OP would do well to responsibly report it, rather than stirring up drama over a web forum account.
¿Porque no los dos?
Took them 23 years to fix it last time, seems public awareness would be important in the interim, no?
Comment on Larion Studios forum stores your passwords in unhashed plaintext.
ono@lemmy.ca 1 year agoYour guess is confirmed here.
There are plans to update the forum, including for better security (the main issue with changing the forum software is concern over reliably migrating all of the existing content). After emailing (admittedly not current best practice), the passwords are hashed and only the hash is stored.
Also, no, the password would not necessarily still be stored in plain text on their end. The cleartext password used in that email might be only in memory, and discarded after sending the message. Depends on how the UBB forum software implemented it.
Cabrio@lemmy.world 1 year ago
Asudox@lemmy.world 1 year ago
It is still a bad idea to send the password in plaintext via email.
Empricorn@feddit.nl 1 year ago
There’s a lot of reasons why emailing passwords is not the best practice… But AI bots stealing your password to give people free demos is a wild paranoid fever dream.
Asudox@lemmy.world 1 year ago
It is meant to be as a joke, of course the AI is not that dumb enough to give it away as free demo. Why am I being downvoted? Why don’t people understand jokes these days? Do I always have to include /s when making a sarcastic joke?
elephantium@lemmy.world 1 year ago
I’ve seen people argue stupider things earnestly.
ono@lemmy.ca 1 year ago
Nobody suggested otherwise.
nogooduser@lemmy.world 1 year ago
You should always change your password from the system generated one to prevent that from happening. The app that you signed up for should enforce that by making you change your password when you log in.
Cabrio@lemmy.world 1 year ago
It’s not a system generated one they sent, it was user generated.