Six people put in real account details over the space of half an hour. No 2FA either.

We're all tech savvy here but normies get rekt. I'm writing about it in the hope plebs spread the word to their normie friends and family.

Most people just blindly trust captive portals and almost every captive portal uses plain HTTP.