News for hackers. Stuff that matters.

A comment on Hidden in plain sight: Brute-forcing Slack private files. Parent comment

Re:Hidden in plain sight: Brute-forcing Slack private files by relaxnow on Friday November 06, 2015 @09:36AM (#10519639)
Don't forget that it should ideally be cryptographically random. If the sequence is predictable (like based on an auto incrementing number or on time) then you might still be able to guess a 256-bit number.
[ Parent | on HN ]
Re:Hidden in plain sight: Brute-forcing Slack private files by wtbob on Friday November 06, 2015 @11:15PM (#10523680)
> Don't forget that it should ideally be cryptographically random.

I thought that went without saying, nut yes, it must be cryptographically random (not ideally—it must be).

[ Parent | on HN ]