Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> return actual == expected

Usually you'd want to use a method which prevent timing attacks for this check. Even php provides hash_equals for this usecase.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: