Don’t Use Math.Random to Create Verification Codes ⚠️#webdevelopment #webdeveloper #backend

📣 Follow Coding in Flow on social media:

[dAmiNatus]

You know shit is serious if it is included in node by default

[jjpaq]

More importantly, write as little actual crypto yourself as possible. People do PhDs on cryptography, nothing you come up with is going to be better than a standard library.

[AllanSavolainen]

For email verification it really doesnt matter, just include the account name, salt, timestamp and random, hash together and use result for you code.

[k_gold]

In fact it even looks cleaner, it takes in two arguments which should be the case most of the time

[sobrehombre]

Thanks so much! You really add value sharing your knowledge ♥

[yearsago]

Thank you for this information: crypto is available in node js by default

[cerberusrap]

He is trying to say that: This random function is pseudo-random. You cannot create "actually" random function on computer but create more sophisticated one.

[lve]

Math.random is really only predictable when you have close to the full output

[warguy]

can you explain why? Pseudorandomness(which all randomness kind of is) is still quite hard to crack

[smartsubscription]

Which vs code theme you are using..😅
I love it

[sellinangi]

Take care on full-moon nights with those werewification codes.

[lordew]

ho knows, i create random numbers for new users receiptNumbers in dart/flutter and im wait no more than 1000-2000 users from small town. i need fix that? 😅

[keinname]

fun of you to assume the rest of my code is safe enough to make this the weakest link in the chain xd

[a-yo]

Wait a random number can be guessed? Omg

[disolix_cze]

Yeah, likes someone would hack my web apps..

[rmnilin]

You hear this a lot, but no one talks about how exactly you can predict the return value of Math.random() even in the simplest case. Everyone just repeats it like a mantra, without real understanding and explanation.