Am I missing something?
https://www.instawallet.org/w/tnwghY1sfQip3ia64mR2Jj
Sure it's HTTPS which encrypts the payload, but anyone can get access to the URL. Then, if I understand the implementation, the attacker (neighbor) can drain the entire account, no?