A salutary lesson for anyone who thinks MD5 hashing makes their application or data safe.