#1 is not true. Algorithms like bcrypt rely on being so expensive to compute that brute-forcing is prohibitively expensive. bcrypt does use salt. If it did n

#1 is not true. Algorithms like bcrypt rely on being so expensive to compute that brute-forcing is prohibitively expensive. bcrypt does use salt. If it did not then it would indeed be vulnerable to rainbow table attacks.