21 reputation
2
bio website aprescott.com
location
age
visits member for 1 year, 4 months
seen Aug 7 at 11:37

Jul
21
revised Allowing multiple password reset tokens, and a question on random number predictability
Further question about the point of any of this
Jul
21
awarded  Editor
Jul
21
revised Allowing multiple password reset tokens, and a question on random number predictability
Clarified question 4 about RNG bugs.
Jul
21
comment Allowing multiple password reset tokens, and a question on random number predictability
For (5) too, I'm a little confused: wouldn't the contract of a UUID value be that it shouldn't ever be reused anywhere universally? (As in the RFC notion of UUID.)
Jul
21
comment Allowing multiple password reset tokens, and a question on random number predictability
As a follow-up to (4) I mean that the random number generator is ostensibly secure but the argument is that it's coming from a user space algorithm (OpenSSL). So my question was more: Is it unreasonable to try and work around an ostensibly secure RNG's hypothetical bugs? Also the supposedly simpler strategy you have seems more complex...
Jul
20
awarded  Student
Jul
20
asked Allowing multiple password reset tokens, and a question on random number predictability