Hacker News Reader

I totally missed hash_equals. D'oh!

This was fun, I'd like to practice more "spot the flaw" scenarios. Is there a website/tutorial that shows bad code like this? I would find it helpful.

View on HN

I've always found the Underhanded C Contest[0] to be a particularly interesting source of insight. Sadly it's been on hiatus for several years now.

0. http://www.underhanded-c.org/

Cool, thanks!

That’s the gist of secure code warrior

Reply on news.ycombinator.com