mozilla / openbadges-backpack

Mozilla Open Badges Backpack
https://backpack.openbadges.org/
Other
862 stars 263 forks source link

Insecure login - Earn a quick badge #1161

Open edent opened 6 years ago

edent commented 6 years ago

From https://openbadges.org/get-started/earning-badges/#earnaquick

You can get a quick start to your badge collection by earning a really simple badge.

Points to http://toolness.github.io/hackasaurus-parable/navigator-badge/

When the challenge is complete, the insecure website has a modal box asking me to share my username/password for the OpenBadges site.

screen shot 2018-02-15 at 11 27 46

This is a security risk, teaches users to fool for phishing, and looks really unprofessional.