Crazy to think of such an OG person making that mistake. I’m a total noob by comparison and I wouldn’t trust any internet connected device to generate my keys.

Reply to this note

Please Login to reply.

Discussion

yeah, though i have a special privilege in that i can write a little tool to generate them for myself and i can just check on the dependencies and functions to be certain nothing is calling the network... i have written dozens of key generators in the last 8 years

only the system random number generator can be suspect but every time a bad CSPRNG is found it is removed, this is the main non-network vulnerability, and affects TLS in a bad way that's why they fix them so fast