Anthropic's Claude AI identified a vulnerability in the NIST P-256 random number generator, tracing its seeds to a 1997 timestamp and the `lrand48` function. Security researcher Valsorda confirmed these findings, suggesting that while no immediate rotation is necessary, users should verify their own random number generators. The second item discusses common pitfalls encountered when attempting to run AI models locally, highlighting hardware and software configuration issues. AI
IMPACT Highlights AI's capability in code auditing and vulnerability detection, prompting broader checks on random number generation.
RANK_REASON AI model identifies a specific technical vulnerability and a security researcher verifies it.
Read on Mastodon — fosstodon.org →
AI-generated summary · Google Gemini · from 2 sources. How we write summaries →