See my other comment on starting with "published and studied systems that are thought to be correct". Salting your passwords has been state of the art for so long I can't remember when I first heard of it.

LinkedIn was not adding any sort of reasonable defense in depth security through obscurity, but foundational gross negligence.