Upgrade to Pro — share decks privately, control downloads, hide ads and more …

ErLounge 10-MAR-2016: Use rand module (on Erlang/OTP and Elixir)

ErLounge 10-MAR-2016: Use rand module (on Erlang/OTP and Elixir)

A public service announcement of soliciting use of the rand module, which is available since Erlang/OTP 18.0, and requesting termination of using the legacy random module

Kenji Rikitake

March 10, 2016
Tweet

More Decks by Kenji Rikitake

Other Decks in Programming

Transcript

  1. We Interrupt Your Regularly Scheduled Programming to Bring You A

    Public Service Announcement 1 — Kenji Rikitake / ErLounge 10-MAR-2016
  2. Use rand module now1 1 Unless you stick to the

    older Erlang/OTP or Elixir versions before Erlang/OTP 18.x 2 — Kenji Rikitake / ErLounge 10-MAR-2016
  3. The random module is obsolete and will be compromised by

    a brute-force attack in 9 hours!2 2 https://github.com/jj1bdx/as183-c 3 — Kenji Rikitake / ErLounge 10-MAR-2016
  4. Still many examples use random:uniform/1 This is not good 4

    — Kenji Rikitake / ErLounge 10-MAR-2016
  5. Stop using random module now3 3 Unless you stick to

    the older Erlang/OTP or Elixir versions before Erlang/OTP 18.x 5 — Kenji Rikitake / ErLounge 10-MAR-2016
  6. Alternatives → exsplus116, equivalent to rand module's default algorithm, for

    17.x or older versions of Erlang/OTP → sfmt-erlang (hex.pm: sfmt) → tinymt-erlang (hex.pm: tinymt) 7 — Kenji Rikitake / ErLounge 10-MAR-2016
  7. I repeat: use rand module right now4! 4 Unless you

    stick to the older Erlang/OTP or Elixir versions before Erlang/OTP 18.x 8 — Kenji Rikitake / ErLounge 10-MAR-2016
  8. random module will be deprecated in OTP 19 removed from

    OTP 20 (Officially announced by Kenneth Lundin on Erlang Factory SF Bay 2016 Day 1) 9 — Kenji Rikitake / ErLounge 10-MAR-2016