Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:Why is the industry still using pseudo-randoms? (Score 1) 183

Not necessarily, because to get a decent quality unbiased random stream of bits from a simple thermal noise circuit you have to massage it quite a bit. And it may very well be sensitive to external stimuli. For example, a hacker without full access to the device could still run up the CPU and GPU to max load just before you're supposed to generate your secret key, to control the zener temperature.

Not saying it isn't better, but that "it's complicated".

Comment Re:What about banking sites? (Score 1) 183

It is my understanding from reading the paper from the security researchers that SecureRandom() is also perfectly fine as long as the implementation does what it's supposed to. In this case, the implementation was buggy, so instead of 256 bits of state they got 56 bits, or something similar. Bits were discarded that shouldn't be.

Comment Re:As always... (Score 4, Informative) 118

It's "just" the tor browser bundle and firefox portable, they link to both, where sources can be had. The custom configs are (naturally) included in this release for inspection. It seems that they configure Tor to be as fast as possible while removing some possible anonymity, and they block certain countries as exits to remove censorship. Then they have a dynamic proxy to automatically route torrent sites through Tor.

Slashdot Top Deals

As the trials of life continue to take their toll, remember that there is always a future in Computer Maintenance. -- National Lampoon, "Deteriorata"

Working...