Monthly Archives: August 2008

Watch out for those random numbers!

The improper use of random number generators can lead to major security vulnerabilities in an application. For example, suppose you are using a language’s built-in random number generator for creating temporary passwords (like to reset someone’s password). Then, it could be possible for an attacker to hijack the account of anyone on the site! This is [...]
Posted in Security | 3 Comments