Larion Studios forum stores your passwords in unhashed plaintext. - Lemmy.world
lemmy.world
Larion Studios forum stores your passwords in unhashed plaintext. Don’t use a password there that you’ve used anywhere else.

This thread is frustrating. Everyone seems more interested in nitpicking the specifics of what OP is saying and are ignoring that a forum sends you your password (not an automatically generated one) in an email on registration.

  • NaN@lemmy.sdf.orgEnglish
    8·
    9 months ago

    An issue if you’re reusing passwords. If not, every forgot my password email is also vulnerable.

    A combination of bad practices could be… bad.

    Edit: apparently around the same time, their forum was also lacking https. This would be an even easier vector.