4 ms·
How/why was the randomness part not "solveable" via using fixed seeds?
by pas 5y ago
How/why was the randomness part not "solveable" via using fixed seeds?
- bruce343434 5y agothe security benefit of things like stack canaries rest on them being random and not known beforehand, I guess. Otherwise stack smashing malware could know to avoid them.
- mananaysiempre 5y agoWait, how is that relevant? Nothing says stack canaries have to use the same RNG as the main program, let alone the same seed, and there are cases such as this one where they probably shouldn’t, so it makes sense to separate them.