>http://www.thetechherald.com/article.php/201101/6651/Tunisian-government-harvesting-usernames-and-passwords

Took a quick look at the Gmail example. The interesting bit there (which is not mentioned in the article) is the apparently unused invOk1() function ? Looks like it stores the same information in an image