The justification I heard for the ethics of enjoying the home-rolled discount was that it was similar to haggling. The store chose to accept the offer.
Not sure I totally accepted that, but appreciated the creative thinking.
Between this and everything being non https - what a time to be alive.
Yes, exactly that. That's why I highlighted the risk of someone looking in the right spot at the right time.
> the pw will be sent in the request body as plaintext on a post
Which is how every single login form in the world works, today, for this very reason.
I think you could still find some old youtube videos or threads on obscure forums with enough digging about that topic, that's how I learned of it initially.
So this was a real thing!