[ale] PayPal "Man in the Middle" attack?

[cluon at geeklabs.com (Mike Harrison)]

> Now I feel remorse. Was that foolish?

Go to the real paypal.com and change your passwords.

When I hit a fake capture website, I kill my browser(s).
re-open it on one of my personal websites.
clear all cache, passwords, etc..
kill my browser again.. and restart it.

Paranoid and completely thoretically not needed, I know..

If I'm bored and killing time.. I have fired up sniffers
and gone to the legit site and logged in (with an invalid password or a 
trash account) just to watch the Javascript running in a window somewhere
or in the page I'm on do weird things and try to call home.
Sometimes you'll see things.. sometimes not.