Are you thinking of Heroku? Heroku isn't a bank. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tedunangst on Jan 11, 2013 \| parent \| context \| favorite \| on: Bitcoin exchange hacked via Rails exploit, funds s... Are you thinking of Heroku? Heroku isn't a bank.

lclarkmichalek on Jan 11, 2013 [–]

It was probably Santander: http://www.h-online.com/security/news/item/Santander-s-onlin..., though there have been other instances of bad bank web practices.

tedunangst on Jan 12, 2013 | [–]

Putting plaintext passwords in a cookie doesn't sound anything like incrementing an integer in a URL.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact