4 ms·Couldn't MEGA simply change the client-side javascript to just send them the plain text password?by joelthelion 4y agoCouldn't MEGA simply change the client-side javascript to just send them the plain text password?tptacek 4y agoThis attack breaks non-browser-Javascript clients.Moodles 4y agoThe client could in theory see the javascript running and detect this.