boklm0

According to this page, Mercurial project leader is currently working for Facebook: http://mercurial.selenic.com/wiki/mpm

"The point is if it's going to be that insecure, Chrome should make more of an effort to make it clear"

And what's a better way to make it clear than actually showing the passwords ?