Hacker News Reader

It feels like in both places that's the location of the username. Forget having passwords in plain text, for what reason would passwords be prominently displayed?

I don't mean to imply that it's necessarily the fault of the individual. Even it the password did get entered into the username field (for example), it could be that an autofill bug, or just bad UI was the cause.

If this was the case, though, it means that there's there may not be reason to assume that passwords are not stored safely.

This does seem to be very likely, I've spent too much time to count trying to investigate bugs that should not exist only to discover that the issue is of PEBKAC nature.