Hacker News Reader

Or they just make everything lower- or uppercase before checking it against the encrypted version.

Almost certainly not, since this would reduce the entropy of their passwords, making brute forcing easier.