So, the infamous "log in with Facebook" button re-appeared on my end again (as long as it was a FB-hosted element, it was blocked by default).

This reminded me of something I noticed during the whole "profiles" debacle - GOG scripts contain a rather lengthy hash used to identify a specific login session.

This is eerily similar to hashes of hardware/software fingerprinting used by other companies that I ran into along the way.

So... dear GOG staff. What exactly is the purpose of of this snippet, and the alpha-numeric hash indicated specifically?

[code]
<script type="text/javascript" src="//static-login.gog.com/js/2c420b1-5da8cca.js"></script>
<script type="text/javascript" src="//static-login.gog.com/js/7d3cec2-83fb4f9.js"></script>
<input id="login__token" name="login[_token]" value="really long alpha-numeric sequence hash" type=hidden">
[/code]

Because going by the content of the javascript code above, it really looks like it's fed to Facebook on login, and you were so clear on how you don't give our information to Facebook. I am confused.

Is it a hash or a random value used as a key?

Either way, Facebook is watching you regardless, unless you disable the facebook scripts with something like NoScript.

There's also a reason i disable Google's scripts as well, as they do the same thing. Plus the free/public APIs could be swapped out unless you are using a local copy that you can ensure doesn't change and you've looked over that's safe, and that's a few hundred thousand lines of code....

Upon seeing StarCrawlers as the Daily Deal today, I realized I'd rather pay full price elsewhere than to support GoG any longer. This just cements my decision as bring the right thing to do.

It's clear their original code of "gamers' rights" is completely gone now. It's a pretty dark day for me. I loved this place, but I wish them luck.