lol,
if a hacker gets to the point where he is looking @ md5'd psws he doesn't even need to know what i represented prior to encode.
he'd just write his md5 into whatever psw field and login with user/plain text psw.
matter of fact, i've had to self hack my blog that way. i forgot my initial admin psw, so i just logged into phpmyadmin and slammed a known md5 in there.
so i don't get why having lists of md5's on the internet compromises a site's login system.
