This is terrible. No site has any business "knowing" my password. To me, not hashing is a violation of my trust right there. I'm a paid Pandora user and have been their evangelist for many years and supporter through all their tough times. Just seeing my password in plain text in the DOM Inspector makes me embarrassed. This should have never happened. They should fix this. Soon.