It is not too difficult to get a password from an unencrypted website. But what is the big deal? Just change your password. The worst that they can do is make posts in your name on the ChipBoard. Just make sure that you use different passwords on different sites. If a crook had your password from one website, the first thing that they would do is to go to another website where they could take money from you, like PayPal, and try to logon with your email and password from the other site.