Comment on Larion Studios forum stores your passwords in unhashed plaintext.

• Miclux@lemmings.world ⁨9⁩ ⁨months⁩ ago

  Show me where the proof is that they STORE it plain text. This is just a screen of a mail after creating an account.

  source

  • Cabrio@lemmy.world ⁨9⁩ ⁨months⁩ ago

    They can’t send it if they haven’t stored it, that’s the proof. Whether temporary or not it’s a weakness and attack vector for obtaining unhashed passwords. And if they stored it, it should be immediately hashed.

    source

    • rikudou@lemmings.world ⁨9⁩ ⁨months⁩ ago

      That… is not how it works. It is usually hashed and at the same time an email is sent. Meaning it’s not stored plaintext in any storage.

      source

      • redcalcium@lemmy.institute ⁨9⁩ ⁨months⁩ ago

        Plenty of website did this… more than a decade ago, and even then plenty of security conscious people writing blogs and posting on social media begging devs to stop doing this.

        source
      • Cabrio@lemmy.world ⁨9⁩ ⁨months⁩ ago

        You’ll forgive me for not trusting anyone who can tell me my password that isn’t me.

        source

        • -> View More Comments
    • Miclux@lemmings.world ⁨9⁩ ⁨months⁩ ago

      It’s so sad that you spread misinformation based on your inadequate knowledge.

      source

      • Cabrio@lemmy.world ⁨9⁩ ⁨months⁩ ago

        Lmao

        source
    • vox@sopuli.xyz ⁨9⁩ ⁨months⁩ ago

      they can send it without storing. In fact a lot of websites (mostly small forums) send your password to your email before storing it.

      source