It was interesting, until I got to the benchmarks part. It's just another little framework trying to beat Symfony on a 'hello world' app, and obviously didn't even bother configuring it properly.
+1 , I still don't know where this 'spaces over tabs' crap comes from. My guess is that it is good for things that must be done from a console (as opposed to using an IDE). But it has no place in PHP. Tabs + spaces break on different configurations? It's not because of tabs, it's because of spaces! Tabs are flexible, spaces are not. What's next, will I be forced to use a particular font size too?
More reasons to use offshore VPN and email. And when you only need the email for registration: disposable email.
Also, not related to this case but to privacy in general, people should learn how to use PGP for emails. It's been there for enough time already, but I don't know anyone that uses it.
It doesn't have to be 1 second. Just use something that was designed to store passwords, so it at least it isn't blazing fast, and it gives semantic security, like bcrypt does (you don't even need to think about salts). Also, having a configurable amount of rounds gives some degree of security through obscurity, so the attacker also needs access to the code, or lose time figuring the correct amount of rounds. I think most attackers would just desist.
Sha-X, md5, etc, where designed to be fast. You don't want slow checksums.
