Ask HN: Have you created programs for only your personal use?

Re:Ask HN: Have you created programs for only your personal ... by lucb1e on Wednesday April 13, 2022 @07:40PM (#31021685)

I posted some advice in a sibling thread, <https://news.ycombinator.com/item?id=31021503>, that applies here as well:

> Please don't use $RANDOM or $((RANDOM)) or standard `shuf` for password generation. These RNGs are not cryptographically secure. Use input from /dev/urandom instead.

[ Parent | on HN ]

Re:Ask HN: Have you created programs for only your personal ... by LeoPanthera on Wednesday April 13, 2022 @08:13PM (#31021926)

You can do this with "shuf --random-source=/dev/urandom".

The same with gshuf.

I use an alias to add this switch by default.

[ Parent | on HN ]

Re:Ask HN: Have you created programs for only your personal ... by lucb1e on Friday April 15, 2022 @08:01AM (#31039190)

When using shuf for cryptographic purposes, I'd first check if it advertises as being able to be a secure cryptographic token generator when provided with a secure random source. It might very well use modulo operations, for example.

[ Parent | on HN ]