Hacker News Reader

Maybe they can force login via their main site first. Lousier user experience though.

Lousy user experience is not being able to verify what site I'm about to enter my payment credentials into.

It would be a terrific experience if there was no reason to worry.