Comment by kevjiang

Amazingly, these aren't even password hashes.. they're encrypted versions of the password. Ars wrote an article on this yesterday [1]. Basically if anyone has the encryption key, they'd be able to decrypt ALL passwords in the list.

[1] http://arstechnica.com/security/2013/11/how-an-epic-blunder-...