[Y_Less]

Quote:

Originally Posted by Bakr What do you consider personal data? In my opinion, a password for an online game account does not qualify.

Name, e-mail, DOB, location, some servers want loads of info and its all covered by data protection.

Quote:

Originally Posted by Bakr Sure, I agree with that, but then you are not relying on them to store your passwords securely in the first place. Also, I'm yet to see a server that goes into detail regarding their policies and processes prior to registration (as I believe most users would simply leave before reading the walls of text). If you could find one for me that contradicts that statement, I would love to see it!

I didn't say they did, I said they should.

Quote:

Originally Posted by Bakr It doesn't, and I don't know where you thought I was directing towards that statement. My argumentative point is to the extent that no blame is getting put on the person using the same password for an online game modification's account and their personal credit card. You sign no agreement at registration (most (if any?) servers don't require ANY type of license agreement to register). You said continuing knowing that would be something wrong done on the user end, so why should insecure password processes on their end be any different?

You were getting at that by saying users are stupid, so why should we be any better. There are no data protection laws for users - its their data and they can do what they want with it, only services have to be careful.