CNBC password tester: HTTP, shared with advertisers, stored on Google (nakedsecurity.sophos.com)

Is it really so simple that it was a password testing tool or was it maliciously and surreptitiously sweeping up naive readers' passwords ?