LINUX.IE, website of the Irish Linux Users' Group
Tux rules!

   
Home
New Users
Articles
Download
Projects
Community
Vendors

  Print Version
Email to...
 
Archives:


planetILUG

Recent News

News Archive


Join the
ILUG
on FaceBook


Join the
ILUG
on LinkedIn


Join the
ILUG SETI
Group



















 
 :: Mailing Lists

[Way OT] RE: [ILUG] serious Debian/Ubuntu security hole found

[Way OT] RE: [ILUG] serious Debian/Ubuntu security hole found

Timothy Murphy gayleard at eircom.net
Fri May 16 20:16:49 IST 2008


On Friday 16 May 2008 02:47:04 pm Colm Buckley wrote:

> Most purely numeric RNGs have
> the disadvantage that they are highly predictable if the initial conditions
> are captured - the OpenSSL weakness discussed here falls into this
> category; the ill-advised patch removed almost all of the unpredictable
> components of the RNG seed, leaving a very small keyspace.

You might as well say that if the printer attached to your quantum device
gets stuck printing out 0's then the quantum device must be at fault.

Actually, I don't think the Ubuntu SSL error was that bad.
I very much doubt if anyone broke anybody's code.
As far as I can see, most System Administrators suffer from paranoia.
I'm amazed at the number of people who are convinced they have
something of supreme value on the hard disk of their laptop.

"Every thing secret degenerates, even the administration of justice;
nothing is safe that does not show how it can bear discussion and publicity."
Lord Acton

-- 
Timothy Murphy  
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland



More information about the ILUG mailing list
Read this without the formatting.
                                                                                                    

 

Hosted by HEAnet


Maintained by the ILUG website team. The aim of Linux.ie is to support and help commercial and private users of Linux in Ireland. You can display ILUG news in your own webpages, read backend information to find out how. Networking services kindly provided by HEAnet, server kindly donated by Dell. Linux is a trademark of Linus Torvalds, used with permission. No penguins were harmed in the production or maintenance of this highly praised website. Looking for the Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
RSS Version
Powered by Dell