On Wed, 14 May 2008, Colm Buckley wrote:
> 2) A inept bug fix by Debian.
>>> ... by *a Debian contributor*.
What's the difference?
> Debian is one of the largest Free Software projects out there; it's
> not ideal to attribute ineptness to the whole because of this
> incident.
Everyone's entitled to their brown-paper bag moments. It doesn't seem
from the comments on the bug that it got much in the way of review
though (unless Debian has seperate review areas?). So Debian at least
may have to think about processes...
> attempts sufficiently difficult". Sources like /dev/urandom generally
> make use of entropy sources which are *extremely* difficult to replicate
> or guess at, and as such are almost as good as a true physics-based RNG
> from the point of view of a PKI.
Presuming they've been seeded correctly. Interestingly, one of the
major Linux distros had issues with their LiveCD generating some kind
of duplicate identifier, traced to bad seeding..
regards,
--
Paul Jakma paul at clubi.iepaul at jakma.org Key ID: 64A2FF6A
Fortune:
The English country gentleman galloping after a fox -- the unspeakable
in full pursuit of the uneatable.
-- Oscar Wilde, "A Woman of No Importance"
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
