2011-02-19, 02:31 PM
Spaz Wrote:For the website, absolutely, if the person has access to the website code. It's also possible to use rainbow tables crack the "encrypted" (actually hashed) passwords that are stored in the database if the hash is not salted first.
If they worked for the company they'd fairly likely know the salt used too so that wouldn't even begin to be a barrier
It's not having what you want - It's wanting what you've got.

