Introducing Lock and Key: A New Measure to Secure Subscriber Accounts (open.nytimes.com)

> Lock & Key references stolen username/password lists shared publicly on the internet and cross checks them against your account.

Does this mean they don't salt stored passwords, or they're testing compromised passwords with all stored salts?