Disturbed by @DonorBox-powered UI's interaction with Web's security model: it asks for bank login/password on origin that's not the bank's.
1
3
Security that bad almost led me not to give money to the organization I was donating to (@yimbyaction), but I chose CC option instead.
1
3
Not sure I understand what this is about, but can you reach out to @itsskylartaylor if there is a problem?
1
Replying to @yimbyaction
The problem is @DonorBox's bank payment UI is asking users to do something they should never do... and perhaps teaching them that it's OK.

Aug 18, 2017 · 3:02 AM UTC

1
3
Replying to @davidbaron @yimbyaction @Donorbox
Entering your bank username and password when the browser's URL bar and secure UI says you're not at the bank's own site is *never* ok.
1
1
6
more replies