Pinterest, Yammer scramble to patch login thievery headaches

I hate Pinterest with a passion

...since image searches seem to throw up many, many results from the damned site and they recently decided that if you are not signed up they will slap a huge login popup over the page making it unusable for non-members. Of course,this just boosts their membership in the short term making their log-in credentials more desirable to hackers. I await their appearance in the major ID breach hall of shame. It's only a matter of time.

Yammer are specialists in this kind of thing

Having worked a little with the Yammer API I can safely say that there is very little that Yammer can do in terms of wide-screen ineptness that would surprise me.

A recent update to limit XSS vulnerabilities in their JavaScript API meant you had to provide a list of safe domains that your Yammer app communicates with. Everyone's apps immediately stopped working because Yammer had omitted to add their own domain to the "allowed" list and nobody could interact with their scripts any more.