Whoa: Ads tracking users by putting up a hidden, fake login form and reading the email address that the browser auto-fills.
Fortunately it only works on built-in auto-fill, not third-party tools like LastPass or 1Password.
If you save passwords in your browser, here’s one more reason to switch to something more secure.