@[email protected] to [email protected]English • 1 year agoLarion Studios forum stores your passwords in unhashed plaintext.lemmy.worldmessage-square197fedilinkarrow-up1470file-text
arrow-up1318imageLarion Studios forum stores your passwords in unhashed plaintext.lemmy.world@[email protected] to [email protected]English • 1 year agomessage-square197fedilinkfile-text
Larion Studios forum stores your passwords in unhashed plaintext. Don’t use a password there that you’ve used anywhere else.
minus-square@[email protected]linkfedilinkEnglish3•1 year agoOf course. You receive the password in plain on account creation, do the process you need, and then store it hashed. That’s fine and normal
minus-square@[email protected]linkfedilinkEnglish5•1 year agoWhen you create an account you type your password in. This gets sent to the server, and then it is hashed and stored So there is a period of time where they have your unhashed password This is true of every website you have ever made a password on
minus-square@[email protected]linkfedilinkEnglish-1•1 year agoI’ve never even heard of the game studio I’m not defending them, I was replying to the person who said the company should never have your unhashed password, and explaining that they have to at some point in the process
minus-square@[email protected]linkfedilinkEnglish-7•1 year agoSo why would an agent at Larian have man-in-the-middle access between the password being sent to the server, and the auto-hash?
Of course. You receive the password in plain on account creation, do the process you need, and then store it hashed.
That’s fine and normal
deleted by creator
When you create an account you type your password in. This gets sent to the server, and then it is hashed and stored
So there is a period of time where they have your unhashed password
This is true of every website you have ever made a password on
deleted by creator
I’ve never even heard of the game studio I’m not defending them, I was replying to the person who said the company should never have your unhashed password, and explaining that they have to at some point in the process
So why would an agent at Larian have man-in-the-middle access between the password being sent to the server, and the auto-hash?