If crackers have just password hashes, but no salts, how is this possible? http://t.co/S0AwsjlI