Hacker News Reader

So why is Firebug telling me that you're pinging my email address to http://track.reinvigorate.net?

You won't even make the widget's author known. You're keeping that secret, and I doubt you've had someone competent analyze the widget's source code. No thanks.

Also, after some fuzzing, it looks like the widget might be vulnerable to a SQL injection attack, so I hope nothing really is being harvested.

I can understand why they might want to keep that a secret. I can imagine some group, perhaps Lulzsec themselves, attacking someone who tried to help the victims.

author here: I second that - I know who wrote the widget but the developers are understandably afraid to get hacked themselves if they make their identity known.

chances are they will be hacked either way..