Facebook Mobile Glitch
After entering an incorrect login info in the facebook mobile login page, the password field <input type=“password” name=“pass” />becomes text field <input type=“text” name=“pass” /> instead, revealing your whole password as you type it.
At first I thought there was a bug on the web page, but later on I realized that it is made this way on purpose as there’s a message that says “Your password will be shown to you in plain text below to make text input easier. (Your login is still secure)”.
I don’t think the login is secure this way because inputs to the text fields might be recorded even in a mobile phone for autocomplete. Moreover, the website is not under a secured connection (HTTPS) either, which allows the hackers to crack the password easily.
Others:
