Larion Studios forum stores your passwords in unhashed plaintext. - Lemmy.world
lemmy.world
Larion Studios forum stores your passwords in unhashed plaintext. Don’t use a password there that you’ve used anywhere else.

This thread is frustrating. Everyone seems more interested in nitpicking the specifics of what OP is saying and are ignoring that a forum sends you your password (not an automatically generated one) in an email on registration.

  • krellor
    1•9 months ago

    I agree. Unfortunately many folks who are attracted to security issues and topics don’t have a great holistic view of things. The idea of security is that something can go wrong and you are still ok, and that you apply context appropriate measures. Of course sending a password through email isn’t good, but it’s a gaming forum. A security conscious individual should have randomly generated passwords for everything and no reuse. Likewise, it wasn’t a bank or a security company, it was an old forum software for public discussions, so contextually this isn’t a top concern.

    The cherry on top is that it appears to have been an old screenshot and already addressed.

    • Kbin_space_program
      3•9 months ago

      Its weird how there seems to be a group dedicated to creating and subsequently reporting on imagined faults within Larian. There have been a few articles and now that guy who used an out of date screenshot to make an unfounded claim.

      They aren’t perfect, and there are a fair number of things issues in BG3.

      Like that it has a number of the same issues as their previous game, Divinity Original Sin 2. Suggesting that they didn’t see those issues as issues, or didn’t see a need to change their process to correct them.

      • JackbyDevOPEnglish
        2•9 months ago

        imagined faults

        Sending passwords in plaintext in emails is not an imaginary problem.

          • JackbyDevOPEnglish
            2•9 months ago

            Everyone seems more interested in nitpicking the specifics of what OP is saying and are ignoring that a forum sends you your password (not an automatically generated one) in an email on registration.

            • Kbin_space_program
              2•9 months ago

              I see it as a non issue because Larian has a previous post up, in a timeframe window of acceptable lack of visible action, about them finding a solution to that problem.

              If nothing has been announced in a month or so, then it starts becoming a problem again.