News for hackers. Stuff that matters.

A comment on Browser Extension Password Managers Exposing Passwords Everywhere. Parent comment

Re:Browser Extension Password Managers Exposing Passwords Ev... by judk on Friday December 20, 2013 @09:53PM (#6945498)
Are you saying that yahoo web mail lets senders create forms with submit actions? That's.. Horribly broken.

But tumbler allows JavaScript redirects to phishing sites, so yahoo standard I guess.

[ Parent | on HN ]
Re:Browser Extension Password Managers Exposing Passwords Ev... by toast0 on Saturday December 21, 2013 @01:06AM (#6945958)
HTML email is an abomination, but...

If a form doesn't have a submit action, what's the point of the form?

If you have HTML and CSS, why not have forms?

[ Parent | on HN ]
Re:Browser Extension Password Managers Exposing Passwords Ev... by eknkc on Saturday December 21, 2013 @09:27AM (#6946718)
Gmail does this too.. It intercepts the action though, lets you choose if you really want to send.
[ Parent | on HN ]