Larion Studios forum stores your passwords in unhashed plaintext. Don’t use a password there that you’ve used anywhere else.

  • AlmightySnoo 🐢🇮🇱🇺🇦
    link
    fedilink
    English
    119 months ago

    it should be pretty straightforward to figure out whether they do or not

    Not really since it’s closed-source: https://www.ubbcentral.com/

    But they seem to have been in business since 1997, so I highly doubt that they’d fuck up the “never store passwords in plain text” rule.

    • @jonne@infosec.pub
      link
      fedilink
      English
      119 months ago

      Yeah, I was looking it up, and when I saw they’ve been selling this forum software since 1997 I was less confident about passwords being hashed. They address it in their forums and they’re making it clear that the passwords are actually hashed, and they’re looking at migrating to other solutions regardless.

      • @mosiacmango@lemm.ee
        link
        fedilink
        English
        99 months ago

        That thread is from 2020, where they said they fixed the password send issue.

        Op, how old is ths image above?

        • @Cabrio@lemmy.worldOP
          link
          fedilink
          English
          1
          edit-2
          9 months ago

          Image was taken immediately before posting. The issue, apparently, has since shown up again.