Can you verify the software running on an instance is the same as the one in the source code repository? You can’t. Can you verify the instance isn’t running code to read passwords from your login requests even if the code is the original open source code? You can’t.
That’s why (and for other reasons) you should never use a password for more than one site/service/instance.
Lemmy admins (admins in the Lemmy application) probably can’t read your password. But everyone with admin rights on the server operating system can.
That is why I said unlikely. Yes it can happen. All it takes is one admin to look and go ‘Why are we storing passwords in clear text?’ and that instance is burnt.
Can you verify the software running on an instance is the same as the one in the source code repository? You can’t. Can you verify the instance isn’t running code to read passwords from your login requests even if the code is the original open source code? You can’t.
That’s why (and for other reasons) you should never use a password for more than one site/service/instance.
Lemmy admins (admins in the Lemmy application) probably can’t read your password. But everyone with admin rights on the server operating system can.
That is why I said unlikely. Yes it can happen. All it takes is one admin to look and go ‘Why are we storing passwords in clear text?’ and that instance is burnt.