Re:LeakedIn
by hamoid on Wednesday June 06, 2012 @04:30PM
(#4076037)
Maybe no trickery hidden in there now, but that could change any time.
Or sometimes. Or depending on IP, browser or OS.
[ Parent
| on HN ]
And even if there's no "trickery" from the hosting site, they're slurping in javascript from a 3rd party down the bottom (getclicky). That means they (or anybody who compromises them) could grab the cleartext passwords from the form before the inline javascript does it's sha1 hashing…