<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"><channel><title>Disqus - Latest Comments for http://www.mybloglog.com/buzz/</title><link>http://disqus.com/people/38f9df04af3dee1a3950d2a6f4421fa3/</link><description></description><language>en</language><lastBuildDate>Mon, 04 Aug 2008 10:27:51 -0000</lastBuildDate><item><title>Re: A New, Simple Way to Salt your Hashes</title><link>http://codespatter.disqus.com/a_new_simple_way_to_salt_your_hashes/#comment-1720582</link><description>The problem with this is you have created a pattern which could (and probably does) introduce a cryptographic weakness. If someone knew or could guess you were using this tactic then they might be able to exploit it.&lt;br&gt;&lt;br&gt;While I don't have an example of a specific weakness to MD5 to hand one of the basic rules of exploiting algorithms is knowing some of the source material or knowing about patterns within it.&lt;br&gt;&lt;br&gt;The point of using a salt is to use a piece of unknown material which is unique in each string. It's common to generate random junk to use rather than anything meaningful.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">http://www.mybloglog.com/buzz/</dc:creator><pubDate>Mon, 04 Aug 2008 10:27:51 -0000</pubDate></item></channel></rss>