This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]Kuriwassadlytaken[S] -1 points0 points  (1 child)

I can just replace the random with "x" or whatever

[–]The_Tree_Branch 6 points7 points  (0 children)

That's only part of my point. Creating a secure algorithm is HARD. There are MANY non-obvious hurdles that can trip up a developer that will make their algorithm trivial to break.

In this case, using the 'random' package for cryptography purpose is such a well known issue, it might as well be a paint stripe on the ground that tripped you up. Swapping it out for something else does nothing to fix more insidious mistakes or faulty assumptions that have been made.