Larion Studios forum stores your passwords in unhashed plaintext. Don’t use a password there that you’ve used anywhere else.

  • tb_@lemmy.worldEnglish
    23·
    3 年前

    But that still means they had your plaintext password at some point.

    Edit: which, as some replies suggest, may not actually be much of an issue.
    I’m still skeptical about them returning it, however.

    • voxel@sopuli.xyzEnglish
      16·
      3 年前

      hashing on client side is considered a bad idea and almost never done.
      you actually send your password “in plain text” every time you sign up.

    • Kilamaos@lemmy.worldEnglish
      12·
      3 年前

      Of course. You receive the password in plain on account creation, do the process you need, and then store it hashed.

      That’s fine and normal

        • Vegasimov@reddthat.comEnglish
          13·
          3 年前

          When you create an account you type your password in. This gets sent to the server, and then it is hashed and stored

          So there is a period of time where they have your unhashed password

          This is true of every website you have ever made a password on

            • Vegasimov@reddthat.comEnglish
              1·
              3 年前

              I’ve never even heard of the game studio I’m not defending them, I was replying to the person who said the company should never have your unhashed password, and explaining that they have to at some point in the process

          • dangblingus@lemmy.worldEnglish
            2·
            3 年前

            So why would an agent at Larian have man-in-the-middle access between the password being sent to the server, and the auto-hash?