Hacker News Reader

Are they comparing MACs with a strategy that fails as soon as a byte differs? Hah.

The site compares MACs in the client's browser, so a timing attack is not really an issue here.

It's indicative of bad engineering.