[twh270]

> I assume they're hashing all the passwords anyway.

Bad assumption. And many that do hash are using MD5 and don't bother salting.