Today the unexpected happened; I was the victim of a PayPal phishing attack, even so I claim to be one hell of a smart cookie with web security. And before you ask, no, I didn’t click on a link in an email. I’m not THAT stupid. What I did instead is to type the URL into my browser by hand, and stupidly enough I never included the https:// bit. Call me slack, call me silly, but that’s what happened.