gshaw

Slow, crashed within minutes of using it. It's not very pretty either. I'll stick with Adium/Jabber hooks but was really hoping for something good here.

Really good idea and execution. Thank you for building this.

Keyboard support for entering a date manually would be great. The GUI is great. Would like to see what the author could come up with for a pick a time.

This. How can you display a time and mean something if you don't know what timezone the user viewing it is in?

"In step 4, never tell the user if it was the username or password they got wrong. Always display a generic message like "Invalid username or password." This prevents attackers from enumerating valid usernames without knowing their passwords."

What prevents the same enumerating attack against the sign up form. Are you going to give them a generic message that the username is invalid when it in fact has been taken?

Also the article implies that you need to use salt but than recommends using bcrypt which already includes salt.

Good read on how passwords are attacked.