3 ms·
this is out of scope for the project, it is insane to expect every software project to deal with random file system corruptions. if this kind of thing was consi
by dodomodo 1y ago
this is out of scope for the project, it is insane to expect every software project to deal with random file system corruptions. if this kind of thing was considered a security vulnerability we would have 100x the vulnerabilities we have now.
- Eikon 1y agoThere's a distinction between "Corrupted seed" and corrupted PK / password. The seed is provided without validation or checksuming, generating perfectly valid keys on the fly from unknown entropy quality. If you have bad entropy (partially or fully corrupted/weak seed), you'll generate valid-looking keys that are actually insecure. There's a reason there's not a single "end-user" crypto-related app / cli tool or server that takes a user-specified arbitrary seed as input. That's dangerous, broken design. Why would you even do that?