|visits||member for||3 years, 1 month|
|seen||Sep 15 '13 at 9:18|
|bio||website||schnipps.de||visits||member for||3 years, 1 month|
|location||seen||Sep 15 '13 at 9:18|
Are derived hashes weakening the root?
Although the salts are not exactly public, they are not strongly secured either. Plaintext represents pre-hashed credentials. So do I get it right that, in this case, a PBKDF or at least HMAC should be used for that?