newly created passwords remain invulnerable to a similar disclosure, as they employ SHA-512 with per-user salts to store hashes.
I don't know how long it will take for people to figure this out. SHA-512 with a salt is not the right way to store passwords. Yes, it's better by leaps and bounds than storing the plaintext. Yes, it's better than crypt(3) as gawker used. But come on, just use bcrypt already.
And the fact that they calls SHA-512 with salts "invulnerable" ... I don't even know what to say to that.