dunnot, to me it looks like they just wanted to have some max value of the datatype

everything is in the document on how to securely use everything just read it and you gonna be just fine

@X_Techno_Pro one last question.... What does libsodium use as a source of entropy for getting cryptographically secure random numbers?

on Unix based/like system it use /dev/urandom which uses keyboard timing and interupts timings here is a link that explains exacptly how it is obtained http://security. stackexchange .com/questions/71813/ddg#71814

And the link is not working, don't know why

And the link is not working, don't know why

any IIT student here ?

And the link is not working, don't know why

it uses RtlGenRandom() and because windows is not open source I didn’t find something useful on the web

http://security. stackexchange .com/questions/71813/ddg#71814 remove spaces from this ☝️

yes and I’m sure there is plenty of us here why?

are you one of them¿

Since there's something for Unix system, do you think there's also going to be something for Windows system?

yes I’m computer engineering student

yeah It shouldn’t something cryptographically weak since basically every other crypto library uses the same function to generate randoms

Alright. In you opinion what OS would be best for me to do this?

which IIT ?

any IIT student here ?

well for a server linux for sure which a unix-like os it is going to be cheaper and faster than windows server

Okay. Which one do you use btw

debian linux on the cloud and even on my desktop it is smooth , really performant compared to windows and pretty low maintenance

@Jellyfish_Josh yeah ... t is considered as the most stable linux distribution (varient) you can set auto-updates then expect it to be up for the next decade as long as your program doesn’t crash or you get DDoSed

or something crazy happens which probably going to be on the news

https://pastebin.com/bx1WHGJD Any who can help me with this?

What's wrong with it?

#include <iostream> using namespace std; int main(int argc, const char * argv[]) { int num_1; int num_2; int result; int number; cout << "Choose a type of count:\n" << endl; cout << "(1 = +) (2 = -) (3 = *) (4 = :) (5 = %) " << endl; cin >> number; if (number == 1) { cin.get(); cout << "Enter first number:" << endl; cin >> num_1; cin.get(); cout << "Enter second number:" << endl; cin >> num_2; cin.get(); result = num_1 + num_2; cout << num_1 << "+" << num_2 << "=" << result << endl; } if (number == 2) { cin.get(); cout << "Enter first number:" << endl; cin >> num_1; cin.get(); cout << "Enter second number:" << endl; cin >> num_2; cin.get(); result = num_1 - num_2; cout << num_1 << "-" << num_2 << "=" << result << endl; } if (number == 3) { cin.get(); cout << "Enter first number:" << endl; cin >> num_1; cin.get(); cout << "Enter second number:" << endl; cin >> num_2; cin.get(); result = num_1 * num_2; cout << num_1 << "*" << num_2 << "=" << result << endl; } if (number == 4) { cin.get(); cout << "Enter first number:" << endl; cin >> num_1; cin.get(); cout << "Enter second number:" << endl; cin >> num_2; cin.get(); result = num_1 / num_2; cout << num_1 << ":" << num_2 << "=" << result << endl; } if (number == 5) { cin.get(); cout << "Enter first number:" << endl; cin >> num_1; cin.get(); cout << "Enter second number:" << endl; cin >> num_2; cin.get(); result = num_1 % num_2; cout << num_1 << "%" << num_2 << "=" << result << endl; } if (number < 1 || number > 5) { cout << "ERROR! Please write numbers from 1 to 5!\n" << endl; } return 0; }

Hello

still a malware can do horrible stuffs once it is executed

ASLR is used to generate random virtual addresses and to prevent some attacks that can exploit memory corruption to read other programs memory and NX bit is way to separate executable code and data in memory to make it harder to load malware into flawed programs and a stack canary is used to keep programs access the memory that they allocated nothing can prevent a malware also windows defender is a anti-virus which tries to detect known malware and there are tons of ways to bypass that

Hello

The Windows Defender one actually refers to the OS hardening options, not antivirus

let’s take look at legitimate program like a web browser it has to access your video memory to display content it has to access your files (may modify, read or write to them) , listen to keystrokes then handle the event corresponds to it locate your mouse pointer and access any other hardware devices that your computer has in addition to running few other external programs in some cases and executing shell commands the only thing that windows defender can do is to check whether a program resemble a known malware that uses the same privileges given to regular program in addition to provide the option to take more extreme measures against any programs that are trying to do something programs are not allowed to do but other than that, a malware that is written in a way that doesn’t resemble any known malware it can cause whatever it’s designed for otherwise none of legitimate programs will ever work properly on windows just think about how would you download a webpage if your browser could’t write to the disk to place and HTML file in your Downloads

haiya I'm referring to these settings... https://techcommunity.microsoft.com/t5/windows-security/turn-on-mandatory-aslr-in-windows-security/m-p/1186989

also WTF!!! why ASLR isn’t enabled BY DEFAULT on Windows ?!!!! this became a standard for operating systems years ago it has started with OpenBSD and Linux implemented that in 2001

also WTF!!! why ASLR isn’t enabled BY DEFAULT on Windows ?!!!! this became a standard for operating systems years ago it has started with OpenBSD and Linux implemented that in 2001

I never heard about OS standarization beside POSIX

I believe the msvc linker option has this turned on by default, so the global setting here only affects legacy programs?

Also writing C code on windows is nightmare

ok, But i need some help on C/C++ can any one help

Even your format specifier wrong, use %zu to print what sizeof() return

Even your format specifier wrong, use %zu to print what sizeof() return

I’m not