It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussionGOG Galaxy still not fixed a major security breach.(36 posts)(36 posts)
(36 posts)
Pages:
1
2
3
This is my favourite topic
Posted June 13, 2023
avatar
Abishia: what do you expect with a 24 digit random password
a fine example how something like this looks like.
basically all my passwords i use are random strings of code. 99.9% have a remember function
J#:V/}n]HMD<;3!>eWHTas%x
good luck memorize that....
avatar
MarkoH01: Like I said, you could write it down.

avatar
Abishia: and no it's not my problem GoG is responsible for this.
avatar
MarkoH01: Remembering your password or chosing one that you can remember or writing it down is your responsibility. Saving password is a convenience and nothing more.

avatar
Abishia: no you need to manual login each time you reboot your system
avatar
MarkoH01: Wrong. The last time I logged into my GOG account or into Galaxy was months ago. That either makes your statement wrong or myself a magician ;)
convenience!. that's why all digital security advisors, advise to use a password manager.
so you can store each password it's own unique random code string.

and yea GOG is responsible for not saving password, and no it's being saved on service they add with the software.
it's unnecessary garbage that have no purpose to exist.
Posted June 13, 2023
GOG does save your password. I literally never have to enter my password for Galaxy, and that includes between restarts. You either don't have Galaxy set to keep you logged in, or something on your PC is messing with Galaxy.
Posted June 13, 2023
avatar
Lord_Kane: lol and here I thought it was an actual security issue on GOG's end lol
There's at least one local privilege elevation vulnerability (limited user ends up running applications as system). I haven't seen anything about it in the change log ever since people started complaining years back.
https://www.gog.com/forum/general/gog_galaxy_security_issue_cve202024574/page1
https://www.cvedetails.com/vulnerability-list/vendor_id-19693/product_id-52428/GOG-Galaxy.html
Posted June 13, 2023
avatar
Lord_Kane: lol and here I thought it was an actual security issue on GOG's end lol
avatar
Ice_Mage: There's at least one local privilege elevation vulnerability (limited user ends up running applications as system). I haven't seen anything about it in the change log ever since people started complaining years back.
https://www.gog.com/forum/general/gog_galaxy_security_issue_cve202024574/page1
https://www.cvedetails.com/vulnerability-list/vendor_id-19693/product_id-52428/GOG-Galaxy.html
well its more in reference to this clearly PBKAC issue then your links, but lets hope the issue you mentioned gets fixed sometime soon too.
Posted June 13, 2023
avatar
mistycoven: GOG does save your password. I literally never have to enter my password for Galaxy, and that includes between restarts. You either don't have Galaxy set to keep you logged in, or something on your PC is messing with Galaxy.
and where is that magical button of remembrance

https://steamcommunity.com/sharedfiles/filedetails/?id=2988901729
Posted June 13, 2023
avatar
Braggadar: Do you really really need Galaxy?

Because if not the answer to your security concerns is simple: uninstall it and run your games directly.
Patches come to Galaxy first, and cloud saves are convenient.
Posted June 13, 2023
avatar
mistycoven: GOG does save your password. I literally never have to enter my password for Galaxy, and that includes between restarts. You either don't have Galaxy set to keep you logged in, or something on your PC is messing with Galaxy.
avatar
Abishia: and where is that magical button of remembrance

https://steamcommunity.com/sharedfiles/filedetails/?id=2988901729
It's in the settings. Here's a video, if you can't find it.

https://www.youtube.com/watch?v=1L5MJ7Glwlk
Posted June 13, 2023
avatar
Abishia: and where is that magical button of remembrance

https://steamcommunity.com/sharedfiles/filedetails/?id=2988901729
avatar
PaterAlf: It's in the settings. Here's a video, if you can't find it.

https://www.youtube.com/watch?v=1L5MJ7Glwlk
Geeze that's really ****up it should be on the login screen to toggle it on.
not in some general settings. that nobody ever look into.
Posted June 13, 2023
avatar
PaterAlf: It's in the settings. Here's a video, if you can't find it.

https://www.youtube.com/watch?v=1L5MJ7Glwlk
avatar
Abishia: Geeze that's really ****up it should be on the login screen to toggle it on.
not in some general settings. that nobody ever look into.
Yet almost nobody except you had a problem finding it ... make of that what you want. Not everything is the fault of the developer ...
Posted June 14, 2023
I am confused by what this topic is about.
Posted June 14, 2023
avatar
kalirion: I am confused by what this topic is about.
It's not worth worrying about, but if you really care:

1. OP uses complex passwords
2. OP cannot remember said passwords
3. OP didn't realise that Galaxy has the functionality to remember your password (even though it is the user's responsibility to remember the user's own passwrod)
4. OP saved his password in an unprotected text file on his desktop
5. OP decided that him saving his own password in an unprotected file on his desktop (somehow) equated to a major security issue in GoG (Galaxy).

I think that's what happened - there's a bit of a language barrier here.
Posted June 14, 2023
avatar
kalirion: I am confused by what this topic is about.
The security guard left the vault open and now all the GOGbears have escaped into the wild during their mating season.
Posted June 14, 2023
Come on, give OP a break, they've been busy with hard science and engineering:

https://steamcommunity.com/sharedfiles/filedetails/?id=2820989148

https://steamcommunity.com/sharedfiles/filedetails/?id=2651875945
Posted June 14, 2023
Today I learn that a major security breach is when you can't find the auto-login option.
Posted June 14, 2023
There are a lot of password manager or if you don't trust them you can also write all your password in a paper and type them manually each time you have to log in
Pages:
1
2
3
This is my favourite topic
Community
General discussionGOG Galaxy still not fixed a major security breach.(36 posts)(36 posts)
(36 posts)