Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on 1Password sends your password in clear text across the loopback interface. Parent comment
Other non root apps can masquerade as the app intended to get the data, and if it's sent in plaintext, they get information they wouldn't if it used a shared key accessible to the intended app.
There are no comments on this comment yet.
Other non root apps can masquerade as the app intended to get the data, and if it's sent in plaintext, they get information they wouldn't if it used a shared key accessible to the intended app.