Larion Studios forum stores your passwords in unhashed plaintext. Don’t use a password there that you’ve used anywhere else.

  • @towerful
    link
    English
    4
    edit-2
    9 months ago

    They can still send it while the value is in memory.
    But it’s unlikely that emails are sent synchronously. At which point, it has to be added to a job queue somewhere which might not be in memory.
    There is also the communication with that job queue, and logging along the way, and any email logging.
    Email isn’t secure, either.

    So, it bad practice regardless.

    Thankfully larian did address this, and fixed the issue as pointed out by another commenter.
    Addressed here, with the follow up of fixing it:
    https://forums.larian.com/ubbthreads.php?ubb=showflat&Number=669268#Post669268

    And that was back in 2020. 3 years ago.