3 ms·
WARNING: They say "Don't worry, we don't store your Netflix credentials." Instead, they send them in plain text over the network! From wireshark: email=hello&
by zoowar 16y ago
WARNING: They say "Don't worry, we don't store your Netflix credentials."
Instead, they send them in plain text over the network!
From wireshark: email=hello&password=hackers&Login=Get+my+Netflix+Instant+Q
PS: no ssl support (https://www.qpicker.com/ https://www.qpicker.com/)
- pppglowacki 16y agoHi zoowar, thank you for catching the no-ssl issue. We are working with our host to have that fixed today. I'll update everyone when ssl is setup because we do want to make the site secure.
- zoowar 16y agoAlso, your splash page is confusing. An 'authenticate with netflix' button would be better. If you need users to 'sign up' with your site, make that a seperate and distinct operation.
- pppglowacki 16y agoJust wanted to update that we finally established SSL support. Thank you again for the feedback zoowar!