Larion Studios forum stores your passwords in unhashed plaintext. Don’t use a password there that you’ve used anywhere else.

    • Vegasimov@reddthat.comEnglish
      138·
      9 months ago

      When you create an account you type your password in. This gets sent to the server, and then it is hashed and stored

      So there is a period of time where they have your unhashed password

      This is true of every website you have ever made a password on

        • Vegasimov@reddthat.comEnglish
          12·
          9 months ago

          I’ve never even heard of the game studio I’m not defending them, I was replying to the person who said the company should never have your unhashed password, and explaining that they have to at some point in the process

      • dangblingus@lemmy.worldEnglish
        29·
        9 months ago

        So why would an agent at Larian have man-in-the-middle access between the password being sent to the server, and the auto-hash?