I'm just saying, a major criticism of PHP is that it is too easy to program with it and doesn't include many cryptographic functions, mainly outsourcing it to the OpenSSL library.
https://www.usenix.org/system/files/con ... nal218.pdf
[quote:1haaocnd]Mediawiki.
Mediawiki is a very popular wiki appli-cation used, among others, by Wikipedia. Mediawiki uses mt rand() in order to generate a new password when the user requests a password reset. In order to predict the generated password we use the seed recov- ery attack of section 4.3. The function f that we sam- ple is the one used to generate a CSRF token which is the following:
Outsourcing secure RNG plugins to third parties who may or may not be properly maintaining the plug-in is an issue.
Multiplayer is worthless without means of preventing players from cheating at certain types of games. In a turn based game, one might be able to predict the results of one's own actions or that of an enemy player, or the types of resources/points/cards a player would receive.
My points are salient.
While I don't think javascript can ever protect against Eve, the issues of dealing with Alice and Bob still exist.