Yet another case of trying to be too clever with randomness!
Monthly Archives: February 2010
Security is not easy
Update: After a year, both plugins are finally updated with a better random key generator. Security is not easy. Programmers should leave things like random number and identifier generation to a library (or at least research the best way to do it). A lot of projects learned it the hard way. Let’s talk for instance [...]
Posted in PHP, Symfony Tagged entropy, full disclosure, PHP, random numbers, security, Symfony 8 Comments
