4 ms·

Don't even need that account: at start, this works in chrome: https://www.paypal.com@google.com https://www.paypal.com@google.com

• b3n 7y ago
  In Firefox it tells me: You are about to log in to the site “google.com” with the username “www%2Epaypal%2Ecom”, but the website does not require authentication. This may be an attempt to trick you. Is “google.com” the site you want to visit?
  • deftnerd 7y ago
    Gold star for Firefox! That's an excellent feature.
  • jefftk 7y ago
    From the error message it sounds like if this was an attacker controlled site configured to require authentication it wouldn't trigger? If so it's not that useful a defense since whether to require auth is entirely under the attacker's control.