Don't reuse your passwords. You've heard it repeated over and over again. I do believe that is the solution.

Now, of course, I do reuse. But other than the above I just don't see a solution to this particular problem. Filtering both the username and password in the logs? It wouldn't make -me- feel any safer when I log onto that Xbox hacker forum. I worry about the administrator of the site having access to my passwords. Not any possible hackers that might wander by.

PS. There are tools out there that will fill in username and password depending on URL. Of course, that gives another attack vector...