Or more securely (avoiding command-line exposure):
Despite the risks, the format appears in several legitimate (but usually internal or low-stakes) scenarios: http url user password