Quote from TLCBonaparte;634963:
good thing my brower saved my password and account name so I only have to press login to start playing :D
Your browser remembering your password will only protect you from keyloggers; your username/password are still being sent. If someone were able to intercept communications between you and Nexon, they could still get to this information, though it should be encrypted.
Quote from abc33kr;631397:
I read that when you try to log in with the wrong password, nexon gives the hacker your encrypted real password. and all the hacker needs is a simple program to retrieve your password.
This doesn't make any sense to me. There's no reason for Nexon to give
anyone your password, encrypted or not.
In general, your encrypted password is stored on the server (as your actual password doesn't even need to be stored
anywhere). When you log in, what you typed for your password runs through the same encryption process
on the server and is compared to the stored encrypted password
on the server. Everything should be happening on the server, and all it should return to you is a yes or no.
When customer databases have been hacked in the past, it was these encrypted passwords that were stolen. It would be beyond dumb for Nexon to send the encrypted password to someone failing a login attempt.
Also, most encryption algorithms for passwords are cryptographic hash functions, and thus not reversible, meaning that some information is lost in the encryption process and you cannot (feasibly) determine from the encrypted password what the original password was, even knowing the encryption process.