> we can't drop the /dev/urandom fallback, it would break too many decade-old kernels
Ok. Fine. But we're getting a seccomp self-executing test that tests the fallback *and* itself and then another test that tests that the fallback runs only under test.
Also the fallback is slow.
(Again multiple hours of work for 21 lines of production change, but I am very happy that there are precisely three new lines in the "most Go programs depend on this for security" code path.)
https://go.dev/cl/608175
Filippo Valsorda :go: /
npub1wh…akn2m
2024-08-24 20:19:53
Author Public Key
npub1whzyg92c6fsvpjjcnn504z0a2pfwenctp872sgmedqg2np4drj8qwakn2mPublished at
2024-08-24 20:19:53Event JSON
{
"id": "9551fb692af60563380bfa4fa7c89ad8bc4bb4b2ad289340cb887dbc5b3cd54e",
"pubkey": "75c4441558d260c0ca589ce8fa89fd5052eccf0b09fca823796810a986ad1c8e",
"created_at": 1724530793,
"kind": 1,
"tags": [
[
"proxy",
"https://abyssdomain.expert/users/filippo/statuses/113018850084030654",
"activitypub"
]
],
"content": "\u003e we can't drop the /dev/urandom fallback, it would break too many decade-old kernels\n\nOk. Fine. But we're getting a seccomp self-executing test that tests the fallback *and* itself and then another test that tests that the fallback runs only under test.\n\nAlso the fallback is slow.\n\n(Again multiple hours of work for 21 lines of production change, but I am very happy that there are precisely three new lines in the \"most Go programs depend on this for security\" code path.)\n\nhttps://go.dev/cl/608175",
"sig": "87ad8ade0c0edf4b18ce41cdd597b44a03c4ff7cac833e4f320ef84db9c6be5695491e95d625d7da4b485d7c251e04ced396c8260b4d0f485e35f8d459962702"
}