3 ms·
Tell HN: StumbleUpon Login/Signup is Insecure
Posting this since I guess many here use StumbleUpon to promote your projects, and in the hopes this will make them fix it.
The gist is this:
1. Wanted to submit StockDroids to them
2. Saw it's HTTP only
3. Emailed them on 6/6, they said they're working on it
4. Nothing happened yet
5. Posting here so hopefully this will get big and they'll stop risking their users.