Re: user database question

[Ed Carp]

>Why does mysql use the same salt everytime it encrypts
>a user password inserted into the user database with
>the GRANT... command?
>
>(at least it seems to do so -- 2 users with the same
> password gets the same password entry in the
> "user" datasbase)


It doesn't.  In fact, it doesn't use the crypt() function at all - it uses a
variant of XOR, which is trivial to break.