This is not necessarily an OSX issue, but rather a problem with the Open Firmware itself, and in particular the way it stores the password. FWSucker is a classic Mac OS 9.x application as opposed to a native OSX Cocoa application, this rules out the possible misuse of such a program on Mac OS X...