Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94030
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.218.42 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <55ceae84-5e24-96b4-bb0f-bd8c71c057ef@fleshgrinder.com>
References: <CAPwsocFZQdU2bt0OETeJMQYBXVUkK8ygB5jTb4ML3df4GZWdVA@mail.gmail.com>
	<e28227a3-d5b1-b971-3362-c6d31768aa44@fleshgrinder.com>
	<dd126a62-a617-8f34-b3c6-8e7cd0df4674@gmx.de>
	<CAPwsocE6FKcKnz2Q2PJiKPbi8prxnUoSvq3UAn-UtWoX19pz=g@mail.gmail.com>
	<e4e02f09-4a29-2f25-f169-9664ae86e161@gmx.de>
	<1ee34970-76f4-e6c6-df1e-a827e3fc592d@fleshgrinder.com>
	<cdda2f52-3556-5836-9de6-4c82a98c57eb@thefsb.org>
	<25bb59bb-d9ac-5ab3-f0bb-d80e6b3fe745@fleshgrinder.com>
	<CANUQDChrXZ-6bqDkmRo2SA84fBCq+nrzJyg4vqRvY8_WN+yg2Q@mail.gmail.com>
	<55ceae84-5e24-96b4-bb0f-bd8c71c057ef@fleshgrinder.com>
Date: Thu, 16 Jun 2016 09:21:46 +0700
Message-ID: <CAEZPtU6cjoDHXeZXghHPpAVPwBwr0JTV9OzQZsmmtR9Kvw7-0A@mail.gmail.com>
To: PHP internals <internals@lists.php.net>
Cc: Niklas Keller <me@kelunik.com>
Content-Type: multipart/alternative; boundary=001a1147246e6a539705355be68c
Subject: Re: [PHP-DEV] [RFC] RNG fixes
From: pierre.php@gmail.com (Pierre Joye)

--001a1147246e6a539705355be68c
Content-Type: text/plain; charset=UTF-8

On Jun 16, 2016 2:43 AM, "Fleshgrinder" <php@fleshgrinder.com> wrote:
>
> On 6/15/2016 9:31 PM, Niklas Keller wrote:
> > Quoting from PHP.net:
> >
> > PHP is a popular general-purpose scripting language that is especially
> > suited to web development.
> >
>
> Quoting from Wikipedia:
>
> > PHP is a server-side scripting language designed for web development >
> but also used as a general-purpose programming language.
>
> But let use stop that now. I already wrote that someone should come up
> with use cases for predictable random numbers other than creating
> insecure secrets. This is the main problem that needs solving, people
> using this stuff without knowing what they do.
>
> Keep in mind that anyone or anything (company) that requires predictable
> random numbers for their software (e.g. game) wants to have more control
> over distribution and ways to tweak it. Hence, they will directly
> implement it straight on their own anyways.

No they don't all do it.

There are ways to achieve what you want in a nice way while not breaking
things. Let consider them.

Cheers,
Pierre

--001a1147246e6a539705355be68c--