An insecure password manager