Hacker News Reader

are u sure they were really "phished"? scihub would have no problems finding volunteers who would 'phish themselves'

And after donating credentials, the donor and IT are better off just claiming the password was "phished" (winkwink) when caught.