More evidence of unsafe transportation mechanism
One more huge security vulnerability I’d like to point out.
When using this tool, the POST call to send your information to this guys server is done via http. In other words, your e-mail and password are SENT IN PLAIN TEXT over the internet. This is bad. Very bad.
Also, what this guy does with your login information is unclear. See file http://tumblrcloud.icodeforlove.com/scripts/common.js at function loginUser(). The ajax call posts to http://tumblrcloud.icodeforlove.com/ajax.php.
This is unacceptable security.
