New comment by TeusLollo on void-packages repository

https://github.com/void-linux/void-packages/issues/45045#issuecomment-1640203184

Comment:
Actually, `vlc 3.0.18` introduced further bugs: https://forum.videolan.org/viewtopic.php?f=13&p=537318, but I digress.

Still, it appears that VLsub does in fact store credentials in plain-text at `vlc\lua\extensions\userdata\vlsub\vlsub_conf.xml`

It's even been brought up as a security concern:
https://code.videolan.org/videolan/vlc/-/issues/27701
https://code.videolan.org/videolan/vlc/-/issues/27702

And, in fact, recently: https://forum.videolan.org/viewtopic.php?p=534299#p534299

_Buried deepin the reply above is the clue. Opensubtitles.org now, as of just recently, requires an account to use the VLsub code._

_1 - go to opensubtitles.org and create an account. You have to cough up a working email address.
2- find the confirmation email in that account and click the link.
3- open VLC and the VLsub under View. You'll see a "configuration" button. Put your shiny new opensubtitles account in there and vlsub will work again.
4- accept that another nefarious link to you has been forged..._

The post above is dated January 2023.

So, there is indeed an "user agent", with full-on login credentials to booth, which seems to have been introduced in the current year. 

So, @gorecki3 , could you check a working VLsub install at `vlc\lua\extensions\userdata\vlsub\vlsub_conf.xml`, and then compare it with a non-working VLsub install always at `vlc\lua\extensions\userdata\vlsub\vlsub_conf.xml`?

It would be interesting to know what differences `vlsub_conf.xml` exhibits between a working and non-working version. 

You did in fact mention not to have an account to opensubtitles.com, so I wonder if the working install with `vlc 3.0.16` ships with pre-config at `vlc\lua\extensions\userdata\vlsub\vlsub_conf.xml`. 

Since they mention that _"Opensubtitles.org now, as of just recently, requires an account to use the VLsub code."_, maybe they also check `vlc` version, and do not in fact require login credentials if they see that `vlc` version if < 3.0.18? 

It would make sense, since debian-based distros take quite a while to update, and if they require login credentials only with 3.0.18+, they avoid breaking functionality for most debian users before their repositories update.