Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

1) Foursquare was one of the most popular targets for DEFCON'S Wall of Sheep this year, next to Twitter. I believe the mayor of the con was also made the mayor of Sheeptown.

2) Their desktop site doesn't use SSL either, as my Unencrypted Password Warning Chrome extension (https://chrome.google.com/extensions/detail/mjpinemnkjlppmem...) will warn you, so it should come as no surprise that mobile doesn't.



Interesting extension, but Chrome gives an ominous "This extension needs access to your data on all sites." I assume this is necessary to be able to read the targets of forms.


Yeah, I got the warning on quite some sites incl. get satisfaction and even twitter at one point. Does it give false positives?


See the FAQ. It is unable to tell if a form submitted by JavaScript is in fact submitted securely, so it warns.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: