Silas, have you been hacked?

Just got a message which obviously wasn't from you.

Hey Silas, Silver for Solstice or s4s this year looks do-able.

He must be skiing some great snow.

TAY should use SSL. Completely insecure as-is

TAY should use SSL. Completely insecure as-is

I can't believe I never noticed this before...

Via the HTTP request to log in
www.turns-all-year.com/skiing_snowboardi...ex.php?action=login2
POST index.php?action=login2

200 OK turns-all-year.com 20 B
208.113.215.5:80 235ms

ParamsHeadersPostResponseHTMLCacheCookies
Parametersapplication/x-www-form-urlencodedDo not sort
cookielength 180
passwrd mypassword
user myusername

Yeah, don't EVER use a decent password that you use with anything else on this site. This really should be addressed.

You can see from the above POST request to send the username/password is sent in CLEAR text, there's nothing hashing this and it's completely able to be sniffed anywhere on the wire/net.