Thanks to GOG i still have have a GOG.txt file on my desktop because it still not save in a secure way.
thanks GOG if one day someday my account get hacked. and all they have to do is open the password file.

Do you really really need Galaxy?

Because if not the answer to your security concerns is simple: uninstall it and run your games directly.

This does not fix any issues. For one, many MANY people use Galaxy. Most don't use these fora, meaning they won't be aware of security issues. This means it is an issue, and as long as Galaxy is produced and distributed, it needs to be fixed.

I did say HIS security concern. As in him personally. (or her, or "they"... whatever they wish).

I'm not claiming GOG shouldn't patch their stuff. They really should - security problems should be first priority when releasing client updates.

I dont see a GOG.txt on my desktop at all.
but this is indeed a security problem. how do we report issue for GOG Galaxy again?

https://www.gog.com/forum/general_beta_gog_galaxy_2.0#1686656840

here post this issue here Abishia, hopefully gog notices, I personally have not had this happen but you should post what information you can here.

The same way you report any other problem: open a support ticket. Tell the chatbot the issue is of type "other" twice to skip to that step.

They removed the bug tracker at the end of February.

well
then abishia should report this potential breach via what you recommended.

Also, what do you mean with "within the distribution?" and last but not least: what do you mean with "YOU need to save the password on a text file" ... sounds more as if you created such a file yourself ... honestly - right now my guess is miscommunication due to language barrier.

(Edited because of a misunderstanding)

It appears this is what Abishia is trying to tell.

Kind of funny way to memorize your account credentials. And honestly It's also quite dangerous to save it like this.

NOW I understand. So he is copmplaining that he is unable to memorize his password becaue GOG is not doing that for him. Well you can still stay logged in if you so desire - so no need to remember your password ... and especially not in such a dangerous way. If you really can't memorize your passowrd write it down and keep it at home (provided that you trust those at home) but not on your system where it can get phished.

what do you expect with a 24 digit random password
a fine example how something like this looks like.
basically all my passwords i use are random strings of code. 99.9% have a remember function

J#:V/}n]HMD<;3!>eWHTas%x

good luck memorize that....
no you need to manual login each time you reboot your system
and no it's not my problem GoG is responsible for this.

No, you don't. I reboot my system every day (sometimes more than once) and I still stay logged in.

And you seriously can't blame GOG for you not being able to remember passwords you created yourself.

Like I said, you could write it down.

Remembering your password or chosing one that you can remember or writing it down is your responsibility. Saving password is a convenience and nothing more.

Wrong. The last time I logged into my GOG account or into Galaxy was months ago. That either makes your statement wrong or myself a magician ;)

lol and here I thought it was an actual security issue on GOG's end lol