I'm wondering how exactly the SE Open ID provider stores passwords, in far too many high-profile cases passwords were only marginally protected. I personally expect that SE uses a suitable hash function and salt, but it would be nice to know for sure.
PBKDF2 based on HMAC-SHA1 with twenty-thousand iterations (the latter is set in our configuration).
Just check the code (search for
SecureHash and go from there).