It appears that some might have missed this announcement, so in the interest of safety, I'm posting it in its own thread (discussed in another thread)...

On sites that allow users to enter code, a hacker can embed a form that tricks the user's browser into sending its username and password information to the hacker's computer. Because the form is embedded on a trusted Web site, the browser's built-in antiphishing protection, which is designed to alert users to fraudulent Web sites, does not detect the problem.

http://www.sci-tech-today.com/story....d=01100187R18Z

__________________
You have your way. I have my way. As for the right way, the correct way, and the only way, it does not exist.