My first response: "Post more polite comments." But seriously... I think the article explains the principles of storing hashes of passwords rather than the passwords themselves pretty well. Yes, neither it nor I didn't cover all the security bases, but that's beyond the purview of an introductory article. Tell you what -- give me a little time, and I'll write an article that covers those issues you mention in your post. How's that sound?