Browser extensions which may look at browser history, or any malware which finds browser history on disk. Using this on a foreign computer and not wiping history afterwards. Social bookmarking sites. Other cloud bookmarking/sync services. Social engineering to trick users into showing their URLs, because you know, URLs are safe.
Maybe it's not as easy as google hacking, but I am very confident people will find ways to attack that, even if just because browsing history and bookmarks are usually not that sensitive, not a worthy target, and thus most likely ill protected.
simply put trojans.. yep i understand. but thats not where bad coding is, thats more of training users in good security. EG rsh wallet also has a password option too.
trojans can grab any info, including being a key logger and rush wallet cant stop users for being foolish to download trojans.
one thing that would be beneficial for rush wallet is if they had an screen keyboard key aswell as passwords where the buttons are randomly placed and change everytime
one minute its this:
[6][4][2]
[3][7][8]
[9][5][1]
the next minute its this:
[7][9][5]
[6][3][1]
[2][4][8]
then a trojan that could maybe grab mouse cursor movements or touch screen location data still couldnt guess the passkey