Unsettling stuff for a Saturday morning; In two attempts I was connected to the login pages of two types of systems I use and administer regularly.<p>I'm aware that this is indicative of bad security practices and not some vulnerability in those systems, but that didn't make it any more comfortable to see their familiar UI elements exposed in all their nakedness.
Neat idea, but I get mostly certificate errors, bare Apache errors, timeouts, basic auth prompts, etc. Some kind of filter might make it more interesting.