[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: real randomness for netscape - user clicking mouse
While it is true that on some versions of X you can watch mouse events on
other peoples computers, it is also true that on some versions you can
watch keyboard input. At CMU Bennet Yee wrote a program to get peoples
passwords as they typed them in using X's poor/non-existent security back
then. This was before xauth.
I still think that the low bits of the mouses X and Y positions as the
user moves the mouse around the screen are a very good source of random
bits for Netscape.
-- Vince