rc.shutdown hook is not a solution (was Re: randomdev entropy gathering is really weak)

[Andrey A. Chernov]

On Mon, Jul 17, 2000 at 07:02:50PM +0200, Alexander Langer wrote:
> Thus spake Leif Neland ([EMAIL PROTECTED]):
> 
> > If you can't reach a NTP server, you are not connected to the internet. In
> > that case you don't need to worry so much about security...
> 
> That is wrong :)
> 


The reason is not security only, the reason is buggy RNG.  Imagine diskless 
keyboard-less and mouse-less slide-show machine with no rc.shutdown hooks 
since it comes with power up and goes down with power down.  This machine 
will always start with same picture because RNG have not enough enthropy.  In 
worst case we should relay only on processor registers always present, i.e.  
timers and so on.  rc.shutdown hook not solve problem completely.

-- 
Andrey A. Chernov
<[EMAIL PROTECTED]>
http://ache.pp.ru/


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message