Ebay posts every character a user types into the password box

Re:Ebay posts every character a user types into the password... by lmm on Wednesday June 29, 2016 @09:30AM (#12001497)

If they're MITMing they could replace whatever JS you put with something else, by definition.

[ Parent | on HN ]

Re:Ebay posts every character a user types into the password... by ncallaway on Wednesday June 29, 2016 @09:50AM (#12001591)

While this is true, a parent comment from the user you're responding to has already explicitly mentioned this as a potential issue:

"It won't stop a nation state modifying requests in transit and injecting their own js but it will probably stop a nosy sysadmin."

[ Parent | on HN ]