Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Why is the industry still using pseudo-randoms? (Score 1) 183

Not necessarily, because to get a decent quality unbiased random stream of bits from a simple thermal noise circuit you have to massage it quite a bit. And it may very well be sensitive to external stimuli. For example, a hacker without full access to the device could still run up the CPU and GPU to max load just before you're supposed to generate your secret key, to control the zener temperature.

Not saying it isn't better, but that "it's complicated".

Comment Re:What about banking sites? (Score 1) 183

It is my understanding from reading the paper from the security researchers that SecureRandom() is also perfectly fine as long as the implementation does what it's supposed to. In this case, the implementation was buggy, so instead of 256 bits of state they got 56 bits, or something similar. Bits were discarded that shouldn't be.

Comment Re:As always... (Score 4, Informative) 118

It's "just" the tor browser bundle and firefox portable, they link to both, where sources can be had. The custom configs are (naturally) included in this release for inspection. It seems that they configure Tor to be as fast as possible while removing some possible anonymity, and they block certain countries as exits to remove censorship. Then they have a dynamic proxy to automatically route torrent sites through Tor.

Slashdot Top Deals

"The only way I can lose this election is if I'm caught in bed with a dead girl or a live boy." -- Louisiana governor Edwin Edwards

Working...