Quoting emanuel stiebler (emu@ecubics.com):
> Hi all,
> I saw in the wget manpage, that one shouldn't use the one-line format 
> which includes the username & password, aka user:password@netbsd.org.
> 
> (Because you can see them via "ps")
> 
> Instead, we should use the .wgetrc file, and put the name & password there.

and keep in mind that username/password will get tossed
over the net in the clear unless you're using https://