title: Salt and hashing, why not use username?
body: <p>I must confess to being largely ignorant on most of the high-tech security issues relevant for web applications, but there is one thing I at least thought I could ask because it is a direct question with (hopefully) a concrete answer.</p>
  <p>Take this website: <a href="http://www.15seconds.com/issue/000217.htm" rel="nofollow noreferrer">http://www.15seconds.com/issue/000217.htm</a></p>
  <p>It shows a bit down that they store the salt value in the table, I understand the principles and the math behind <em>using</em> a salt, but I'm wondering this:</p>
  <p>Why did they not just use the username as a salt value instead of generating one?</p>