~/talk

lol im so random!

Talkat RailsConf 2016 · 2016-05-04..05-06· [security, web-platform]
slides:none on file

Covers where Math.random() and other language PRNGs get their bits, shows that PRNGs are seeded state machines and that Mersenne Twister has an astronomic period yet is not cryptographically secure, points out V8’s generator weakness and its December fix, compares Diehard and TestU01 test suites, explains CSPRNGs like Yarrow and kernel dev/random entropy pools, and demos concrete artifacts: bash lookbusy, rolling dice from /dev, music from dev random, and the 10 PRINT pattern generator.

AI-written summary · about

  1. 0:00Start
  2. 3:36Pseudorandom Number Generator (PRNG)
  3. 5:25"Functional code is characterized by one thing: the absence of side effects. It doesn't rely on data outside the current function, and it doesn't change data that exists outside the current function." Mary Rose Cook
  4. 10:23The Mersenne Twister ... is completely unsuitable for cryptographic purposes.
  5. 10:35Mersenne Twister is not cryptographically secure.
  6. 11:23Cryptographically Secure Pseudorandom Number Generator (CSPRNG)
  7. 11:40Yarrow Bruce Schneier and John Kelsey
  8. 12:00The Entropy Device
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.