News for hackers. Stuff that matters.
Re:Show HN: Invest Your Money In What Matters to You by lsb on Tuesday June 10, 2014 @11:39AM (#7873149)
I paged through the "Get Started" flow, and it took me to http://www.valuedinvesting.com/signup/account-creation.php --- do you expect people to give their Social Security Numbers to a form not using SSL?
Re:Show HN: Invest Your Money In What Matters to You by jcmurrayii on Tuesday June 10, 2014 @12:05PM (#7873353)
Seconded.

Started filling everything out, and abandoned IMMEDIATELY when I got to the SSN field.

This form should redirect to SSL AUTOMATICALLY and every time. Seeing it not do so puts some serious concerns out there about your data treatment, how you handle/store PII, and other PCI compliance matters.

Re:Show HN: Invest Your Money In What Matters to You by chazlupei on Tuesday June 10, 2014 @11:42AM (#7873182)
Re:Show HN: Invest Your Money In What Matters to You by blahblahshep on Tuesday June 10, 2014 @12:11PM (#7873396)
The whole site should be https and never load assets that are not -- from the start. Especially since it's an investing site with access to sensitive information.
Re:Show HN: Invest Your Money In What Matters to You by DanHulton on Tuesday June 10, 2014 @11:57AM (#7873294)
It should really redirect automatically and not rely on you getting the "https" part of the URL right manually.