Skip to content

IV Using an insecure random number interface #75

@kexinoh

Description

@kexinoh

Here rd is used as a random number, but it is an insecure random number interface used to generate iv.
The specific address is:
https://github.com/IABTechLab/uid2-client-java/blob/main/src/main/java/com/uid2/client/Uid2TokenGenerator.java#L40.
You are advised to switch to secureRandom().

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions