You're arguing for the sake of arguing. The developing weaknesses in SHA-1 don't make it a poor password hash. That's an irrelevant factoid you threw in to cloud the argument.<p>Pick a number of passwords to lose from a table. Hash them with <i>any of the SHA-3 contestants</i> and a "salt": you will lose more. Hash them with bcrypt, you will lose less.<p>Again I'm left asking you: what's your point? What are you trying to prove? That you know that there's a SHA-3 contest?  You haven't refuted anything this article says; in fact, you keep accidentally managing to validate it.