Paypal: Lazy Authentication Still the Norm — Krebs on Security

http://krebsonsecurity.com/2015/12/2016-reality-lazy-authentication-still-the-norm/