Hacker News Reader

I've just checked a bunch of sites on this list and it seems a lot have been patched, only in the last hour since your comment.

Also note that many non-SSL domains will be using SSL in subdomains, e.g. login.blahblah.com