Welcome!

Why is it so obvious this was written by chatgpt

You're still an idiot aren't you? That's too bad. Yes, anything can. Depends by who. If the admins can decrypt, that's bad. If I can decrypt only my data, that's good. I tried to dumb it down for you. If this doesn't help then pls go back to middle school

You haven't learned to read since I last told you to, have you? Here's some help, read this slowly: "The alias is not encrypted. But that's less important." "[the account username + password is] STILL able to be deciphered by an intruder gaining access to the database, or by any of the admins."

lol you're an idiot It's 100% true

You don't have to stay in this thread, go play runescape I'm letting everyone know an intruder can steal all your passwords. This wasn't known

I don't think either of you know how to read 'yo fo rel'

But then I can't run bots overnight. They may get stuck if I lose internet connection. RuneMate should instead store this data locally, or use a private key to encrypt. One supplied by the user, and not stored anywhere. A "mater password".

Ok I heeded my own advice and verified that they are encrypted somehow. Both the login name + password are encrypted in one string and sent to the server. The alias is not encrypted. But that's less important. Example of one account encrypted. I hope there is a private key associated to this...

You mean installing a self signed local cert to view TLS encrypted requests is impossible? lol Also really proving you're the one who has no clue about security.

"Hint: wireshark and watch the requests that go to runemate when you're adding a new bot account"

"That's great and all, but they're not doing that. They're storing the password in their database, no private key to decrypt." Hint: wireshark and watch the requests that go to runemate when you're adding a new bot account

And what? Let's say an admin goes rogue. Instant free 10,000 accounts for him There's SO many options to avoid storing plain text passwords and the admins of this site FOR SOME REASON haven't done them. You can store a local generated encryption key per computer on the fly when they first...

So pretend the admins aren't saving our passwords? And don't have access to all our accounts? And can't just run a script to find the highest skilled account they have stored via rs hiscores to steal? LOL ignorance is bliss huh? inb4 admin closes / deletes thread due to being exposed

It's simple, I setup a new VM and logged in with my runemate user + pw. Then all of a sudden runemate can now login to RS for me using my bot account? Our passwords are stored in runemate servers. Even if it's encrypted, the admin can easily decrypt them since the bot can too.

lol "Joined 2016" Your point? It's not encrypted, because the scripts can access it to login

So confirmed, runemate has all of our passwords we use for botting. In plain text. Why?

Google Cloud Platform Here's the link where you create an instance

You can't 99 with remouse because of random events. You telling me you babysit your account 24/7?