Related post https://news.ycombinator.com/item?id=7196820
When Random Isn't Random Enough: Lessons from an Online Poker Exploit
11–20 of 90 posts
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#12I admit I am a total noob here, but couldn't you make something with a TV turned to a station with just static? I have often wondered about this but lack the 'propriate schoolin'.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#13true random based on atmospheric noise: random.org
That's a bad idea. You shouldn't be trusting random.org with your random data (what if they get hacked or something).
Also if it's send over http then an attacker could listen in to the random data you were being sent (either at your end or at random.org).
Ultimately I think you'd do best to use several software methods and 2 hardware methods and just xor them all together into a single secure source of random numbers.
I mean, if you're doing this as a business the small cost of this is well worth not having to deal with your random source having issues.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#14Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#15As recent as 2010 we were finding major flaws in online poker security, here are a couple of videos I did of us sniffing hole cards out of the air because sites were lying about their use of SSL. They were using xOR encryption. Insane.
http://www.youtube.com/watch?v=4HBUe8Fb73Q http://www.youtube.com/watch?v=AAQDEXJdbQc
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#16I admit I am a total noob here, but couldn't you make something with a TV turned to a station with just static? I have often wondered about this but lack the 'propriate schoolin'.
In engineering terms, it's easier to use a reversed-biased diode as a noise source. An input circuit would transfer the diode's random waveform into a shift register as zeros and ones, until the desired word size has been assembled.
It's really quite simple, and it could produce a very high degree of randomness. It would differ from typical PRNGs in that the binary sequence could not be reproduced, no matter how much you knew about the circuit.
> I have often wondered about this but lack the 'propriate schoolin'.
That's an easily remedied problem. Remember what Mark Twain said: "I have never let my schooling interfere with my education".
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#17I admit I am a total noob here, but couldn't you make something with a TV turned to a station with just static? I have often wondered about this but lack the 'propriate schoolin'.
[deleted]
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#18As recent as 2010 we were finding major flaws in online poker security, here are a couple of videos I did of us sniffing hole cards out of the air because sites were lying about their use of SSL. They were using xOR encryption. Insane. http://www.youtube.com/watch?v=4HBUe8Fb73Q http://www.youtube.com/watch?v=AAQDEXJdbQc
Ouch, I suppose the moral of the story is don't play poker for money using a wireless connection.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#19I admit I am a total noob here, but couldn't you make something with a TV turned to a station with just static? I have often wondered about this but lack the 'propriate schoolin'.
In engineering terms, it's easier to use a reversed-biased diode as a noise source. An input circuit would transfer the diode's random waveform into a shift register as zeros and ones, until the desired word size has been assembled. It's really quite simple, and it could produce a very high degree of randomness. It would differ from typical PRNGs in that the binary sequence could not be reproduced, no matter how much…
Yeah, but AI is taking most of my free cycles at the moment. Still learning, but not much formal computer science. Thank you for responding.
Re: When Random Isn't Random Enough: Lessons from an Online Poker Exploit
#20I admit I am a total noob here, but couldn't you make something with a TV turned to a station with just static? I have often wondered about this but lack the 'propriate schoolin'.
Someone had a go at that exact idea
https://github.com/pwarren/rtl-entropy