3 ms·
I don't know what these are used for, but secret keys generated from current time are easy to guess. You only have to try around 2^24 values if you can estimate
by avian 10y ago
I don't know what these are used for, but secret keys generated from current time are easy to guess. You only have to try around 2^24 values if you can estimate installation time within a specific year.
https://github.com/lesspass/lesspass/blob/master/lesspass.sh#L16 https://github.com/lesspass/lesspass/blob/master/lesspass.sh...
- mgliwka 10y agoThe SECRET_KEY is used by Django, see here: https://stackoverflow.com/questions/7382149/django-secret-key https://stackoverflow.com/questions/7382149/django-secret-ke... EDIT: I've created a issue on GitHub about this. (https://github.com/lesspass/lesspass/issues/43 https://github.com/lesspass/lesspass/issues/43)
- deleted 10y ago[deleted]
- lloeki 10y agoI always wondered why people resorted to `date(1)` when there's `random(4)`: $ xxd -l 20 -p /dev/random 669d8372d63897e37776d05dc8acccbacf26befc