▲ 319 ▼ Larion Studios forum stores your passwords in unhashed plaintext. (lemmy.world) submitted 2 years ago by Cabrio@lemmy.world to c/games@lemmy.world 213 comments fedilink hide all child comments Larion Studios forum stores your passwords in unhashed plaintext. Don't use a password there that you've used anywhere else.
[–] frezik@midwest.social 10 points 2 years ago (3 children) Have you found a mitm attack on TLS? permalink fedilink source parent hideshow 6 child comments replies: [–] canni@lemmy.one 8 points 2 years ago This guy's a fucking clown, I'm sure he's like 15 permalink fedilink source parent [–] reverendsteveii@lemm.ee 2 points 2 years ago (1 child) Not without compromised certificates they haven't. You can tell because if they did they'd be world famous for having destroyed any and all internet security. Then again, they'd probably already be famous for having figured out a way to salt, hash and store passwords without ever holding them in memory first like they claim to do above, so maybe someone is lying on the internet about their vague "proprietary network protocols". permalink fedilink source parent hideshow 2 child comments replies: [–] frezik@midwest.social 2 points 2 years ago Oh yeah, this guy is a hoot. permalink fedilink source parent [+] Cabrio@lemmy.world [S] -7 points 2 years ago I haven't looked into it but I was wondering about the logistics of setting up a federated honeypot for server side stream sniffing to build a plaintext email/password database. permalink fedilink source parent
[–] canni@lemmy.one 8 points 2 years ago This guy's a fucking clown, I'm sure he's like 15 permalink fedilink source parent
[–] reverendsteveii@lemm.ee 2 points 2 years ago (1 child) Not without compromised certificates they haven't. You can tell because if they did they'd be world famous for having destroyed any and all internet security. Then again, they'd probably already be famous for having figured out a way to salt, hash and store passwords without ever holding them in memory first like they claim to do above, so maybe someone is lying on the internet about their vague "proprietary network protocols". permalink fedilink source parent hideshow 2 child comments replies: [–] frezik@midwest.social 2 points 2 years ago Oh yeah, this guy is a hoot. permalink fedilink source parent
[–] frezik@midwest.social 2 points 2 years ago Oh yeah, this guy is a hoot. permalink fedilink source parent
[+] Cabrio@lemmy.world [S] -7 points 2 years ago I haven't looked into it but I was wondering about the logistics of setting up a federated honeypot for server side stream sniffing to build a plaintext email/password database. permalink fedilink source parent