https://www.malaysiainternet.my/2014/05/encrypted-passwords-are-not-100-secure-says-mcafee/