Thanks to the parallel processing ower of modern GPUs:  http://technology.newscientist.com/article.ns?id=dn12825&feedId=online-news_rss20

I'm surprised they didn't jump on the Sony PS3 / Cell processor bandwagon . . .

On an related note - remember - the password hash is pretty much as good as the password  . . . if the bad guy has your hash - the game is pretty much over these days.  If I posses your hash I can impersonate you on the network and access any network resources you would have access to . . . I don't have to derive the password from the hash to do that. :)