Hacker News new | past | comments | ask | show | jobs | submit login

I think authors already did admit that introducing two rand packages was a mistake, so they're now just correcting (most) programs automatically so that the existing packages become more secure, and raising awareness that math/rand should no longer be used. I think it's the best they can do in this situation



They're also choosing to make math/rand/v2 use the cryptographic generator.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: