Bugtraq mailing list archives

Re: VNC authentication weakness


From: Jose Nazario <jose () monkey org>
Date: Fri, 26 Jul 2002 11:38:46 -0400 (EDT)

On Thu, 25 Jul 2002, Mitch Adair wrote:

Actually it appears that /dev/urandom does deplete the randomness pool
in Linux at least (and you sortof concede this later in your post I
think.) I will quote a comment from
/usr/src/linux-2.4.19rc1/drivers/char/random.c

maybe i'm missing something, but why not pull a PRNG seed from
/dev/random?

___________________________
jose nazario, ph.d.                     jose () monkey org
                                        http://www.monkey.org/~jose/


Current thread: