Hacker News Reader

oh ok I thought the usual MO was:

if (md5(password + salt) == stored value) ..

It is, but if you don't have the naked password available at the time that you got your hands on the salt? May as well still salt it.