On Sun, 5 Jul 2009 13:08:38 +0000 (UTC) Thorsten Glaser wrote: > If arc4random(3) is available¹, lynx uses it. I sent in a patch > for that years ago. Otherwise, there is no good self-seeding SRNG > available in the standards, so it will use lrand48(3) instead², > with a fallback to rand(3) like everyone else.
i'm triaging this issue for linux, and i don't believe that it has an arc4random implementation. so this would mean that lynx is using the very insecure linear congruential algorithm and is thus affected by this issue? mike _______________________________________________ Lynx-dev mailing list [email protected] http://lists.nongnu.org/mailman/listinfo/lynx-dev
