Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP- request

From: Jamie Strandboge <jamie@canonical.com>
To: noloader@gmail.com
Cc: Full Disclosure <full-disclosure@lists.grok.org.uk>,BugTraq <bugtraq@securityfocus.com>
Subject: Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP- request
Date:


On Wed, 2011-07-06 at 00:04 -0400, Jeffrey Walton wrote:
> Ubuntu's reseed(8) can be used to seed the PRNG state of a host. The
> script is run when the package installed, and anytime su executes the
> script.
> 
> reseed(8) performs a unsecured HTTP request to random.org for its
> bits, despite random.org offering HTTPS services.

Ubuntu's response can be found in the bug:
https://launchpad.net/bugs/804594

-- 
Jamie Strandboge             | http://www.canonical.com




Copyright © 1995-2019 LinuxRocket.net. All rights reserved.