2 ms·
We wanted to avoid anything controversial. Do we need to make this configurable to make everyone happy? https://www.schneier.com/blog/archives/2013/10/insecuri
by justintocci 11y ago
We wanted to avoid anything controversial. Do we need to make this configurable to make everyone happy?
https://www.schneier.com/blog/archives/2013/10/insecurities_in.html https://www.schneier.com/blog/archives/2013/10/insecurities_...
- MrRadar 11y agoEven if it isn't perfect /dev/random is a hell of a lot more random than just taking the current time stamp and PID. Edit: For reference, this is exactly how the Netscape's original SSL implementation was broken: https://web.archive.org/web/20141214141822/http://www.cs.berkeley.edu/~daw/papers/ddj-netscape.html https://web.archive.org/web/20141214141822/http://www.cs.ber...
- justintocci 11y agoUnderstood. Working on it now.
- justintocci 11y agoFixed!