Hacker News Reader

I certainly hope that passwords aren't encrypted but run through an appropriately-expensive password hash.

Yes, I should have said hashed not encrypted.

hashing is one-way encryption tho

That's the point, take a look into salting + hashing passwords