SecurityFocus

[ANNOUNCE] glibc heap protection patch Dec 01 2003 07:31PM
William Robertson (wkr cs ucsb edu) (2 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 02 2003 02:03PM
Stefan Esser (stefan suspekt org) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 02 2003 05:16PM
William Robertson (wkr cs ucsb edu) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 03 2003 01:01PM
Stefan Esser (se nopiracy de) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 03 2003 10:25PM
William Robertson (wkr cs ucsb edu)

Re: [ANNOUNCE] glibc heap protection patch Dec 02 2003 11:27AM
Eugene Tsyrklevich (eugene securityarchitects com) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 02 2003 07:33PM
William Robertson (wkr cs ucsb edu) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 03 2003 07:54AM
Han Boetes (han mijncomputer nl) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 04 2003 05:42PM
Adam Shostack (adam homeport org) (1 replies)

On Wed, Dec 03, 2003 at 08:54:11AM +0100, Han Boetes wrote:
| William Robertson wrote:
| > It seems that this should be patched to use some source of randomness
| > such as /dev/random instead of time().
|
| I ported arc4random from OpenBSD to linux some time ago. All I had to
| do was to change the sysctl:
|
| http://www.xs4all.nl/~hanb/software/arc4random.tar.bz2
|
|
| I think it's a very usefull function.

Can you explain why it's better than the kernel's randomness pool?

Adam

--
"It is seldom that liberty of any kind is lost all at once."
-Hume

[ reply ]

Re: [ANNOUNCE] glibc heap protection patch Dec 04 2003 10:25PM
Jim Knoble (jmknoble pobox com)