tech-install archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: recent sysinst UX changes



On Mon, Nov 09, 2020 at 09:53:50AM -0500, Mouse wrote:
> > So: happy to make it more userfriendly, simpler, rephrase messages,
> > whatever needed - but we should not end up with insecure installs.
> 
> Lack of good randomness does not quite equal insecure install.  Warn
> about it, sure, but I think *requiring* randomness is a bad idea.  For
> example, I've been working with recent NetBSD at work, for something
> for which the presence or absence of good random-seed data makes
> absolutely no difference to security.

Unfortunately it leads to surprise failures if programs ever use
/dev/random. If not seeded, reads from it will block forever.
So far we've seen:
- Firefox refusing to start
- Python having problems
And some more things that have been patched not to use /dev/random.


Home | Main Index | Thread Index | Old Index