News for hackers. Stuff that matters.
Re:Logojoy: AI-powered logo creator by OrangeTux on Tuesday November 29, 2016 @02:17PM (#13065476)
Their is a login form on the website on a page without HTTPS. You should change that.
Re:Logojoy: AI-powered logo creator by binarnosp on Tuesday November 29, 2016 @04:12PM (#13066318)
Also, no HTTPS when you are supposed to enter the credit card details. This stopped me from buying the logo.
Re:Logojoy: AI-powered logo creator by devgutt on Tuesday November 29, 2016 @08:32PM (#13067723)
Actually it is an iframe with https (using stripe)
Re:Logojoy: AI-powered logo creator by chairmankaga on Tuesday November 29, 2016 @10:17PM (#13068214)
But if the host traffic is compromised you can serve malicious payment gateways/forms.
Re:Logojoy: AI-powered logo creator by sulam on Wednesday November 30, 2016 @06:37AM (#13069928)
If the host is compromised HTTPS isn't going to save you.
Re:Logojoy: AI-powered logo creator by novocaine on Wednesday November 30, 2016 @07:08AM (#13070049)
it will if it's the host /traffic/ that is compromised