[mjpa]

I'm not convinced by their salted claim, I thought Drupal 6 (what drupal.org is on) only did MD5() for passwords? Drupal 7 has the more securely hashed passwords.

[HiddenIncome]

Drupal.org runs D6 with the phpass module, basically the stuff that went into Drupal 7.