[tor-bugs] #23086 [Obfuscation/BridgeDB]: GIMP Captcha uses insecure random number generator

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Aug 2 18:42:12 UTC 2017


#23086: GIMP Captcha uses insecure random number generator
----------------------------------+---------------------------
 Reporter:  cypherpunks           |          Owner:  isis
     Type:  defect                |         Status:  closed
 Priority:  Medium                |      Milestone:
Component:  Obfuscation/BridgeDB  |        Version:
 Severity:  Normal                |     Resolution:  not a bug
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
 Reviewer:                        |        Sponsor:
----------------------------------+---------------------------
Changes (by isis):

 * status:  new => closed
 * resolution:   => not a bug


Comment:

 1) /dev/urandom is not "insecure".
 2) There's no need for a CSPRNG when randomly munging pixels.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23086#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list