On the other hand, if they coded is smartly, they also used extra salt that is only in the source code and not in database - that one should help indeed.
They didn't. My details are in there and I reproduced the hash for my password with the following perl:
#! /usr/bin/perl
$salt = '$1$SALT$'; # this is the at the start of the salted password in the accounts.csv, it's 8 alphanumeric characters
$pw = 'MY_PLAIN_PASSWORD'; # do this on a secure box, you're entering your password into a text editor.
$encpw = crypt($pw, $salt);
print "Encrypted password: $encpw\n";
Observe how the printed hash equals the bit after the salt in the accounts.csv. Thus no hidden salt or trickery.
