this post was submitted on 06 Nov 2023
469 points (94.2% liked)

memes

10217 readers
3475 users here now

Community rules

1. Be civilNo trolling, bigotry or other insulting / annoying behaviour

2. No politicsThis is non-politics community. For political memes please go to [email protected]

3. No recent repostsCheck for reposts when posting a meme, you can only repost after 1 month

4. No botsNo bots without the express approval of the mods or the admins

5. No Spam/AdsNo advertisements or spam. This is an instance rule and the only way to live.

Sister communities

founded 1 year ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 5 points 1 year ago* (last edited 1 year ago) (3 children)

It’s not just about not wanting random, but randomness is actually very hard to create. Every random number is actual pseudo random

Some basic breakdowns of this concept:

https://slate.com/technology/2022/06/bridle-ways-of-being-excerpt-computer-randomness.html

The problem modern computers have with randomness is that it doesn’t make mathematical sense. You can’t program a computer to produce true randomness—wherein no element has any consistent, rule-based relationship to any other element—because then it wouldn’t be random. There would always be some underlying structure to the randomness, some mathematics of its generation, which would allow you to reverse-engineer and re-create it. Ergo: not random.

Kid friendly version:

https://stackoverflow.com/a/633085

[–] [email protected] 10 points 1 year ago* (last edited 1 year ago) (1 children)

Every random number is actual pseudo random

No, there are true random sources in a computer. Any outside input can be used to generate randomness. Mostly user input, but temperature fluctuations can work as well, if the sensor precision is high enough.

Also the argument is only correct on a technical level for PRNGs. Choose a 65535 sided dice and make the instructions a thousand steps long and you'll have a pretty hard time to deduce the instructions from the generated numbers. Not to mention how long the list of numbers needs to be for the attacker to start guessing.

[–] [email protected] 1 points 1 year ago (2 children)

It is all based upon calculations with known numbers.

A computer can't create a number out of nothing.

That is why Cloudflare uses lava lamps to generate random numbers for their cryptography. And even those aren't fully random.

[–] [email protected] 7 points 1 year ago

Modern cpus actually do have trng hardware built in. So yes, modern computers can create numbers out of nothing, because they have specialized hardware to do so

[–] [email protected] 3 points 1 year ago (1 children)

No, CloudFlare doesn't use lava lamps to generate random numbers, that was a marketing stunt. Using a camera in a completely dark room is a better source of entropy than one pointed at lava lamps.

Also, nobody is saying that computers create a number out of nothing. The environment is a great source of entropy (temperature fluctuations, user inputs and so on) which are then expanded into a larger amount of entropy through CSPRNGs.

[–] [email protected] 1 points 1 year ago (1 children)

Using a camera in a completely dark room is a better source of entropy than one pointed at lava lamps.

Why is that? Naturally occurring or manufacturing-related impurities in the optical chip?

[–] [email protected] 1 points 1 year ago

All digital cameras are imperfect - there is always a bit of noise, but usually it doesn't come through since your scene is bright enough to make small amounts of noise imperceptible. In a completely dark room the camera still tries to get data from the photo sensor, but the noise (created by temperature fluctuations, imperfections in the chip itself and so on) is all you get. You may theoretically be able to predict the noise on short time scales, but it's a chaotic system.

[–] [email protected] 9 points 1 year ago

For the purpose of shuffling a playlist pseudo random is indistinguishable from truly random in all the ways that matter anyway.

[–] [email protected] 1 points 1 year ago

This is an irrelevant distinction for any case where you aren't worried about someone reverse engineering the algorithm and seed by logging output. Any half decent PRNG's output will be statistically indistinguishable from true randomness.