It's hard to imagine worse, except maybe putting the passwords in the clear... Single unsalted broken MD5 is a far cry from scrypt... and even scrypt is probab

It's hard to imagine worse, except maybe putting the passwords in the clear... Single unsalted broken MD5 is a far cry from scrypt... and even scrypt is probably a bad idea with all this crypto currency hashing hardware out there, unless you have a seriously strong password. Just don't publish hashes.