Additionally, last.fm used unsalted MD5 hashes, which are so trivial to break it's not funny any more. (john manages 24 million hashes/second on my five years

Additionally, last.fm used unsalted MD5 hashes, which are so trivial to break it's not funny any more. (john manages 24 million hashes/second on my five years old laptop for that, even crypt(3) with md5 is three orders of magnitude harder to brute force.)