On: Salted Password Hashing - Doing it Right

[pjscott]

That's potentially dangerous advice, because as it may lead someone to use an HMAC and think themselves safe, instead of using something like Bcrypt that's slow enough to foil brute force attacks.