Re: Bad PRNGs revisted in FreSSH

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gee, is Tatu going to yell at them too? (Refer to http://slashdot.org/articles/01/02/14/1120247.shtml if you don't know what I'm talking about.) One would think that after several years of IETF work on standardizing (that which is called SecSH i

Bad PRNGs revisted in FreSSH

The newly announced FreSSH, when there is no /dev/urandom available, uses a `fallback' to seed its PRNG that consists of: int numfs, whichfs = 0; struct statfs *mntbuf; numfs = getmntinfo(&mntbuf, MNT_NOWAIT);