Why won't hackers just strip the salt from hashed passwords? Many developers simply add a static (not randomised) salt at the begging of a hash. Can't hackers remove a certain amount of characters (the salt) from all hashes in the database?
valid question