May 10, 2023, 7:50 a.m. | SmartScanner

DEV Community dev.to

Random numbers are everywhere on the web, and your security depends on them. Let's see if you're using them right.


Random numbers play a critical role in web application security. They are used in session identifiers, passwords, cryptographic keys, and more. However, if not implemented securely, they can lead to vulnerabilities that attackers can exploit to gain unauthorized access to sensitive information.





TLDR



  • Most random generators are not really random. They use math that looks random

  • Do not use Math.random() …

application application security coding critical cryptography function javascript keys node numbers passwords play random random numbers role secure coding security session the web vulnerabilities web web application web application security

Lead Security Engineer

@ JPMorgan Chase & Co. | Tampa, FL, United States

GTI Manager of Cybersecurity Operations

@ Grant Thornton | Tulsa, OK, United States

GCP Incident Response Engineer

@ Publicis Groupe | Dallas, Texas, United States

DevSecOps Engineer - CL - Santiago

@ Globant | Santiago de Chile, Santiago, CL

IT Security Analyst - State Government & Healthcare

@ NTT DATA | Little Rock, AR, US

Exploit Developer

@ Peraton | Fort Meade, MD, United States