Presentation: Tweet"Predictably Random"
Random numbers are secure as long as you choose a good seed, right? This was my assumption until I actually did some reading on the topic. I found that many web developers know very little about pseudo random number generation, and in a security context, this can prove deadly. I'm going to show how simple it is, with almost no maths, to break into a system that is using random numbers badly. I'll follow this up with advice on how to safely generate secure random tokens on any platform.
Keywords: Security, code reviews, random numbers, hacking
Target audience: Any web developers that find the maths behind cryptography and pseudo random number generation scary, and anyone who is interested in delivering secure web applications.
Download slides
