Alex Levinson

icon indicating a website link https://twitter.com/alexlevinson icon indicating an email [email protected]

icon company Head of Security at @scaleapi icon location San Francisco, CA icon location #InfoSec, #RedTeam, Golang Dev, FOSS advocate, hacker. Chaotic Good.

Results 2 issues of Alex Levinson

Math.random() is not a cryptographically secure way to generate UUIDv4s

2 comment

https://github.com/stripe/stripe-node/blob/ec960ead66f9942d68804f1a91dce8988d8d9660/lib/utils.js#L409 The function uses an outdated method of generating UUIDv4s that does not follow current PRNG guidance for UUIDv4 generation. The referenced comment above the function (https://stackoverflow.com/a/2117523) has an updated...

Test your might

CC: @davehughes https://gist.github.com/gen0cide/653b63f0ff4b5335853a475180c76fef ![my thoughts](https://homesteading.news/wp-content/uploads/sites/47/2016/03/chicken-egg.jpg)