“Forbidden attack” makes dozens of HTTPS Visa sites vulnerable to tampering | Hacker News Reader