On Pá, 2016-11-11 at 13:20 -0500, Stephen Gallagher wrote:
I think this is extreme overkill for something that doesn't need
to
be
cryptographically sound. It literally just needs to be eight
characters with a
sensible random distribution. I considered using some non-reversible
transformation of machine-id for this simply because I wanted to
avoid trying to
consume any of the entropy in /dev/random since we'd be doing this
early in the
installer (when entropy tends to be at a premium). Maybe that was
overkill and I
should just pull from /dev/random.
Please, please, do not mention use of /dev/random at all. Use
/dev/urandom.
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb
(You'll never know whether the road is wrong though.)