nullenvk :blobcat2: (nprofile…eqww)
At least they aren't hashing the output of rand(), then throwing it away and returning uninitialized stack instead, like Samsung did in a production crypto implementation a while ago!
```
char *_secureRandom(int *result) {
srand(time(0));
char *target = String_new(20,result);
String_format(target,20,"%d",rand());
target = _sha1_byte(target,result);
return target;
}
```
(the _sha1_byte() function doesn't quite do what the name implies)
Ge0rG
npub1tp…wxw26
2026-08-17 06:30:05 UTC
in reply to nevent1q…5rya
Author Public Key
npub1tpmalgm5ssjtqq7rancvdk0m8hwd5z5ts67tg4p46raqjtxgw0qqzwxw26Seen on
wss://relay.ditto.pubPublished at
2026-08-17 06:30:05 UTCEvent JSON
{
"id": "3be55910b608cc7d25abd17b67803a71b2fb011b4e4acc1a3ecbbcca435b480b",
"pubkey": "5877dfa3748424b003c3ecf0c6d9fb3ddcda0a8b86bcb45435d0fa092cc873c0",
"created_at": 1786948205,
"kind": 1,
"tags": [
[
"p",
"1454a81f0f3cd5b5c5990615998b168b4ccf74430f922dd461d1230822e37c33",
"wss://relay.ditto.pub"
],
[
"e",
"3265eaecb02eadbbaf9ccc5928d0373084ddf1a2b66ad67013cdccce4012db2d",
"wss://relay.ditto.pub",
"reply"
],
[
"proxy",
"https://chaos.social/users/ge0rg/statuses/117109437617891097",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqz322s8c08n2mt3veqc2enzck3dxv7azrp7fzm4rp6y3ssghr0sesj8eqww\nAt least they aren't hashing the output of rand(), then throwing it away and returning uninitialized stack instead, like Samsung did in a production crypto implementation a while ago!\n\n```\nchar *_secureRandom(int *result) {\n srand(time(0));\n char *target = String_new(20,result);\n String_format(target,20,\"%d\",rand());\n target = _sha1_byte(target,result);\n return target; \n}\n```\n(the _sha1_byte() function doesn't quite do what the name implies)",
"sig": "b6a2038c84646a60dae0e41340c5cb4421923af1328826da473b863a5eccc299b06820eda21cefb6180b947c3304d5c4fc678d08245bf1db6ed33898af3a0f5e"
}