Skip to main content
edited body
Source Link
Pascal Cuoq
  • 80.2k
  • 20
  • 17

There are a number of answers to do with entropy (particular with GPG) which recommend running:

rngd -r /dev/urandom

This is VERY dangerous, and anyone following this advice is creating insecure GPG keys (this basically tricks the random number generator into belivingbelieving it has more entropy by feeding it'sits own data into itself).

I feel such answers are so dangerous that it should be marked in bold as dangerous, or even just deleted. But I'm interested in what the offical policy is.

There are a number of answers to do with entropy (particular with GPG) which recommend running:

rngd -r /dev/urandom

This is VERY dangerous, and anyone following this advice is creating insecure GPG keys (this basically tricks the random number generator into beliving it has more entropy by feeding it's own data into itself).

I feel such answers are so dangerous that it should be marked in bold as dangerous, or even just deleted. But I'm interested in what the offical policy is.

There are a number of answers to do with entropy (particular with GPG) which recommend running:

rngd -r /dev/urandom

This is VERY dangerous, and anyone following this advice is creating insecure GPG keys (this basically tricks the random number generator into believing it has more entropy by feeding its own data into itself).

I feel such answers are so dangerous that it should be marked in bold as dangerous, or even just deleted. But I'm interested in what the offical policy is.

Source Link
Chris Jefferson
  • 7.2k
  • 1
  • 18
  • 4

How to deal with dangerous answers

There are a number of answers to do with entropy (particular with GPG) which recommend running:

rngd -r /dev/urandom

This is VERY dangerous, and anyone following this advice is creating insecure GPG keys (this basically tricks the random number generator into beliving it has more entropy by feeding it's own data into itself).

I feel such answers are so dangerous that it should be marked in bold as dangerous, or even just deleted. But I'm interested in what the offical policy is.