Weekly update 3
Generating a random IV is important to protect cryptography operations. In 2013 Bitcoin theft occurred owing to generation of non-random IV’s. Reading up on many resources, I found out that there was a bug in generation of random numbers in JCA (Java cryptography architecture) until API version 4.1 which lead to bitcoins being stolen from android wallets. The bug has since been patched. Above API 21 we use SecureRandom to generate IV. It uses a NativePRNG technique with true random seed from /dev/random and uses /dev/urandom to generate cryptographically strong random number for IV.
Also I learned one more thing in practice, increasing security comes at a cost of more operation time. Race conditions are a tricky thing while doing concurrency. I investigated some attacks via reflection and internal android API’s on static variables defined. I’ll report the things I find next week or whenever I’m able to easily attack on this.
I found this on Techcrunch - generating entropy from randomly moving lava lamps and ensuring security of internet traffic - incredible geek points to Cloudflare. I love the stuff that SpaceX do. They launched a satellite to provide Internet from it. That is the type of stuff every engineer wants to work on. Also wireless charging might come sooner now - they made charging using laser beams (link).
In entertainment part of my life, I binged Black mirror season 4, it has some happy endings but I liked previous seasons better. Mr robot has ended. It was not as spectacular as the previous season but hey i didn’t leave it in 3rd season - I’ll consider that a win. (Most of my friends and me have left many countless series in season 3 like Suits, Flash, Arrow etc. aka the 3rd season curse). Atoma is a great album by Dark tranquility. The way guitar solos blend is a pleasure to hear. A MGMT song called Little dark age is awesome. I was facing coder’s block when I heard it, it relaxed my mind and my block was gone. On the weekend I found a good playlist called Transistor on spotify. It’s pretty good and kept me upbeat throughout the day.
I also riced my Ubuntu 17.10 configuration a bit. It’s a bit hard to do as Gnome isn’t exactly as configurable as i3WM. But it looks pretty sleak now. Here are some current screenshots.
Articles and blog posts that I read this week.
- Secure random box
- Random Dev read box