Simple yet effective ebay bug allows hackers to steal passwords