4 ms·
> Linux security was significantly reduced at one point because somebody changed int i to int i=0 Could you please elaborate on this one?
by quasque 12y ago
> Linux security was significantly reduced at one point because somebody changed int i to int i=0
Could you please elaborate on this one?
- nikbackm 12y agoSeems to me they relied on the uninitialized memory of a stack variable as a partial source of randomness for key generation. Initializing the variable with 0 removed that part.
- quasque 12y agoYour explanation makes sense. Though I'm still curious as to when this happened and what the impact was.
- SoftwareMaven 12y agoIt's been a while. I should have restricted it to Debian: http://jblevins.org/log/ssh-vulnkey http://jblevins.org/log/ssh-vulnkey