Information leakage, and specific question around an HTTP auth scenario | Hacker News Reader