He is. Whenever you log onto a server, whoever is running the server software they can easily see your username and password in the log in info. Hell, even ask juntalis, he was modifying some shit and he even came across some of that stuff. notch didn't even bother to have encrypted it.