Poettering does it again

HAHAHAHAHAHAHAHAHA
I see now. You're jesting. Very funny, user.

Legacy programs. We're slowly getting better at generating random numbers while crackers also get better at exploiting not-so-great RNG, so stuff like rand() which was probably fine back when it first came out are shit nowadays.

Except his reasoning causes security problems long after boot, security problems that other init systems flat out don't have because they don't suffer from Poettering's "let's stuff everything into the init system" delusion. He could do basically the same thing by calling /dev/urandom, but doing it that early would trigger a dmesg warning and Poettering doesn't want people thinking his software is insecure.
Poettering's "solution" is so awful that a hack like having a fallback RNG function just for early boot would solve most of his approach's security problems. This isn't even Unix brain damage, this is just Poettering being his own brand of retard.

based

rand was never fine, it just simply isn't intended for cryptographic use. Lots of people implementing crypto have no clue about it, which is why you hear the technically false and it's triggering me mantra to "never implement your own crypto".

Ah, fair enough.

At this point I am convinced this is a glow-in-the-dark meme. I remember a StackOverflow question where someone asked whether rolling his own crypto algorithm to use under a thoroughly tested crypto algorithm [as in, Y(X(m)) or X(Y(m)), where X is his algo and Y is some other well known algorithm] would lower his security, or if it could help against automated NSA attacks, assuming the known encryption algo was secretly broken. Most replies just answered that he should never roll his own crypto because he could somehow leak information about the wrapping known-algo's encryption key. Fuck, they have been lobotomised into thinking crypto is some megucal mumbo jumbo or something.

If there's no entropy available and no cryptographic security required for those DNS transaction ids then why even bother with pseudo randomness instead of just using a counter starting at 0000000000000000?
asking as an electrician

No it doesn't retard. By that time it will be using the CSPRNG.

Why do people keep thinking systemd is just an init system? It's more than that. It's contains several system level components that you might want for an operating system.

It isn't "just an init system," and that's a big part of the problem. It's this clusterfuck of a software suite tied to a init system and none of it is particularly good.

I'm torn on this myself. Telling people to "just use OpenSSL lmao" certainly glows with the brightness of a thousand suns, but cryptography is such a counterintuitive field that I can still understand the sentiment. There have been insanely amateur mistakes in projects all over. Take your question for example. It seems obvious that a cascade of ciphers should be at least as strong as every single cipher, but it's not actually true in that generality. PDF related.

Spotted your problem. You should have been using libressl yesterday and recommending NaCL the day before that as a systems programming library for network encryption.

I'm actually on a LibreSSL system. LibreSSL isn't magically good code, it's still based on the rotten OpenSSL base.

you have to go back

Poettering blew this faggot the fuck out in this twitter thread, why don't you post that part OP?

The only thing Poettering BTFO here is my sides. He wouldn't need any of these clumsy hacks if he wasn't tying so much shit to his init system.

Poettering BTFO him so hard he cried about how mean Poettering was being to him

Where, in your Poettering wet dreams?

Attached: 1558490263.png (851x99, 27.1K)

It's a feature. SystemD is made by glowniggers, it's meant to make their job easier not make you more secure.

Attached: PwnieAwardSystemd.jpg (1045x769, 84.13K)

Are you okay?

Imagine being that desperate to defend a shit init system and its lolcow creator.

fuck off poettering

>twitter.com/pid_eins
how do we even know this is poettering; what kind of faggot would have his screen-name be "pid_eins"

someone like poettering would get the kosher mark immediatly

Use Evercrypt if it supports the algorithm you need.

no u

Does this trigger you, Poettering?

shouldn't the triggering be left to the hitman?

not an argument

fuck off filippo

Get raped and kill yourself, you retarded fucking faggot sack of nigger shit with down syndrome.

but why is there crypto in a init?

who hurt you?

Protip: it isn't. it includes one though

systemd is not just an init system it's a larger component of the GNU / systemd / Linux operating system

based

Time to ditch linux then.
FUCKING CIA NIGGER

They had to do something to handle services so they could introduce layman tier backdoors on disparate configurations which linux distribution had before systemd got in.
Literally anything that GNOME or Red Hat pushes diligently is some glownig shit. Well, it's the "year of making your own OS" anyways and Terry Davis was based.

Does this even matter? What crypto is systemd doing?