[HN Gopher] How a Bad Random Number Generator Froze Sway (2020)
___________________________________________________________________
How a Bad Random Number Generator Froze Sway (2020)
Author : askl
Score : 17 points
Date : 2021-03-15 08:34 UTC (14 hours ago)
(HTM) web link (theavid.dev)
(TXT) w3m dump (theavid.dev)
| captaincrowbar wrote:
| Why does a JSON parser need a random number generator anyway?
| SolarNet wrote:
| The only usage is here:
|
| https://github.com/json-c/json-c/blob/df27756491abf9ecce648c...
|
| Which appears to be part of the hashtable implementation for
| the json objects.
| dajoh wrote:
| It seems json-c uses a random number generator to get a seed
| that it then uses for string hashing. This is one way of
| protecting yourself against hash denial-of-service attacks.
|
| https://github.com/json-c/json-c/blob/df27756491abf9ecce648c...
___________________________________________________________________
(page generated 2021-03-15 23:01 UTC)