I didn't read it anywhere. I downloaded the database and checked all my friends against a known password database. They're plain md5(password).