> So I’m not saying salts are without purpose, I’m saying that they don’t prevent dictionary or brute force attacks (which they don’t) Only true if you don't k

> So I’m not saying salts are without purpose, I’m saying that they don’t prevent dictionary or brute force attacks (which they don’t) Only true if you don't know the salt. Of course, most folks store the hash and salt in the same table or column (Django).