Hey there,

I stumbled across something interesting; is it known that the Runescape applet stores the last password-attempt, without any encryption, in plain String format? Seems odd to me - but it's there.

Not that it opens up any major security issues, but it's the sort of thing that one expects to not be present in a pretty well-developed game. Any ideas?

... did you know microsoft office stores last serial attempt, without any encryption, in plain text format?

Indeed. Perhaps I should have known to expect such irrational posting from the people here, Runescape's (cheating) community is full of it.

Enjoy.

i don't think you understand... the password would HAVE to be stored somewhere in plaintext within the java heap.

I don't see how this could be exploited at all. Haha. However, I agree that it is somewhat strange that Jagex would do this.