Stealing login credentials from a locked PC or Mac just got easier