Comment on Larion Studios forum stores your passwords in unhashed plaintext.

• Cabrio@lemmy.world ⁨8⁩ ⁨months⁩ ago

  They can’t send it if they haven’t stored it, that’s the proof. Whether temporary or not it’s a weakness and attack vector for obtaining unhashed passwords. And if they stored it, it should be immediately hashed.

  source

  • rikudou@lemmings.world ⁨8⁩ ⁨months⁩ ago

    That… is not how it works. It is usually hashed and at the same time an email is sent. Meaning it’s not stored plaintext in any storage.

    source

    • redcalcium@lemmy.institute ⁨8⁩ ⁨months⁩ ago

      Plenty of website did this… more than a decade ago, and even then plenty of security conscious people writing blogs and posting on social media begging devs to stop doing this.

      source
    • Cabrio@lemmy.world ⁨8⁩ ⁨months⁩ ago

      You’ll forgive me for not trusting anyone who can tell me my password that isn’t me.

      source

      • Miclux@lemmings.world ⁨8⁩ ⁨months⁩ ago

        That’s a totally different statement than that in your post.

        source

        • -> View More Comments
  • Miclux@lemmings.world ⁨8⁩ ⁨months⁩ ago

    It’s so sad that you spread misinformation based on your inadequate knowledge.

    source

    • Cabrio@lemmy.world ⁨8⁩ ⁨months⁩ ago

      Lmao

      source
  • vox@sopuli.xyz ⁨8⁩ ⁨months⁩ ago

    they can send it without storing. In fact a lot of websites (mostly small forums) send your password to your email before storing it.

    source