That patch is wrong - KRandom only takes an int as seed, which is
trivial to replay. (And it falls back to srand(time(NULL)) - not a good
thing, for example if an apparmor policy accidentally blocked
/dev/urandom)

QCA::Random is what you're after.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1179380

Title:
  paste widget "password" generator uses (very) insecure randomness

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kdeplasma-addons/+bug/1179380/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to