Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP request

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP request
From: Michal Zalewski <lcamtuf@xxxxxxxxxxx>
Date: Wed, 6 Jul 2011 12:42:43 -0700
Cc: Full Disclosure <full-disclosure@xxxxxxxxxxxxxxxxx>, BugTraq <bugtraq@xxxxxxxxxxxxxxxxx>
In-reply-to: <CALx_OUDpY31NYVTKDJV=ixgXAJkRDGYFg8U-tUbvA7L8yODw3w@mail.gmail.com>

[ But for what it's worth, I am willing to bet that the script was
added without analyzing these subtle considerations, and that makes it
somewhat scary on its own accord. ]

/mz

References:
- Ubuntu: reseed(8), random.org, and HTTP request
  - From: Jeffrey Walton
- Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP request
  - From: Michal Zalewski

Prev by Date: Aruba Advisory AID-070611 Cross Site Scripting vulnerability in ArubaOS and AirWave Administration Web Interfaces
Next by Date: Security Advisory: CVE-2011-2516
Previous by thread: Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP request
Next by thread: [security bulletin] HPSBUX02688 SSRT100513 rev.1 - HP-UX Dynamic Loader, Local Privilege Escalation, Denial of Service (DoS)
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux