That's my recollection from the original VF article, yes. And yes, his explanation was perfectly plausible. If I were in charge of loss prevention at GS, I'd be more worried about folks who don't clear their shell history when sensitive passwords are used.