jacob1:
@123me (View Post)
This thread is incredibly old and no longer applies.
Once upon a time, there was a file called powder.def. It contained your password in plaintext, which was sent to the server in every request. Then someone realized this was a terrible idea after people constantly distributed their plaintext passwords. So now we have powder.pref, which basically has a session cookie instead of your password.
powder.pref is still bad and should never be distributed if you are logged in. Since it does give full login access. The only thing it doesn't give is your password.
So if you log out then log back in again, anyone using that would no longer have access as the session would be invalidated? Sounds like a similar issue that happened with Minecraft session IDs and people accidentally distributing theirs.
@PowerShroomsAttack (View Post)
well isn't?