack in 2012
    So was his first attack in 2011 or 2012…?

Show more comments

Comments are closed.

Log in to comment on this story!