Hacker News Reader

Really, how? Because somebody compromised the server? So what? If they did that, all bets are off.

No, because someone MITMs your insecure channel and serves you a malicious page that steals your password and the unencrypted data.