Hackerrank.com sends passwords in the clear

https://gist.github.com/3020091/
by theonewolf • 14 years ago
29 39 14 years ago

So I saw the recently launcher hackerrank.com and noticed on sign up that the page wasn't HTTPS. I was a little bit worried and checked a packet dump.

Sure enough, passwords are sent plaintext to their servers (I hope not stored plaintext, although that is harder to confirm).

If you want to try them out, use a throwaway password!

Related Stories

Loading related stories...

Source preview

gist.github.com