Comment on Larion Studios forum stores your passwords in unhashed plaintext.

• kadu@lemmy.world ⁨9⁩ ⁨months⁩ ago

  [deleted]

  source

  • Vegasimov@reddthat.com ⁨9⁩ ⁨months⁩ ago

    When you create an account you type your password in. This gets sent to the server, and then it is hashed and stored

    So there is a period of time where they have your unhashed password

    This is true of every website you have ever made a password on

    source

    • kadu@lemmy.world ⁨9⁩ ⁨months⁩ ago

      [deleted]

      source

      • Vegasimov@reddthat.com ⁨9⁩ ⁨months⁩ ago

        I’ve never even heard of the game studio I’m not defending them, I was replying to the person who said the company should never have your unhashed password, and explaining that they have to at some point in the process

        source
    • dangblingus@lemmy.world ⁨9⁩ ⁨months⁩ ago

      So why would an agent at Larian have man-in-the-middle access between the password being sent to the server, and the auto-hash?

      source