In the "personal information" settings panel, typing in the password field has explicitly shown passwords, while they are supposed to be hidden.