News for hackers. Stuff that matters.
Re:Ruby Bug: SecureRandom should try /dev/urandom first by viraptor on Wednesday May 04, 2016 @02:31AM (#11626608)
Replacing random with urandom for one app is just one LD_PRELOAD away. Similar to https://rafalcieslak.wordpress.com/2013/04/02/dynamic-linker... you can replace open("/dev/random") with open("/dev/urandom")
Re:Ruby Bug: SecureRandom should try /dev/urandom first by throwaway2048 on Wednesday May 04, 2016 @04:12AM (#11626924)
Its much easier and less error prone to just replace the device node.
Re:Ruby Bug: SecureRandom should try /dev/urandom first by viraptor on Wednesday May 04, 2016 @04:53AM (#11627078)
I'd rather go for a limited scope. But yes, one way or another, you don't have to suffer just because someone hardcoded /dev/random in the app.