Quote from: Lardie on March 15, 2011, 01:02:38 AM

Correct me if I'm wrong, but if someone uses my worker's username they just generate bitcoins for me. So what is the purpose of the password?

Well, it is little complicated under the hood. Server must remember jobs which served you, to be able to perform some checks on share submitting. As the server has limited memory for every worker jobs, with knowledge of user/password, the attacker can make your mining impossible by erasing your worker queue. Well, it is nothing to too much worry about, but posting your full worker credentials on the web isn't generally good idea.