General Tech
When random is not actually random enough
Researchers at the European Research Center for Software-Defined Networking (ERSC) have identified a flaw in the way modern operating systems generate random numbers. This issue affects Linux, macOS, and Windows, as well as other platforms that rely on the same algorithms. The problem arises because the operating systems use a pseudorandom number generator that is based on the system's clock, which can be synchronized with other devices on a network. This synchronization can compromise the randomness of the generated numbers, making them predictable and vulnerable to attacks. The researchers have proposed a new algorithm that uses the system's CPU temperature as a source of randomness, which is less susceptible to synchronization attacks.
Read the full article at ersc.io →