4 ms·

But they say they take password security "extremely seriously". What could possibly go wrong?

• jgrahamc 18y ago
  You are correct, what could possibly go wrong? Oh wait, they take password security so seriously that the login form which sends my Twitter username and password does so over HTTP and not HTTPS! Hooray, my password goes across the wire in plain text.
  • wallflower 18y ago
    It's not advertised because mass use would take down their servers but someone on HN pointed this out (even your tweets will be encrypted [at least until they are globally published]: https://twitter.com https://twitter.com
    • jgrahamc 18y ago
      No, I'm talking about Twiddict. Even if you hit http://twitter.com/ http://twitter.com/ they do the password authentication over https. Twiddict does not.
      • wallflower 18y ago
        OK. Didn't read clearly. OAuth will be rolled out eventually.