https://wiki.owasp.org/index.php?action=history&feed=atom&title=Talk%3AInsecure_Randomness 2026-04-28T00:40:43Z Revision history for this page on the wiki MediaWiki 1.27.2 https://wiki.owasp.org/index.php?title=Talk:Insecure_Randomness&diff=50109&oldid=prev 2009-01-05T14:54:41Z

<p>New page: The example isn&#039;t very wel chosen in my opinion: a better PRNG (e.g. SecureRandom for Java) doesn&#039;t really help in this example since the seed can be pretty easily guessed. It exposes othe...</p> <p><b>New page</b></p><div>The example isn't very wel chosen in my opinion: a better PRNG (e.g. SecureRandom for Java) doesn't really help in this example since the seed can be pretty easily guessed. It exposes other vulnerabilities such as a timing attack when a second request is done within the same millisecond.<br /> <br /> As a control I'd suggest mentioning that you should create a PRNG only once and reuse it instead of creating a new one each time. Or maybe that's another vulnerability...</div>

Arjanl