Discover and read the best of Twitter Threads about #randomness

Most recents (2)

"Life did not invent #DNA."

Experimental support for the #hotsprings hypothesis for life's origin: David Deamer of @ucsc on nucleic acid polymerization in the wet-dry cycling of Darwin's "warm little pond," powered by #geothermal. Lab results confirmed in #hydrothermal pools.
From "boring statistical partitioning" in the fission of early protocells to the complex #homeostasis-driven #mitosis of the cells we know - Doron Lancet of @WeizmannInstSci on the gradient between closure of #autocatalysis #networks to complex regulatory mechanisms of #biology.
"Life is an integrated nested network of dynamic #kinetic cycles."

Addy Pross emphasizes the importance of motion to the persistent forms of self-organizing #complexsystems at SFI today
Read 13 tweets
So I wanted to encrypt some files. Thought about using 7z+password. Stackexchange folks said "Didn't review it but it should be fine. You can browse the code yourself". So I did. After a few mins I noticed they use 8byte "random" IV. Yes, half of IV is zeroes. But it gets worse.
Aside from the fact that 7z XORs plaintext with zeroes, I was curious about the "RandomGenerator" which generates IV. That's when I vomited. The first comments say "This is not very good random number generator. Please use it only for salt." It is not used only for salt.
Yes, it uses PID and time(null) as seed. Yes, this is 7zip's random generation code running on your computers in 2019. More "cursed" code below. #7zip #encryption #facepalm #randomness #entropy #RNG #crypto #cryptofail
Read 9 tweets

Related hashtags

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!