Disturbed by @DonorBox-powered UI's interaction with Web's security model: it asks for bank login/password on origin that's not the bank's.
1
3
Security that bad almost led me not to give money to the organization I was donating to (@yimbyaction), but I chose CC option instead.
1
3
Not sure I understand what this is about, but can you reach out to @itsskylartaylor if there is a problem?
1
The problem is @DonorBox's bank payment UI is asking users to do something they should never do... and perhaps teaching them that it's OK.
1
3
Replying to @davidbaron @yimbyaction @Donorbox
Entering your bank username and password when the browser's URL bar and secure UI says you're not at the bank's own site is *never* ok.

Aug 18, 2017 · 3:03 AM UTC

1
1
6
Replying to @davidbaron @Donorbox
But our website didn't do that, right?
1
Your website (via UI @DonorBox provides for you) asks for that, if you choose "Bank Transfer" (+$1.69) rather than "Credit Card" (+$3.39).
1
3