s9ann0

I didn't really go into it but I think I get what you are saying - basically people are using the password as salt and they should use a random salt?

generally i think people are a bit stupid about security in this industry