Don’t give out your tumblr password, or your email password, or your twitter password - to a third party website. Ever. Especially not one that masquerades as being on tumblr by the little buttons in the top right. I’d have thought staff especially would have the good sense not to open themselves up to phishing like that.
The popularity of it might be another nudge towards Tumblr supporting OAuth. I know I’d rather Postling used OAuth than storing people’s passwords. I don’t want your password. I just want you to do what you need to do and otherwise get the hell out of the way.
