How your website is being pwned while you’re not looking

A very good presentation on website pwning, and especially password hashing.