If you use an iPhone or iPad to cruise Tumblr, change your login ASAP: the company just admitted a serious flaw in its iOS apps makes it easy for someone to steal your password out of thin air.