{"action":"created","issue":{"url":"https://api.github.com/repos/pyca/bcrypt/issues/8","labels_url":"https://api.github.com/repos/pyca/bcrypt/issues/8/labels{/name}","comments_url":"https://api.github.com/repos/pyca/bcrypt/issues/8/comments","events_url":"https://api.github.com/repos/pyca/bcrypt/issues/8/events","html_url":"https://github.com/pyca/bcrypt/issues/8","id":30228552,"number":8,"title":"Find a way to not use == in the README","user":{"login":"alex","id":772,"avatar_url":"https://avatars.githubusercontent.com/u/772?v=3","gravatar_id":"","url":"https://api.github.com/users/alex","html_url":"https://github.com/alex","followers_url":"https://api.github.com/users/alex/followers","following_url":"https://api.github.com/users/alex/following{/other_user}","gists_url":"https://api.github.com/users/alex/gists{/gist_id}","starred_url":"https://api.github.com/users/alex/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alex/subscriptions","organizations_url":"https://api.github.com/users/alex/orgs","repos_url":"https://api.github.com/users/alex/repos","events_url":"https://api.github.com/users/alex/events{/privacy}","received_events_url":"https://api.github.com/users/alex/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2014-03-26T16:41:40Z","updated_at":"2015-03-23T10:12:04Z","closed_at":null,"body":"I don't think it's actually exploitable as a timing attack (in fact I'm pretty sure it's not), but I think it'd be good hygeine to offer a check_password function or similar and use that, so we dont' have to expose a general purpose constant time comparison function."},"comment":{"url":"https://api.github.com/repos/pyca/bcrypt/issues/comments/84929558","html_url":"https://github.com/pyca/bcrypt/issues/8#issuecomment-84929558","issue_url":"https://api.github.com/repos/pyca/bcrypt/issues/8","id":84929558,"user":{"login":"wbolster","id":748944,"avatar_url":"https://avatars.githubusercontent.com/u/748944?v=3","gravatar_id":"","url":"https://api.github.com/users/wbolster","html_url":"https://github.com/wbolster","followers_url":"https://api.github.com/users/wbolster/followers","following_url":"https://api.github.com/users/wbolster/following{/other_user}","gists_url":"https://api.github.com/users/wbolster/gists{/gist_id}","starred_url":"https://api.github.com/users/wbolster/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wbolster/subscriptions","organizations_url":"https://api.github.com/users/wbolster/orgs","repos_url":"https://api.github.com/users/wbolster/repos","events_url":"https://api.github.com/users/wbolster/events{/privacy}","received_events_url":"https://api.github.com/users/wbolster/received_events","type":"User","site_admin":false},"created_at":"2015-03-23T10:12:04Z","updated_at":"2015-03-23T10:12:04Z","body":"Fwiw, the standard library provides `hmac.compare_digest()` since 2.7.x."}}