[netsharc]

Interestingly the password "BAAAD" would generate 3 requests to the logging server, since it wouldn't request the background image for the letter "A" more than one time. Or shouldn't, anyway.

[early]

That depends on cache headers sent from the server, which the attacker controls