Notes on security, backend engineering, and whatever else I run into while shipping.
Learn why using === for comparing secrets is vulnerable to timing attacks, and how to use Node.js's timingSafeEqual for secure string comparison.