Hacker News Reader

Cloudflare? Wonder if any were pointed at their lava lamps ;)

Yeah, I wonder if the hackers had the same feed used to generate Cloudflare's randomness... that could be a vastly bigger security breach on top of this one.

If their blog posts are to be believed [0], lava lamps are not the only source of entropy available.

> Hopefully, the primary sources of randomness used by our production servers will remain secure, and LavaRand will serve little purpose beyond adding some flair to our office. But if it turns out that we’re wrong, and that our randomness sources in production are actually flawed, then LavaRand will be our hedge, making it just a little bit harder to hack Cloudflare.

[0] https://blog.cloudflare.com/randomness-101-lavarand-in-produ...

No.

Reply on news.ycombinator.com