CodeIgniter Community Voice - Michael Wales

[eluser]Eric Cope[/eluser]
[quote author="Lewis" date="1214881652"][quote author="Derek Allard" date="1213951249"]I know what you’re thinking. If the database is stolen they’ve got the password and the dynamic salt “What good is that?!” This is where a static salt comes in. [/quote]

Not entirely true. A salt makes the hash completely different. This means that the most practical method of using hash rainbow tables (a dictionary of pre-computed hashes and their original values) is useless.

So it's still 99% effective and something everyone should do. Even a simple static hash is better than nothing, and they're no trouble to implement. It's just a shame sites still insist on storing passwords in plaintext.[/quote]

I like comments out of left field. It always keeps me on my toes.