Yet another case of trying to be too clever with randomness!
-
Categories
- Meta (3)
- PHP (14)
- Python (1)
- Symfony (15)
- Sysadmin (5)
- Technology (1)
- Uncategorized (2)
- Webdesign (1)
- WordPress (1)
Monthly Archives: February 2010
Security is not easy
Update: After a year, both plugins are finally updated with a better random key generator. Security is not easy. Programmers should leave things like random number and identifier generation to a library (or at least research the best way to do it). A lot of projects learned it the hard way. Let’s talk for instance [...]
Posted in PHP, Symfony Tagged entropy, full disclosure, PHP, random numbers, security, Symfony 8 Comments