What I think might be interesting hack against it - to have browser to fill incorrect information. This way it might prevent script from grabbing correct login/

What I think might be interesting hack against it - to have browser to fill incorrect information. This way it might prevent script from grabbing correct login/password, unless hacker do it right and send password on each onkeyup event :)