Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94125
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.218.51 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CAEZPtU6fqJQeQoi3gThm+Z6c5=18k1TX-5FZEnB+aphv+N1GrA@mail.gmail.com>
References: <CAPwsocFZQdU2bt0OETeJMQYBXVUkK8ygB5jTb4ML3df4GZWdVA@mail.gmail.com>
	<e4e02f09-4a29-2f25-f169-9664ae86e161@gmx.de>
	<1ee34970-76f4-e6c6-df1e-a827e3fc592d@fleshgrinder.com>
	<cdda2f52-3556-5836-9de6-4c82a98c57eb@thefsb.org>
	<25bb59bb-d9ac-5ab3-f0bb-d80e6b3fe745@fleshgrinder.com>
	<CANUQDChrXZ-6bqDkmRo2SA84fBCq+nrzJyg4vqRvY8_WN+yg2Q@mail.gmail.com>
	<55ceae84-5e24-96b4-bb0f-bd8c71c057ef@fleshgrinder.com>
	<CAEZPtU6cjoDHXeZXghHPpAVPwBwr0JTV9OzQZsmmtR9Kvw7-0A@mail.gmail.com>
	<6d6c121e-bdd4-c6d8-b376-71ba25455a30@fleshgrinder.com>
	<CAEZPtU5O8Svv=-UTTMjdEZRfMdDP8M=5mW9F9UYxmf1cr7RL-g@mail.gmail.com>
	<CAEZPtU4=o-Do36zGO+roF91S7awyY1dPPyqT-1y_BU6wGQjrSw@mail.gmail.com>
	<CAEZPtU4QPW1jd5OfFU_c_rhtX1SeiDJyYfaABD-6_UgaJkT16g@mail.gmail.com>
	<CAEZPtU5+UyPKgbVrs6892Gz3DXfL6XP5WFoH30gxAo-6vpBsFA@mail.gmail.com>
	<CAEZPtU5GYG9h7r71UvYbHkQFD7maeGhK5NmJKkgd9vaqm=39wA@mail.gmail.com>
	<1726fd34-8c3c-0af8-ab97-630cbbf13772@fleshgrinder.com>
	<edbcdcaa-8a57-d598-2bf2-234dff7c9799@gmx.de>
	<49fb7830-b186-523a-696c-39e251738bdb@fleshgrinder.com>
	<CAEZPtU7+Nm0QmdoJSiwAB9wpfvrGXvLeinY9BX6fh++E0DO0OA@mail.gmail.com>
	<CAEZPtU59juPuxSJsFmUNesxKxZnExRXSeBoKFgyrtjS8L_0YZw@mail.gmail.com>
	<CAEZPtU6=4KOEVg_jYN8tvV_CYtAZO3iS9JEYtytEzoTtqaBpMw@mail.gmail.com>
	<CAEZPtU6t2ZxEr_h5DHY2jvMWP8JU3S1RKhHu=KojvkRdObdsOg@mail.gmail.com>
	<CAEZPtU6PR5NtjjawqvrJdWLr2aHCpiJKG_2WmicSa3XifbOiTA@mail.gmail.com>
	<CAEZPtU6fqJQeQoi3gThm+Z6c5=18k1TX-5FZEnB+aphv+N1GrA@mail.gmail.com>
Date: Sun, 19 Jun 2016 23:27:42 +0700
Message-ID: <CAEZPtU5WrgkLGn1v5N3bKMhMuS1MaMVUUwL2fwCDXhP8HW4rRg@mail.gmail.com>
To: PHP internals <internals@lists.php.net>
Cc: Christoph Becker <cmbecker69@gmx.de>, Niklas Keller <me@kelunik.com>
Content-Type: multipart/alternative; boundary=001a11c0003836355a0535a411c8
Subject: Re: [PHP-DEV] [RFC] RNG fixes
From: pierre.php@gmail.com (Pierre Joye)

--001a11c0003836355a0535a411c8
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Jun 19, 2016 10:50 PM, "Fleshgrinder" <php@fleshgrinder.com> wrote:
>
> On 6/17/2016 7:18 PM, Christoph Becker wrote:
> > Consequently, we should remove rot13() as well, see
> > <http://news.php.net/php.notes/205744>.  And we shouldn't stop there as
> > include(_once), require(_once), file_get_contents() and readfile() bear
> > the risk of file inclusion vulnerabilities =E2=80=A6 ;)
> >
> > In my opinion, our job when designing the language and the core
> > libraries is not to avoid (or remove) features that can be used to
> > produce insecure software, but rather to offer additional features that
> > make it easier to produce secure software, and to document potential
> > issues and hint at better alternatives.  random_*() is such an addition=
,
> > and I don't see an urgent need to get rid of (mt_)rand().
> >
>
> Reminds me of https://github.com/rust-lang/rust/issues/32670
>
> Again, our (mt_)rand() functions are not portable, not standards
> compliant, slow, outdated, and dangerous for crypto. There was not a
> single argument why we should keep them.

I think I gave you plenty of valid usage of MT rand or rand in some
extends.

And the argument about them being dangerous for crypto is the same for any
other functions. And right, this argument is invalid.

We do not remove cars from the street because there cars accident. But we
educate and prevent them. In this case it is about educations (doc, blog
posts and all the palette of developers evangelism or whatever "spreading a
msg" is called these days).

I would appreciate that you understand our arguments. You can disagree but
cannot deny them.

> Fixing =3D BC

--001a11c0003836355a0535a411c8--