Reading a hidden password via a FINDSTR bug