Hey there,
I stumbled across something interesting; is it known that the Runescape applet stores the last password-attempt, without any encryption, in plain String format? Seems odd to me - but it's there.
Not that it opens up any major security issues, but it's the sort of thing that one...