real randomness for netscape - user clicking mouse
Vincent Cate
vince at offshore.com.ai
Tue Sep 26 12:42:27 PDT 1995
While it is true that on some versions of X you can watch mouse events on
other peoples computers, it is also true that on some versions you can
watch keyboard input. At CMU Bennet Yee wrote a program to get peoples
passwords as they typed them in using X's poor/non-existent security back
then. This was before xauth.
I still think that the low bits of the mouses X and Y positions as the
user moves the mouse around the screen are a very good source of random
bits for Netscape.
-- Vince
More information about the cypherpunks-legacy
mailing list