Far From Random: Three Mistakes From Dart/Flutter's Weak PRNG | Zellic — Research
What happens when developers accidentally pick a predictable source of randomness, and that source happens to be significantly weaker than reasonable developers would expect? These are the stories of how some popular projects all got burned by the same underlying weakness in the Dart/Flutter ecosystem and how the projects were affected. The mistake is prevalent in many open-source projects, but we will highlight just a few of them here.
These are the vulnerabilities we’ll be taking a look into.
...
Read more at zellic.io