Get short, timely messages from Enrico Zimuel.

Twitter is a rich source of instantly updated information. It's easy to stay updated on an incredibly wide variety of topics. Join today and follow @ezimuel.

Get updates via SMS by texting follow ezimuel to 40404 in the United States
Codes for other countries

Two-way (sending and receiving) short codes:
Country Code For customers of
Australia
  • 0198089488 Telstra
Canada
  • 21212 (any)
United Kingdom
  • 86444 Vodafone, Orange, 3, O2
Indonesia
  • 89887 AXIS, 3, Telkomsel
Ireland
  • 51210 O2
India
  • 53000 Bharti Airtel, Videocon
Jordan
  • 90903 Zain
New Zealand
  • 8987 Vodafone, Telecom NZ
United States
  • 40404 (any)

ezimuel

  1. @KevinSMcArthur @marshray Based on our conversation I changed the RNG in #zf2 github.com/ezimuel/zf2/bl… Thanks for your feedbacks.
  2. @KevinSMcArthur thanks again for your time, I will ping you in the future if you don't mind. Comments are always welcome.
  3. @KevinSMcArthur that is a good suggestion and maybe can be a problem. I'm checking it right now.
  4. @KevinSMcArthur again, I'm not mixing predictable sources. I don't know how to explain this, please see the code.
  5. @KevinSMcArthur The actual implementation is not based on RFC 4086, the future implementation will be.
  6. @KevinSMcArthur I know NIST standards but these are for testing randomness, the RFC 4086 is about implementation ietf.org/rfc/rfc4086.txt
  7. @KevinSMcArthur thanks for your feedbacks
  8. @KevinSMcArthur anyway we are working on a new random generator for ZF2 based on RFC 4086, framework.zend.com/wiki/display/Z…
  9. @KevinSMcArthur did you read my article and the implementation? Please do, this exactly what we did: github.com/zendframework/…
  10. @KevinSMcArthur this can be a problem of the system configuration, the /dev/urandom is the best entropy source available in Linux box
  11. @KevinSMcArthur I know the attack of Samy, and not sammy :)
  12. @KevinSMcArthur when /dev/urandom is become predictable?
  13. @KevinSMcArthur The session_id problem of PHP was related to the weakness of the internal RNG and not because the use of /dev/urandom
  14. @KevinSMcArthur why the entropy should be lesser? We XOR 3 sources so it must be secure at least as the best of the three.
  15. @KevinSMcArthur /dev/urandom is only one of the sources used in the mix strategy, we used also the OpenSSL and the MCrypt extensions
  16. A new post on my blog "Cryptography made easy with #ZF", zimuel.it/en/english-cry… and tomorrow a webinar on the same topic, zend.com/en/company/new…
  17. @andreasosso grazie della segnalazione, ho corretto il problema.
  18. I've got one good lookin' @mojoLive Profile. Stare at my superiority! mj.tl/8q