I strongly agree with you on the password problem. This should be fixed asap.


Im not sure if the unlocks are stored client side. When the file is rewritten on connect its probably not the case.

You would be surprised how often this happens. I know, you shouldn't treat ANYTHING as secure, but plenty of times devs will consider a system file secure enough as someone would need access to your computer in the first place to harvest it. But yeah, I kinda figured this might happen which is why I generally don't have my username/pass saved automatically

Not only does this bother me...but am I the only one bothered about having to use my Impulse login to play the game MP?  If someone gets a hold of my impulse login, they have all my games.  I have no idea how the stuff is being sent to the servers.  Is my information even being encrypted during transmission?  Or can anyone just sniff the packets and get my impulse password at their leisure?

And on top of that I am making P2P connections with other people I do not know or trust after I open up all my ports, it just seems like I am inviting all sorts of unwanted trouble with the way MP is implemented with DG.  If this is the future of this new "impulse reactor" or whatever it is called, I really hope they make it more secure in the near future.

Well, at least now I know why all my favor items are gone whenever I go back to my SP game after playing MP.  What a bug.

Game shouldn't store password on your computer at all.  It should be a server side flag imo, or just store username.

I haven't played alot of MP with Steam games--but don't you login through STEAM itself, and then start your game which then uses the steam authentication to play your game?  In otherwords, with DG, I login to Impulse (to check for updates), then I launch the game, then I login AGAIN through the GAME with my impulse info.  With steam, I just login to steam, then launch the game--I only have to trust that the steam programmers have kept my stuff protected.  With DG--I have to trust that both impulse and DG are properly protecting my info.  And this thread shows that there is at least one security problem with DG.

Sorry mate, you are wrong. When I log into Steam, and THEN go and play one of the many mp games I have in there, I have a mp login in most games that is completely different from my account name. Some valve games don't require me to login to play mp, so there's nothing I can do about that.

GFWL is not something to compare to, it's possibly the worst gaming service on the planet.

At the least, being able to alias when playing just makes it a little harder for people to try and hack your account.

WHy is it bad? Its perfect.

those who try to cheat shoudl be punish. Sounds like a perfect stimulus not to cheat.

Well, I meant cheat in singleplayer. I still agree though. I just figure there are a lot of kids who probably will buy this game (maybe, lol) and end up wanting to try something and it steals their account instead...

Or maybe someone makes a mod that you want to try but all it really does is steal your account, for example. Other people can think of better examples where you download somethign thinking it's legit. :/

Steam games require that steam is running because they all use Steam to do 'stuff'. Impulse is completely independant of it's games. You don't need to be running Impulse to run Demigod or play multiplayer. Hense, Demigod needs to login internally that way.

But yes, plaintext passwords are bad.