3 ms·
Isn't that borderline phishing, Seriously? I'm thinking about a naive visitor, who doesn't have an account with Plurchase. If s/he now tries to login to Zappos,
by slice 17y ago
Isn't that borderline phishing, Seriously? I'm thinking about a naive visitor, who doesn't have an account with Plurchase. If s/he now tries to login to Zappos, Plurchase sees and handles her/his username & password. This is a simple man-in-the-middle attack.
- catch23 17y agoIt is somewhat man-in-the-middle, but not much different than your browser-side plugins... some browser side plugins load external javascript into your webpages so it wouldn't be significantly different. Wesabe.com (personal finance site like Mint) allows you to enter in your financial data directly into their system, and also provides a firefox plugin that will fetch that financial data should you be worried about Wesabe's security. However, few people have used their firefox plugin for doing it.
- slice 17y agoThere is a huge difference. I'm not bothered one little bit about logged-in / opt-in users or those who chose to install a plug in. My concern is specifically with a visitor who did not register and have no clue of what's going on.
- catch23 17y agoI'm not sure I understand here... plurchase is similar. You have to visit our site to shop on amazon or related store.