Might having correlated random variables (in this case, rand and the address of main) unintentionally cause vulnerabilities like the Debian OpenSSL incident [0]?
[0] https://lists.debian.org/debian-security-announce/2008/msg00...
[0] https://lists.debian.org/debian-security-announce/2008/msg00...
No comments yet.