Re:Ruby Bug: SecureRandom should try /dev/urandom first
by jhall1468 on Tuesday May 03, 2016 @10:36PM
(#11625784)
Well, to be honest, this isn't the man page creating problems; this is the Ruby core team stubbornly refusing to fix a known problem. Using the man page as justification for their refusal is both stupid and weird. Who uses the Linux man page to determine their security?
[ Parent
| on HN ]
Re:Ruby Bug: SecureRandom should try /dev/urandom first
by krzyk on Wednesday May 04, 2016 @01:23AM
(#11626386)
Well, manpage has always been the source of information, the only better one is kernel source. I think majority would choose it over what some random (an average user doesn't know experts from crypto field by their names) people wrote on a forum on the Web.
Re:Ruby Bug: SecureRandom should try /dev/urandom first
by jhall1468 on Wednesday May 04, 2016 @09:05AM
(#11628010)
I'd hope the Ruby core team is slightly above average users, and even if not, they could easily verify the claims. They selected not to purely out of stubborness and an unwillingness to admit they were wrong.