Re: HEADS UP! New (incomplete) /dev/random device!

[Jeroen C. van Gelderen]

Mark Murray wrote:
> 
> > On Sun, 25 Jun 2000, Warner Losh wrote:
> >
> > > Some days is OK, imho.  Much more than that and I'd begin to worry.
> > > Much more than a week or two and I'd worry a lot.  I'll go put a note
> > > in updating right now.
> >
> > That's okay with me too. People should just not upgrade their work
> > machines for the next few days until entropy is fixed.
> 
> Upgrading is fine; just don't build certificates/credentials.

Upgrading is *not* fine. Everything that uses high-quality
randomness is broken. This includes SSH, PGP, GnuPG, 
Apache/SSL random pid generation and what not. No, upgrading 
is not fine at all.

Cheers,
Jeroen
-- 
Jeroen C. van Gelderen          o      _     _         _
[EMAIL PROTECTED]  _o     /\_   _ \\o  (_)\__/o  (_)
                      _< \_   _>(_) (_)/<_    \_| \   _|/' \/
                     (_)>(_) (_)        (_)   (_)    (_)'  _\o_


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message