in reply to Re^2: Button insecurity
in thread Button insecurity

He uses JS to get only your username, not your password (hes nice like that).