Linux random number generator is insecure

[gil]

Recent new from the Linux world:

Israeli scientists: Linux random number generator is insecure
A recent paper (pdf) details how flaws in the random number generator embedded in the Linux kernal expose critical security vulnerabilities. One particular attack is laid out. (link (http://digg.com/linux_unix/Israeli_scientists:_Linux_random_number_generator_ is_insecure))

http://www.pinkas.net/PAPERS/gpr06.pdf


Nothing is perfect.

[KizZamP-]

israel ftw :P
and gil,tbh it wasn't that smart to post about this,some people know how to do this shit to other people so,just warning you :).

[gil]

israel ftw :P
and gil,tbh it wasn't that smart to post about this,some people know how to do this shit to other people so,just warning you :).

You're funny. You think I found about it? lol. It was on the news...
And yes, it can cause a lot of shit. Encryption is based on random as well.

[Ping_pong]

Well, as long BSOL* wont exist ;) I dont care.

Every piece of software is programmed by humans, humans make mistakes and NOTHING can be pefrect...

*Blue screen of LINUX

[therealD4RkSouL]

thanks for info :>

so i recognice not only windoof suck^^

[luck777jojo]

the fact is all "random" numbers generated by any computer system are only psudo-random, there are only a few things needed to know to predict thwe random outcome (the initial seed being one of those things). If you know the initial seed for the lottery you can pretty much predict (with a very small percentage of mistake) what the winning numbers will be.

[Conker]

ummm just wondering

can you dual boot linux and windows? i might get linux but i'm worried about capatabilities with games

[C-X]

thx for the info gil :)

windoof
what the f*ck is a "windoof"?!


can you dual boot linux and windows? i might get linux but i'm worried about capatabilities with games
i dont see why not

[luck777jojo]

there's an entire subforum in tech support related to linux and it has info on setting up a dual boot linux system etc.

[gil]

the fact is all "random" numbers generated by any computer system are only psudo-random, there are only a few things needed to know to predict thwe random outcome (the initial seed being one of those things). If you know the initial seed for the lottery you can pretty much predict (with a very small percentage of mistake) what the winning numbers will be.

It's not always possible to know the outcome, that's why it's a problem over here.

[luck777jojo]

actually it is, the forumla that computers use to generate "random" numbers is well known you just need to know the inital starting values and you can follow it through in exactly the same way as a computer would. That is why in programming if you need a random number you usually set the seed to the the time, that way it's hard to duplicate the exact same results.

double randGen()
{
const uint32 add = 19, mult = 85, modu = 4194304UL;

static uint32 seed = startSeed; //get startSeed from the global value only ONCE

seed = (seed * mult + add) % modu;

return fabs(seed) / modu;
}

That should work in C++ I think :x (haven't tested it before posting so not sure but I don't think I messed up anything)

[Alias7777]

You and your Israel, Gil ;)

I'd come there if it wasn't for the god damn 23 hour flight.

I can't do more than 9, let alone an entire day. If I were, it would HAVE to be at least business class with a bed, and no one is ever going to pay for that :(

P.S. If you ever become rich in the future buy me a first class ticket to Tel Aviv Int'l. kthx

[luck777jojo]

meh seriously if it's 23 hours you need to be business class WTF?! :P

I mean c'mon I have handled 18 hour flights in coach and I'm fine, I'm sure I can handle another 5 hours. Plus I'm sure you can find cheaper flights if you have multiple stops and thenyou have to sit in one place less time at once, you can alternate between sitting on the plane and sitting at the airport :P

[gamer4life117]

ok yah...

where the hell exactly are u going?

[SATIVAbr]

better one tiny vulnerability that will be fixed really soon that a OS that is full of critical vulnerabilities aka windows.

[gil]

better one tiny vulnerability that will be fixed really soon that a OS that is full of critical vulnerabilities aka windows.
Correct.

But it's a begining of a new era.
there might be one after another now.