When I saw SHA1(password|salt) in the readme of https://github.com/antirez/lamernews I knew a flame was coming, and that "use bcrypt" and "cryptography is hard" will popup, but not really exactly why?

Thanks for this post antirez, because after diving a little, now I know better the reason, the risks, that tarsnap creator uses scrypt (http://www.tarsnap.com/scrypt.html), that really "cryptography is hard", he also makes bugs (http://www.daemonology.net/blog/2011-01-18-tarsnap-critical-...)

And this funny little gem: http://xkcd.com/538/