Slashdot Mirror


VIA C3 Random Number Generator Reviewed

An anonymous reader writes "VIA has added a hardware random number generator to its Nehemiah C3 CPU. I found a recent review of its security. Interesting how it's done at the instruction level as opposed to the chipset level used by the i810 RNG (also reviewed there)."

208 of 289 comments (clear)

  1. Finally by kaamos · · Score: 4, Funny
    I've been wanting to replace that Ti-80 that generated completely random 0-1 numbers.

    Hell, I couldn't even predict what would come next

    Oh wait...

    --
    In Canada, we don't fancy things like socks
    1. Re:Finally by eenglish_ca · · Score: 1

      I had the worst experience with my Ti-83. It was a bit cold one morning and while using the "Rand" function on the calculator which generates fp(0.2345432) random numbers I got 10 complete "0"s in a row. HTW is that possible?

      --
      Checking out my form of escapism.
    2. Re:Finally by Anonymous Coward · · Score: 1, Insightful

      "I had the worst experience with my Ti-83..."

      Dude, You REALY need to get out more.

      -Greg

    3. Re:Finally by caluml · · Score: 1
      Sounds perfectly random to me.

      It's like people that would be surprised if the lottery results were 1, 2, 3, 4, 5 and 6. "That's not random, is it?", they'd cry. It's just as likely as any other combination.

    4. Re:Finally by Anonymous Coward · · Score: 1, Interesting

      Not true, If the numbers were 32 bit floating point then the probability of getting 10 0's in a row is 2^320, which is about 10^96, there have been of the order of 10^17 seconds since the universe began, so the probability of anyone, anywhere, anytime getting that sequence is vanishingly small.

    5. Re:Finally by archeopterix · · Score: 1
      Not true, If the numbers were 32 bit floating point then the probability of getting 10 0's in a row is 2^320, which is about 10^96, there have been of the order of 10^17 seconds since the universe began, so the probability of anyone, anywhere, anytime getting that sequence is vanishingly small.
      In fact, the probability of getting any sequence is equally small, and yet a sequence will get picked, so we obtain an almost improbable event with probability 1 :-)
    6. Re:Finally by CaseyB · · Score: 1

      But if we extend the "probability analysis" outside the RNG itself, we can ask the question, "Is it more likely that the 10 zeroes were randomly chosen, or that they were the result of a flaw in the RNG?". While it's a valid random number, the fact that it's a boundary value is cause for suspicion of the technology.

  2. Imagine a Beowulf cluster of these... by Lethyos · · Score: 1, Insightful

    ...generating huge cryptographically strong random numbers. I wish more companies would add hardware like this because a good source of entropy is becoming increasingly important in the world. Weak random numbers can reduce the strength of most crypto systems and we need all the privacy we can get in the US today.

    --
    Why bother.
    1. Re:Imagine a Beowulf cluster of these... by cpeterso · · Score: 2, Informative


      or imagine a giant P2P random number generator, something like Linux's entropy pool, but across many nodes. The problem with this is that you cannot trust external sources for input, but perhaps you could "cross the streams" and safely mix them?

      It reminds me of Random.org, a web site/service that generates random numbers for you. I think they even sell CDs of random numbers.

      1. Random numbers
      2. ???
      3. Profit!!!

    2. Re:Imagine a Beowulf cluster of these... by Some+Dumbass... · · Score: 1

      ...generating huge cryptographically strong random numbers.

      Good idea. It's getting late, and counting sheep doesn't work too well. ;)

    3. Re:Imagine a Beowulf cluster of these... by kasperd · · Score: 1

      perhaps you could "cross the streams" and safely mix them?

      In fact I have recently been working on some code doing something similar to that. Unfortunately the time complexity is quadratic, and I'm afraid it cannot be done any faster. If you want to work with megabytes of random bytes, quadratic time complexity is going to be a pain.

      --

      Do you care about the security of your wireless mouse?
    4. Re:Imagine a Beowulf cluster of these... by kinko · · Score: 1

      One of the replies to your post got me thinking... if this *was* used for cryptography, perhaps it would be possible to compromise the encryption by adding a strong electro-magnetic force to bias the hardware?

      For example, DRM encrypting stuff on your box, or perhaps placing a magnet or something in someone else's computer...

      Remember, hardware can be compromised too!

    5. Re:Imagine a Beowulf cluster of these... by dnoyeb · · Score: 1

      I don't feel you. Does weak mean predictable? I just never understood the quest for *more* randon numbers. Practically, random is random!

      How can one possibly predict the number a weak random number generator will create!?

    6. Re:Imagine a Beowulf cluster of these... by jafuser · · Score: 1

      I think we have already learned from a popular 80's movie that it's really *bad* to "cross the streams"...

      Also, if someone asks if you're a god, you say "YES".

      --
      Please consider making an automatic monthly recurring donation to the EFF
    7. Re:Imagine a Beowulf cluster of these... by jafuser · · Score: 1

      Could you execute a specific series of CPU instructions so that you create EM patterns to introduce a bias?

      --
      Please consider making an automatic monthly recurring donation to the EFF
    8. Re:Imagine a Beowulf cluster of these... by Jonathan_S · · Score: 1
      I don't feel you. Does weak mean predictable? I just never understood the quest for *more* randon numbers. Practically, random is random! How can one possibly predict the number a weak random number generator will create!?

      Random is the hoped for result of a random number generator, it is not guarinted. Weak RNGs can fall into patterns, so that after observing their output you for a while you can begin to make good guesses about upcomming numbers.

      An example of a weak non-deterministic RNG would be if you used the full temperature of you processor as an "random number" (clearly this is a stupidly extreme case), if you watch the temp for a little while you would notice that it really doesn't change very much and additionally you can guess how much it is going to change based on what the computer is doing at the moment.

      For an example of weak deterministic random number generators I would point you to the page on TCP/IP Sequence numbers for various operating systems that Slashdot linked to a while back. You can see the "random number" output of many of the generators fall into clear patterns in the pictures.

      Calling something a random number generator doesn't mean that the numbers is generates are very random.

    9. Re:Imagine a Beowulf cluster of these... by dnoyeb · · Score: 1

      I think I get it now. For security purposes the random is fine. But from say gaming purposes where one may generate a new rnd number every 100ms, it must be truly random or people will eventually see long term patterns.

  3. Artificial Intelligence vs Artificial Stupidity by stonebeat.org · · Score: 1, Insightful

    If a machine can not generate a truly random number (not seed based), and is not turing complete, can it be called Artificially Intelligent?

    1. Re:Artificial Intelligence vs Artificial Stupidity by the_2nd_coming · · Score: 1

      I can show you a few people that cannot even meet those criteria :-D

      --



      I am the Alpha and the Omega-3
    2. Re:Artificial Intelligence vs Artificial Stupidity by ddd2k · · Score: 2, Informative

      Aye, but nothing can be truly random
      Actually, if Heisenburg theory of uncertainty holds true, which is supported by the unexplainable phenomena of singluar photon diffraction, random numbers are totally possible at the sub-atomic level and are not difficult to manipulate. This article hardly touches on how the numbers are generated, which lends me to question how valid this technology actually is.

    3. Re:Artificial Intelligence vs Artificial Stupidity by jmv · · Score: 4, Interesting

      Actually, I've heard of some experiment where people were asked to fake a "coin tossing session" and write down the results. Generally, you could tell it's fake because when "generating random numbers" people tend not to repeat sequences.

    4. Re:Artificial Intelligence vs Artificial Stupidity by NonSequor · · Score: 1

      I believe my information theory professor said a good cut-off to decide whether a sequence of results from 100 coin tosses was produced by experiment or by a human is to check if one result occurs six or more times in a row. If such a repetition is there, it wasn't likely to be generated by a human, unless they know about this criterion of course.

      --
      My only political goal is to see to it that no political party achieves its goals.
    5. Re:Artificial Intelligence vs Artificial Stupidity by moonbender · · Score: 2, Informative

      The guy's name is Heisenberg. Sorry for nitpicking, but three posts in a row mispelling his name is a bit too much. The school I went to was named after him, incidently.

      --
      Switch back to Slashdot's D1 system.
    6. Re:Artificial Intelligence vs Artificial Stupidity by AndrewRUK · · Score: 1

      Except that we always know something about it's velocity, because that must be less than c.

  4. Re:Cool but... by Angry+White+Guy · · Score: 1

    A Floating point co-processor. There was a review of a laptop built on the VIA, ran linux, priced for $700.00. Good for anything but compiling, cad, etc. The chip could not handle floating points efficiently.

    --
    You think that I'm crazy, you should see this guy!
  5. The Prototype: by ihatewinXP · · Score: 4, Funny

    Was just some guy they trained to sit there and yell numbers at them.

    Developer: Hey! Gimme a number!!!

    Idiot in corner: uh Seven boss!

    --
    ---- The real Slashdot is still here. You just have to browse at -1 to read the comments.
    1. Re:The Prototype: by rcamera · · Score: 1

      interestingly enough, the 'idiot in corner' chose the most predictable 'human random' number (of 1-10)

      --
      Wave upon wave of demented avengers March cheerfully out of obscurity into the dream
    2. Re:The Prototype: by Steven+Blanchley · · Score: 2, Interesting
      Interestingly enough, when asked to pick a number from 1 to 10, more people seem to pick 7 than anything else. My source is an unscientific poll, but I trust its general accuracy because I have noticed similar results myself. 7, 4, 5, 6, 3, 8, 2, 9, 10, 1. While the differences among 3, 4, 5, 6, and 8 could be off and the order of those probably cannot be trusted, 7 is definitely picked much more often than any of those five, which in turn are more likely picks than the four nearest either of the extremes.

      It isn't just one to ten either; I've noticed that when you ask people to pick a number from N to M, where N to M are relatively close together, a particular answer seems to come up more often than others; for example, 12 comes up often among numbers from 1 to 15. Can anyone suggest an explanation for this?

    3. Re:The Prototype: by Steven+Blanchley · · Score: 1

      Or if you're a really smartass mathematician like me, you'll say 'integer,' because every integer from 1 to 10 is also a natural number, and you can save two syllables by saying integer instead!

    4. Re:The Prototype: by pkunzipper · · Score: 1

      Actually..three syllables: na-tu-ral

    5. Re:The Prototype: by DJPenguin · · Score: 1

      I believe it has to do with Phi, or the golden circle ratio - it's part of what "proportions" are most pleasing to humans. We don't like the middle of a set of numbers, we don't like the ends.

      One of my teachers demonstrated this once, by drawing a line on a piece of paper. He asked us all to mark along the line wherever we wanted, and most of the marks were like this:

      Stupid cocking lameness filter. Well suffice it to say the marks were usually about 70% along the length of the line, or 30%. Never 50%,0,100...

    6. Re:The Prototype: by be-fan · · Score: 1

      Also, there is a guideline in art saying that humans find it most pleasing when important demarcations (horizons, fences, tree-lines, etc) occur 1/3 or 2/3s of the way on an axis rather than in the middle or at the edges.

      --
      A deep unwavering belief is a sure sign you're missing something...
    7. Re:The Prototype: by Bob+Uhl · · Score: 1
      Thos marks weren't at 70% or 30%, most likely: they were at 2/3 and 1/3. These are non-terminating in our half-assed decimal notation. OTOH, in duodecimal (aka dozenal) they are 0.4 and 0.8. In fact, in dozenal the only low-divisor fractions which are ugly are 1/5 and 1/10. 1/7, FWIW, works out to 0.186 exactly.

      Duodecimal notation is far superior to decimal, and the world should convert to it. It won't, of course, but that makes it no less superior.

      It also has the pleasing effect of revealing the ugliness inherent in French units.

  6. News Release by Anonymous Coward · · Score: 5, Informative

    VIA Launches Seventh Generation 'Nehemiah' CPU Core, the First x86 Processor to Market with Embedded Security Features

    Combining an integrated PadLock(TM) Data Encryption Engine with a wealth of enhanced performance features, the new generation VIA C3(TM) provides the lowest power native x86 platform for the fast-growing market of connected PCs and home entertainment centers

    Taipei, Taiwan, 22 January 2003 - VIA Technologies, Inc., a leading innovator and developer of silicon chip technologies and PC platform solutions, today announced its new generation VIA C3(TM) processor integrating the 'Nehemiah' core. With its powerful PadLock(TM) Data Encryption Engine, this next generation VIA C3 is the first native x86 processor on the market with embedded security features that enhance the protection of sensitive corporate and personal data.

    Available now at a speed of 1GHz, the new processor core is based on an advanced new CoolStream(TM) processor architecture that delivers all the necessary performance for running even the most demanding digital media applications while maintaining ultra low levels of power consumption and heat dissipation.

    "The launch of the seventh generation VIA C3 processor extends our leadership in enabling the development of secure, quiet-running small form factor system designs for a rapidly growing number of exciting new lifestyle and productivity applications such as home digital media entertainment and connected computing," commented Paul Hsu, Executive Assistant to the President and Head of VIA's CPU Business Unit. "Integration of embedded security features in the processor provides the most robust and cost-effective solution for addressing the increased demands among individuals, businesses, and government organizations for enhanced authentication and protection of their data in today's connected world."

    PadLock(TM) Data Encryption Engine
    The PadLock Data Encryption Engine has been integrated into the new generation VIA C3 processor to ensure greater confidentiality, integrity, and authenticity of electronic data either stored in the computer or transmitted over a network or the Internet, and enables a host of powerful new security applications, including heavy-duty data encryption and safer online transactions.

    At its heart is an advanced Random Number Generator (RNG) that uses random electrical noise on the chip to securely produce random number values, and features a direct application level interface through a new x86 instruction. Developers can obtain random numbers directly from the hardware without having to use separate software drivers, thereby providing an inherently more secure and efficient solution than combined hardware/software RNG architectures. The RNG includes several operating modes, offering performance from 750K bits per second to as high as 6 million bits per second.

    "VIA's incorporation of a hardware random number source on the processor die is exciting for developers, since it provides a simple and effective way of obtaining high quality randomness. This is particularly important for security and cryptography applications, since it is notoriously difficult to generate random numbers of adequate quality without a hardware random number generator," said Paul Kocher, President of Cryptography Research, Inc. and co-inventor of SSL 3.0. "I am enthusiastic about the benefit to applications such as secure web browsing, cryptographic key generation, and protocols where randomness is required."

    CoolStream(TM) Architecture
    Based on the advanced CoolStream architecture, the new generation VIA C3 processor has a highly efficient design that, when coupled with the VIA Apollo CLE266 chipset, delivers performance increases of up to 20% over the current version of the VIA C3 processor in mainstream productivity applications and up to 73% for 3D graphics applications, while continuing to deliver the same benefits of low power and minimal heat dissipation.

    New performanc

  7. Testing bittorrent by Pathwalker · · Score: 2, Informative

    I'm playing around with bittorrent.

    As a test, I put the PDF file of the review of the hardware RNG up here (The summary is here).

    If you have bittorrent installed, feel free to try to download from me.

    1. Re:Testing bittorrent by khuber · · Score: 1
      It worked -- thanks!

      -Kevin

  8. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  9. Cant the randomness be predicted? by happyhippy · · Score: 1

    "At its heart is an advanced Random Number Generator (RNG) that uses random electrical noise on the chip to securely produce random number values" If you keep inputting the same electrical signals (thus the same paths are taken) can you deduce the algorithm and thus crack the encryption scheme it supplies?

    1. Re:Cant the randomness be predicted? by jmv · · Score: 5, Interesting

      No. Generally the idea of devices is just to amplify thermal noise. Thermal noise is produced at the microscopic level with atoms bouncing into each other. There's no way to predict that... unless you tap directly into the generator (in which case it's simpler to just get the data on the computer before it's encrypted).

    2. Re:Cant the randomness be predicted? by worst_name_ever · · Score: 1
      Presumably not, or else it wouldn't be a very good random number generator.

      What I'm interested in is whether or not there is any way for crosstalk from the zillions of other high-speed signals elsewhere on the chip to have any real influence, however slight, on the operation of the random number generator... if so, I wonder how long before the hax0rs will be trying to 0wn my RNG by writing fiendishly clever patterns out onto the address bus.

      --

      In Soviet Rush, today's Tom Sawyer gets high on you.
    3. Re:Cant the randomness be predicted? by happyhippy · · Score: 1
      Damn it, forgot to insert a new paragraph tag.

      Thinking about it more, why dont they simply use the random electrical noise level for the random number?
      And isnt there a limited range of 'random' noise that can occur?

    4. Re:Cant the randomness be predicted? by plover · · Score: 5, Informative
      The input is not supposed to be determined by the current state of the processor (insert obligatory Knuth state-of-sin joke here.) Their design consists of a set of freewheeling* oscillators: a ~600MHz oscillator that is then further "jittered" by a ~450MHz and an ~810MHz oscillator, sampled by a much slower ~30MHz oscillator. Their engineers assume that manufacturing variances, temperature, current processor state and other external factors will all contribute to this jittery response.

      * Freewheeling means that these oscillators are not tied to a crystal, and the frequency they oscillate at is not precisely locked at any exact rate (as would be the case if it employed a crystal.) These minute variations in frequency are the source of entropy the chip designers are actually gathering.

      The sampled bits are then "whitened" to reduce biases, and the whitened bits are stored in a FIFO queue until used.

      The paper in the article explains all this, and it talks about a couple of other cool cryptogeek features. You can change the bias voltage via CPU instruction (which would affect the jitter,) but each request of "randomness" comes with a pedigree indicating what bias settings were used! Finally, Cryptography Research's testing showed that they believe the chip (with whitening enabled) is capable of generating bits with an entropy of 0.99 bits/output bit, although they recommend trusting only a conservative entropy factor of about 0.75 bits/output bit. And since it generates bits at a rate of 30-50 million bits per second, most applications can probably afford to throw away a few in the name of entropy.

      --
      John
    5. Re:Cant the randomness be predicted? by jihema · · Score: 1

      > insert obligatory Knuth state-of-sin joke here. That was John von Neuman.

      --
      JMA
    6. Re:Cant the randomness be predicted? by plover · · Score: 1
      If it works like that, it can probably very easily be tricked into producing nonrandom numbers by inserting HF energy at these frequencies. (i.e. put a transmitter nearby)

      Yeah, there probably is an external way to "reduce" entropy (other than by using the provided mechanism to alter the oscillator bias voltage.) But that will require an attacker to have physical access to the machine, and enough time on it to sample the effects of his change in order to see what's happened because of it. Since these chips are already varying their oscillation rates due to manufacturing tolerances, heat, etc., just having one oscillator lock-up with a randomly placed attacking transmitter might not throw the chip off in a predictable manner (or at least in a manner that would be meaningful to an attacker.)

      --
      John
    7. Re:Cant the randomness be predicted? by theendlessnow · · Score: 1
      Engineer#1: Man, this is one noisy chip. No one will buy this. Can't believe we messed up. We're gone for sure.

      Engineer#2: Wait a minute... I have an idea...

  10. Obligatory Dilbert Quote by snillfisk · · Score: 5, Funny

    ok, i couldnt find the original strip, but here goes from memory:

    accounting troll: this is our random number generator
    troll: 9
    troll: 9
    troll: 9
    dilbert: are you sure that's random?
    accounting troll: thats the problem with randomness, you really can't be sure.

    .. and maybe that holds for your calculator too :-)

    --
    mats
    One man's ceiling is another man's floor.
    1. Re:Obligatory Dilbert Quote by cscx · · Score: 1

      That one graced my cubicle wall when I worked last summer... I still have the clipping somewhere... gotta find it!

    2. Re:Obligatory Dilbert Quote by ottffssent · · Score: 2, Informative

      You *can* be sure whether it's random or not. "999" is not random. It may very well be randomly-generated, but that's not the same thing at all.

      Of course, it's not that simple either:

      If I have a RNG that spits a long string of the same number. Is the string random? Well, not really. So I take the string, and make sure it has the same number of each digit in it. But 1111222233334444 isn't random either, so now I make sure the same number of each pair occurs, so we've got as many 12s as we have 21s. 1234321234321234 still isn't random, so we check 3-digit sets. And at the end, I'm left with a string that is random, right? Well, it has known properties, namely that it has the same number of each digit (+-1), the same number of each pair, etc. So that's not random. But what about the original string of 8s? That's clearly not random. So what to do?

    3. Re:Obligatory Dilbert Quote by MisterFancypants · · Score: 2, Funny
      You *can* be sure whether it's random or not. "999" is not random. It may very well be randomly-generated, but that's not the same thing at all.

      I guess they don't have humor where you come from.

    4. Re:Obligatory Dilbert Quote by evilviper · · Score: 1

      Random does NOT mean average. Something like flipping a coin is (almost) random... And as anybody knows, you can certainly hit tails 500 times in a row if you are LUCKY.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    5. Re:Obligatory Dilbert Quote by Ed+Avis · · Score: 1
      "999" is not random.

      In that case, 415 is not random either, nor is any other three-digit number. Or would you care to name the numbers in [0,1000) which you consider 'random'? Surely a random number generator is just as likely to generate 999 as 415 or anything else.

      --
      -- Ed Avis ed@membled.com
    6. Re:Obligatory Dilbert Quote by trezor · · Score: 3, Informative

      In norwegian the strip is located in my Dilbert-archive.

      Ofcourse I got an English archive as well, for you Dilbert fans out there!

      --
      Not Buzzword 2.0 compliant. Please speak english.
    7. Re:Obligatory Dilbert Quote by oever · · Score: 1
      --
      DNA is the ultimate spaghetti code.
    8. Re:Obligatory Dilbert Quote by evilviper · · Score: 1
      If you got tails 500 times in a row you would have to conclude that the coin was biased,

      And if you can thoroughly check the coin to ensure it is NOT biased?

      it is unlikely that anyone has ever gotten 500 tails in a row with an unbiased coin.

      Unlikely is exactly right. It is not impossible. If any sequence is impossible, or any more likely than another, it would not be random. So, it's just as likely that you will get 999999 as 123456 or 274579, or any other combination with the same numer of digits.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    9. Re:Obligatory Dilbert Quote by radish · · Score: 2, Insightful

      The order in which the balls come out of the lotto machine is (afaik) random. However, the sequence 1-2-3-4-5-6 is just as likely to come up as any other. Does that mean it's not random? No.

      One of the few accepted truly random physical processes is radioactive decay. It is however completely possible that 4 decay events occur, each exactly 2 seconds apart (for instance) - it doesn't mean our radioactive sample has suddenly broken the laws of physics.

      Your arguments are frankly bizarre, as determing randomness on such a small sample size is impossible. As your sample size increases you can examine the statistical distribution of values, and come to a (increasingly certain) conclusion on the probability that the thing generating those values is truly random, but (IMHO) you can never be sure.

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    10. Re:Obligatory Dilbert Quote by Spunk · · Score: 1

      The hardware guy here in charge of our RNG has this hanging on his wall. Very appropriate :)

    11. Re:Obligatory Dilbert Quote by heffrey · · Score: 1

      If any sequence is impossible, or any more likely than another, it would not be random.

      Sorry to be a total pedant but this should read "If any sequence is impossible, or any more likely than another, it would not be uniformly distributed." A biased coin is an example of a random process for which some outcomes are more likely than others.

    12. Re:Obligatory Dilbert Quote by Threni · · Score: 1

      I guess they don't have humor where you come from.

      Or math lecturers.

    13. Re:Obligatory Dilbert Quote by evilviper · · Score: 1
      A biased coin is an example of a random process for which some outcomes are more likely than others.

      If the coin is biased, the process is not random.

      random
      3. Of or relating to an event in which all outcomes are equally likely
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    14. Re:Obligatory Dilbert Quote by heffrey · · Score: 1

      You should have included the entire dictionary.com entry which reads:

      1. Having no specific pattern, purpose, or objective: random movements. See Synonyms at chance.

      2. Mathematics & Statistics. Of or relating to a type of circumstance or event that is described by a probability distribution.

      3. Of or relating to an event in which all outcomes are equally likely, as in the testing of a blood sample for the presence of a substance.

      So, your statement "If the coin is biased, the process is not random." is contradicted by definition 2. In fact definition 2 and 3 contradict each other.

      Mathematicians, probabilists and statisticians do indeed take the view expressed in definition 2 - random processes have outcomes which are more likely than others.

  11. Truly Random Numbers by polv0 · · Score: 5, Informative

    The ideal source for random numbers has always been physical sources, such as the white noise you see on your television screen when tuned to an unused channel. The noise is generated by remnants from the big bang, and is cryptographically unusable (since the numbers are recordable by anyone). But is a good test for statistical algorithms such as evolutionary computation (which depend on randomn initial states).

    The idea of using electrical currents secured on a chip is much sounder - since the noise is locally generated and very difficult to tap. I project that as quantum mechanics become more mainstream, the random quantum effects of electrons will be tapped to generate even sounder and accessible random signals.

    1. Re:Truly Random Numbers by happyhippy · · Score: 1

      I read that only like 5% of a static TV screen is the remenants of the big bang.

    2. Re:Truly Random Numbers by John+Miles · · Score: 5, Informative

      The noise is generated by remnants from the big bang

      A myth, for the most part. It's generated primarily in the front-end amplifier of the TV tuner by virtue of the fact that its temperature is above absolute zero.

      All dissipative (resistive) elements, whether active or passive, generate thermal, or Johnson, noise. The noise power is expressed in watts as
      Pn=KTB, where K = the Boltzman constant, T is the temperature in degrees Kelvin, and B is the bandwidth you're looking at. TV signals occupy several megahertz' worth of bandwidth, so even the smallest amount of noise in the front end will dominate the noise from atmospheric and celestial sources.

      You can prove this by disconnecting the antenna. Even if you short the TV's antenna terminals with a paper clip, neither the audio nor the video noise will change much.

      --
      Dahlmann tightly grips the knife, which he may have no idea how to use, and steps out into the plain.
    3. Re:Truly Random Numbers by Anonymous Coward · · Score: 1, Funny

      How is it remnants of the Big Bang when each channel is a differnet frequency and that background radiation operates only on 1 frequency?

      Are you trying to say the big bang was an exclusive, only available on NBC?

    4. Re:Truly Random Numbers by brokenbeaker · · Score: 1

      There are also things like cosmic rays, which do come from outer space, but are produced in extreme events post-big-bang, such as novae, collapsars etc.

    5. Re:Truly Random Numbers by metalhed77 · · Score: 5, Funny

      yes, but isn't hte front end amp of the tv tuner just a remnant of the big bang?

      --
      Photos.
    6. Re:Truly Random Numbers by utexaspunk · · Score: 1

      you made me smile. if i had mod points, you'd get 'em.

    7. Re:Truly Random Numbers by jafuser · · Score: 1

      And the other 95% is from where?

      Electromagnetic radiation from satellite debris?

      --
      Please consider making an automatic monthly recurring donation to the EFF
    8. Re:Truly Random Numbers by p3d0 · · Score: 1

      Nice.

      --
      Patrick Doyle
      I mod down every jackass who puts his moderation policy in his sig. Oh, wait a sec....
  12. Randomness by Viral+Fly-by · · Score: 5, Insightful

    Isn't it interesting how much importance we place on quote unquote "true" randomness of numbers? We expect (or at least hope that) a computer can generate random numbers time and time again without fail...

    But any human being would prove horrible at such a task... In fact, if you ask a human being for 3 random numbers, odds are very good that they will give you at least two sequential ones...such as 7 6 2...or 5 9 8...

    I guess that's the point of computers though...if we could all calculate as fast as a computer, process data as fast as a computer, and perform other tasks as fast and as well as a computer, we wouldn't need computers, now would we?

    Random number generation is an interesting topic though because it is often seen as a fault of computers... People claim that computers are "incapable" of generating random numbers. So are human beings... I can understand a computer not being able to store a floating point number with a hundred digits after the decimal point being considered a fault, because FEASIBLY a human being COULD perform the operations and have the value exact out to a hundred decimal places. But with random numbers...a human couldn't do it even remotely as well a computer can, so why is it considered such a weakness of computers? Maybe the power of computers to break their own codes because numbers aren't truly random is the reason they are sought after in the first place.

    1. Re:Randomness by Anonymous Coward · · Score: 1, Interesting

      Very true. Human brains can also be tricked easily

      Example - If I ask you to "Pick a number between One and Four" about 90% of people will pick Two or Three.

      However, if I instead phrase the question "Pick a number from One To Four" about 90% of people will pick Three.

      Why? I verbalised the numbers One and Four, but also Two (To, Two, same thing) and the human brain trying to be random picks the one that wasn't mentioned.

      Don't believe me? Try it on your friends.

    2. Re:Randomness by Anonymous Coward · · Score: 3, Funny

      Example - If I ask you to "Pick a number between One and Four" about 90% of people will pick Two or Three.

      What, are the other 10% not listening to the question?

    3. Re:Randomness by brokenbeaker · · Score: 1

      Actually, computers do not produce random numbers at all. They can only provide pseudorandom numbers. These are outputs of algorithms, but any sequence of such numbers is hard to predict unless you know the algorithm and a seed number used to generate the first number in the series.

    4. Re: Randomness by Omniscient+Ferret · · Score: 2, Funny

      In fact, if you ask a human being for 3 random numbers, odds are very good that they will give you at least two sequential ones...such as 7 6 2...or 5 9 8...

      I'd expect 1 in 3 odds of that happening anyway.

    5. Re:Randomness by Zaak · · Score: 1

      Actually, computers do not produce random numbers at all. They can only provide pseudorandom numbers.

      The whole point of hardware random number generators is to surpass the limitations of psuedorandom number generation algorithms. By periodically feeding thermal (or better yet quantum) noise into the pseudorandom seed you can get very good quality randomness.

      TTFN

    6. Re:Randomness by MrMickS · · Score: 1
      But any human being would prove horrible at such a task... In fact, if you ask a human being for 3 random numbers, odds are very good that they will give you at least two sequential ones...such as 7 6 2...or 5 9 8...

      With a true random number generator then the pool of numbers is not altered by a pick. Consequently every possible number within the indicated range should have an equal chance of selection at each request for a new number. Under these rules a sequential number, or indeed the same number again, is equally as likely for the second request for a number. You are placing non-random constraints on the generator.

      --
      You may think me a tired, old, cynic. I'd have to disagree about the tired bit.
    7. Re: Randomness by Kalani · · Score: 1

      Why 1 in 3?

      Assume we're picking random integers and you've just picked N. So what's the probability of picking (N - 1) or (N + 1)? Well it depends on the range from which you pull random numbers and on whether or not N is at a extrema of the range. For a range starting at R[i] and going to R[f] (assuming (R[f] - R[i]) >= 2), the probability P that you'll pick a "sequential" value is: P = 2 / (R[f] - R[i]) iif R[i] N R[f]. Otherwise P = 1 / (R[f] - R[i]).

      --
      ___
      The ends are ape-chosen, only the means are man's. -- Aldous Huxley
    8. Re:Randomness by Anonymous Coward · · Score: 1, Insightful

      You also asked a *different* question. A lot of people would view the first as exclusive, and the second as inclusive. Thus, you've changed the pool of choices and the fact that 90% choose either 2 or 3 is meaningless, since those would be the only correct answers.

    9. Re:Randomness by invi · · Score: 1

      In fact, if you ask a human being for 3 random numbers, odds are very good that they will give you at least two sequential ones...such as 7 6 2...or 5 9 8...

      Well, if every tripple of digits would be different from all the previous tripples, the entropy of the 1000th tripple would be pretty low, because it's got to be the remaining one, right? :)

    10. Re:Randomness by Alpha_Nerd · · Score: 2, Funny

      I guess that's the point of computers though...if we could all calculate as fast as a computer, process data as fast as a computer, and perform other tasks as fast and as well as a computer, we wouldn't need computers, now would we?


      We need computers for porn. Nothing could ever possibly substitute computers in that regard.

    11. Re: Randomness by dave_f1m · · Score: 1

      I'd expect he was considering (9,0) and (0,9) to be sequential. So 1-(1-((10-2)/10))^2 = .32 - or approx. 1/3.

      - dave f.

    12. Re:Randomness by dunkstr · · Score: 1


      But any human being would prove horrible at such a task... In fact, if you ask a human being for 3 random numbers, odds are very good that they will give you at least two sequential ones...such as 7 6 2...or 5 9 8...

      Yes, but the odds that a truly random process would do the same thing is just as high. The chances you DON'T select two consecutive numbers are 10 (first digit) x 8 (second digit) x 8 (third digit) = 640. Thus you have a 36% chance of picking to sequential numbers.

      If you want to get rid of dupes as well you have 10x7x7 = 490. Thus a 51% chance you would pick a "non-random" number! I think the problem with people's random numbers are that they go out of their way to avoid such sequences.

    13. Re:Randomness by poot_rootbeer · · Score: 1

      if you ask a human being for 3 random numbers, odds are very good that they will give you at least two sequential ones...such as 7 6 2...or 5 9 8...

      A single number in isolation cannot be random. It's the sequence of numbers that determines randomness -- if the sequence can be predicted, they are not random.

      I think you're confusing 'sequential' with 'consecutive'. What number comes after '7,6,2'? Can you guess?

    14. Re:Randomness by FryGuy1013 · · Score: 1

      I think you're confusing 'sequential' with 'consecutive'. What number comes after '7,6,2'? Can you guess?

      4

      --
      bananas like monkeys.
    15. Re: Randomness by Omniscient+Ferret · · Score: 1

      What Dave said. I considered 0 & 9 to be sequential because it made the math cake: the odds were 0.8 * 0.8 that the numbers wouldn't be adjacent, or .64. If I had some paper around, I'd work out the odds, but it's easier here to run a couple of scripts to list 000 to 999 & cull out 01, 12, etc: .326 if you don't count 0 & 9 as adjacent, .36 if you do.

      Hm. It's probably best that I did the empirical list; math-wise, I'm staring at odds of 0.3276 (1-((.8*.8+.2*.9)^2)) and wondering what I'm forgetting.

  13. A Better System by lommer · · Score: 4, Interesting

    would be to use radioactive decay to generate random numbers. Very easy to implement using existeng technology, one of the few things that is completely random, and it's infinitely scalable to boot. A system I envision would simply moniter a radioactive sample for 1000 milli or micro seconds. Every sample time, it would record the number of fission events and if even, turn a bit on, if odd, turn the bit off. Then withing the space of a second you have a 1000 bit-long number that is COMPLETELY random.

    With this system perhaps it's possible to emulate the electric fields that generate the random number. Admittedly, with any complexity at all (as in a chip) this becomes impractical to do, but hey, why go for almost random when you can have truly random?

    1. Re:A Better System by gordyf · · Score: 1

      I was under the impression that the problem with a system like you described, is that after a geiger counter detects one event, there's a short period of time during which it's unable to detect another. That limits the entropy of the events and the speed at which you can pull random data from it.

      Just a thought.

    2. Re:A Better System by Christopher+Thomas · · Score: 4, Informative

      A better system would be to use radioactive decay to generate random numbers. Very easy to implement using existeng technology, one of the few things that is completely random

      Your proposed method would be slightly skewed, as the half-life of the material would give you an "expected" number of events in your sampling period, which would cause the result to lean towards either even or odd. The effect would be small, but present.

      An alternative approach is to have two detectors, and see which one triggers first. While that method would have no systemic bias, removing intrinsic bias from differences in the samples would be difficult.

      The system in the new C3 chip, though, is also completely random if they designed it well (i.e. amplified thermal noise and rejected other noise sources). You have biasing problems, as with any other system where matching is important, but these can be overcome. Noise injection from other parts of the system is the thing to watch out for here.

      In summary, purely electrical random number generators can be just as random as your proposed scheme, and your proposed scheme is not significantly easier to implement.

    3. Re:A Better System by Sevn · · Score: 1

      The beautiful thing is that nothing is truly random
      at all. It's a convenience to think that way.
      Eventually everything will get cracked down to
      accurately predicting the paths of atomic particles
      in decaying radioactive substances.

      --
      For every annoying gentoo user, are three even more annoying anti-gentoo crybabies. Take Yosh from #Gimp for example.
    4. Re:A Better System by Anonymous Coward · · Score: 1, Interesting

      intrinsic bias?

      use one sample, two detectors, one on the top and another on the bottom, AFAIK what triggers one can't trigger the other, esp if the sample emits beta instead of gamma rays.

    5. Re:A Better System by plover · · Score: 1
      John Walker's HotBits already compensates for the slow decay bias by alternating the meaning of 0 or 1 between each event. But as a previous poster mentioned, he has to power the geiger counter tube down when not used in order to reduce saturation problems when the gas becomes completely ionized.

      I don't know that the random number generator that they've described could ever be "just as random" as radioactive decay, but it looks like it can probably be made "good enough."

      --
      John
    6. Re:A Better System by Anonymous Coward · · Score: 1, Informative

      Along similar lines, a system using visual noise rather than radioactive...

    7. Re:A Better System by Christopher+Thomas · · Score: 1

      intrinsic bias?

      use one sample, two detectors, one on the top and another on the bottom, AFAIK what triggers one can't trigger the other, esp if the sample emits beta instead of gamma rays.


      And that is a close variant the system that I proposed for radioisotope random number generation.

      The original poster suggested counting the number of events that occurred within a predefined period and looking at the least significant bit.

      Problems with the two-detector system with one sample are in making sure that both detectors are equally close to the sample (no variation in intermediate laters), and that they are treated in the same way electrically (which is difficult to guarantee, though you have the same problem - as mentioned in my post - with purely electrical RNGs).

    8. Re:A Better System by Christopher+Thomas · · Score: 1

      I don't know that the random number generator that they've described could ever be "just as random" as radioactive decay, but it looks like it can probably be made "good enough."

      As long as neither system has unwanted noise sources, both are perfectly random. That matches my definition of "just as random" :).

      As for unwanted noise, both systems are suceptible to noise from many sources.

    9. Re:A Better System by ronys · · Score: 1
      A couple of points:

      Do you really want to add radioactivity to the list of issues that need to be addressed when disposing an old PC? (Yes, I know that the radioactive source would be too weak to be dangerous - try explaining that to a greenie)

      All radioactive sources decay with time. This means yet another limitation on the lifetime of your PC. Worse, the failure mode is less benign (and more subtle) than the clock not keeping time...

      --
      Ubi dubium ibi libertas: Where there is doubt, there is freedom.
    10. Re:A Better System by eggstasy · · Score: 1

      Ever heard of Heisenberg's Uncertainty Principle, or better yet, Chaos Theory?
      You are basically mistaken, because measuring things alters them. We don't live in a deterministic world. I can't explain it very well to you because I am not a physicist or anything like that, but I know that very smart people have written long and detailed mathematical proofs about it, so if you could make your way to the nearest scientist im sure he will be glad to explain it.

    11. Re:A Better System by Rutulian · · Score: 2, Insightful

      Your proposed method would be slightly skewed, as the half-life of the material would give you an "expected" number of events in your sampling period, which would cause the result to lean towards either even or odd. The effect would be small, but present.

      Actually that would only be true if the sampling time was about equal to the half-life. Extrapolations from the half-life become much less reliable with smaller sampling times. So if you use something like plutonium, which has a huge half-life, and a sampling time of 1 second, you will get a distribution that is quite random. It would be pretty easy to set up too. All you need is a gas-filled detector in the GM region and some electronics.

    12. Re:A Better System by anthonyrcalgary · · Score: 2, Insightful

      Your proposed method would be slightly skewed, as the half-life of the material would give you an "expected" number of events in your sampling period, which would cause the result to lean towards either even or odd. The effect would be small, but present.

      I can think of many solutions...

      -Use an isotope with a really long half life, like Uranium. The change over the life of the device would be trivial. There are problems, like other atoms becoming radioactive, and isotopes in the decay chain having different half lives, but I think the bias could be kept small, like one bit in millions.

      -Constantly recalibrate by keeping a history of the last N decays, where N is large enough to converge on the actual number sufficiently well, but small enough that if the device was captured it will not reveal what numbers you've generated. Adjust your interval accordingly. The calibration may be biased, but the bias itself will be random and changed with each decay.

      -Count the time between decays, and generate bits by comparing the length of the intervals. If the second is greater, the random bit is a 1. If it's less, it's a 0. I think you could safely alternate between 0 and 1 on equal times, but don't take my word for it. This method would be the best, but half as fast.

      --
      When someone might yell at me, it has to be OpenBSD.
    13. Re:A Better System by chefren · · Score: 1

      I understand that a lava lamp, a digital camera and an image analysis program would be able to generate excellent ramdom numbers. Lava lamps could therefore actually have an excuse for existing.

    14. Re:A Better System by Sevn · · Score: 1

      Ok,
      The more precisely the position of an object is determined, the less precisely the momentum is known in this instant,

      If that's what you think you are talking about.
      That doesn't do much to change the fact that
      technology is progressing at a very rapid rate.
      I'd think that we'd be able to accurately predict
      the movements of every paths of atomic particles
      in decaying radioactive substances maybe, one at
      a time in the next century. I'm not saying we'd
      be able to accurately predict the movement of
      every single atom in the universe. If I had said
      that, the uncertainty principle would apply. I
      don't even think it's unrealistic that we'd
      progress beyond that to the point that we could
      track the movments of a few million atoms at the
      same time. It would figure we'd make that jump
      eventually. In fact, something like the uncertainty
      principle will probably make a lot more sense when we get
      that much closer.

      --
      For every annoying gentoo user, are three even more annoying anti-gentoo crybabies. Take Yosh from #Gimp for example.
    15. Re:A Better System by Sven-Erik · · Score: 1

      In a book I read about the Norwegian secret services work during the cold war where they in the 1950s started to use geigercounters to record background/cosmic radiation as a numbergenerator and basis for the generation of their one-time pads.

      --
      - "Every demand is a prison, and wisdom is only free when it asks nothing." Sir Betrand Russell
    16. Re:A Better System by Anonymous Coward · · Score: 2, Insightful

      This is really totally unworkable. VIA is trying to manufacture a cheap, cheap chip. Why would they want to mess with integrating radioactive material and detectors into their processor, when a simple overloaded transistor is just as random?? Really! Removing bias is a solved problem. The only place it's very difficult to generate random numbers is in pure software.

    17. Re:A Better System by John_Booty · · Score: 2, Funny

      Like my dual Athlon system doesn't run hot enough already... now you want me to put a decaying isotope in there as well? :-P

      --

      OtakuBooty.com: Smart, funny, sexy nerds.
    18. Re:A Better System by Anonymous Coward · · Score: 1, Funny

      It would be pretty easy to set up too. All you need is a gas-filled detector in the GM region and some electronics.

      You seem to have missed the part about aquiring a lump of Plutonium to put into your generator :)

    19. Re:A Better System by eggstasy · · Score: 1

      Like the anonymous poster said, you are mistaken.
      My knowledge of physics is basically what I learned in high school many moons ago, but please don't let our present scientific progress dazzle you into thinking that science will eventually make anything possible. You are being unwise in putting too much faith in the scientific method. Several of our greatest thinkers seem to believe that exponential growth, be it in science or anything else, is unsustainable in the long term, and so it will eventually, at best, level off and become logarithmic.
      Besides, it's not like we've advanced a whole lot lately:
      While it is true that computer speeds have advanced exponentially, other fields have grown only moderately and some have not experienced much growth at all.
      Getting back on the topic, IIRC the uncertainty principle claims that you cannot accurately measure the position and velocity of a particle, because measuring one changes the other.
      By velocity I dont mean scalar speed but both the speed and the heading of a particle.
      If you know where a particle now is with any degree of accuracy, you cannot determine where it is heading, and if you know where it is heading (eg. "north"), you cannot know precisely where it is now. So you end up with a cloud of probability where you know that the particle has a different chance of being in a different part of a general, largish area.
      I strongly suggest that you seek someone more knowledgeable than I am, so that they may better enlighten you about these fundamental matters.

    20. Re:A Better System by gweihir · · Score: 1

      This is really totally unworkable. VIA is trying to manufacture a cheap, cheap chip.

      Exactly! This Geiger-counter method pops up every time randomness is discussed, but it is possibly the worst way to aquire truely random bits in practice! Skew is _not_ a problem, people! Just hash e.g. 512 Byte together with SHA-1 and there will be no skew left if more than about 0.05 bits of entropy can be found in a bit of output. Or XOR enough bits together for the same effect. By the same argument the processor randomness generator is already very good if it produces something like 0.1 bit of entropy per bit delivered. Especially with the speeds you get from the described RNG.

      Termal noise or junction noise are both quantum mechanic effects and are perfectly valid sources of true random noise that can deliver high amounths of entropy in a short time, in sharp contrast to the Geiger-Counter method. And these two types of noise can be produced extremely cheap and reliable.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted and ignored otherwise.
    21. Re:A Better System by gweihir · · Score: 1

      The beautiful thing is that nothing is truly random at all.

      We are talking Crypto here. Randomness is not needed for Crypto. If it is unpredictable, that is quite enough.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted and ignored otherwise.
    22. Re:A Better System by Christopher+Thomas · · Score: 1

      This is really totally unworkable. VIA is trying to manufacture a cheap, cheap chip. Why would they want to mess with integrating radioactive material and detectors into their processor, when a simple overloaded transistor is just as random?

      I believe this was my _point_.

      Grouse at the parent poster, not me.

  14. Re:Cool but... by Anonymous Coward · · Score: 1, Informative

    That laptop was running the old (Ezra-T) core with a half-speed FPU. This is the new (Nehemiah) core that has full-speed floating point. It's yummy :-)

  15. What ever happened... by Xeth · · Score: 1

    To the good old days of RISC processors? I'm tired of all these random additions that are cluttering up modern dies...

    --
    If your theory is different from practice, then your theory is wrong.
  16. Man... by Obiwan+Kenobi · · Score: 4, Funny

    Man, you know you're hardcore when you get excited about a built in random number generator.

    Sample convo after purchase:

    [girlfriend] Honey, what is that?
    [you] (with great awe) The Vee-Eye-Aye Nehemiah C3 CPU with-
    [girlfriend] How much did that cost?
    [you] Wait, lemme finish-
    [girlfriend] Rent. Where is it.
    [you] But it has a-
    [girlfriend] You are not going to tell me that you spent our next month's rent on that *censored* piece of plastic.
    [you] (correcting happily) Silicone!

    You stare off. Slowly, you speak.

    [you] But it has a...random..number...generator. For strong...uh...crypto. You know, cryptography? Big numbers? Random?

    *the sound of footsteps trail away from you*

    [you] Honey?

    1. Re:Man... by WD · · Score: 1

      [WD] (correcting angrily) Silicon!

    2. Re:Man... by localghost · · Score: 1

      I believe he was commenting on his girlfriend, not the chip.

    3. Re:Man... by Anonymous Coward · · Score: 1, Funny

      Actually, after "How much did that cost?" come the response "ten bucks" and the conversation ends. It is a C3, after all.

    4. Re:Man... by Captain+Large+Face · · Score: 2, Funny

      ERROR: Unknown variable "girlfriend" encountered at line 1.

    5. Re:Man... by be-fan · · Score: 1

      [you] (correcting happily) Silicone!
      >>>>>>>>>
      That would be your girlfriend. CPUs are made of silicon -- no 'e' at the end.

      --
      A deep unwavering belief is a sure sign you're missing something...
  17. What does this mean? by Tom7 · · Score: 2

    I don't understand what your post means...

    > If a machine can not generate a truly random number (not seed based)

    That's true, a deterministic machine can't generate a "truly" random number by definition. On the other hand, we can generate numbers that are cryptographically strong (infeasible to distinguish from "true" random numbers) on a deterministic machine, and we can build nondeterministic machines. This is about a nondeterministic machine.

    > ... and is not turing complete

    "Turing complete" refers to the computational power of a language or programming model -- that it can express any program that a turing machine can express. A turing machine can compute anything that we know how to compute, so saying that a machine is turing complete means that you can code any computable task on it. No machine is truly turing complete, because all machines are finite, but we think of basically everything that can compute (including humans) as turing complete.

    So, what does this have to do with artificial intelligence? Do you mean turing test?

    > can it be called Artificially Intelligent?

    Probably not, since nobody has written a computer program yet that we would think of as "intelligent."

    1. Re:What does this mean? by sco08y · · Score: 2, Funny

      I wrote a program that intelligently replies to Slashdot posts:

      10 PRINT "You fucking kharma whore!"
      20 PRINT "How the hell is that +5 funny?"
      30 PRINT "Quit fucking bitching about Slashdot posters!"
      40 GOTO 10

  18. finite state machine by shird · · Score: 3, Informative

    This is awesome, but I feel it kind of skews one of the great things about CPUs. Presently, the same piece of code, run a million times, will always produce the same outcome, and follow the same path of execution (providing it accesses no hardware - ie, no io instructions). With the addition of this instruction, you no longer have this fixed execution path.

    Still, with IO this 'problem' exists anyway (although only at ring 0 -intel). It just makes it difficult for heuristic anti-virus progams, and debugging etc, when the path of execution can be arbitrary. Nonetheless, I think its a cool concept, and great its being done at ring 3.

    --
    I.O.U One Sig.
    1. Re:finite state machine by shird · · Score: 1

      note - by 'finite state machine' - I think I meant 'deterministic' or something :) not great with terminolgy, but at least I know what I mean.

      --
      I.O.U One Sig.
    2. Re:finite state machine by jhunsake · · Score: 1

      while i agree he shouldn't have posted a personal insult, asking him to refute such a stupid comment is not a worthy request

      anyone with a cursory knowledge of computers knows that the original poster was trolling more than anyone else

    3. Re:finite state machine by jhunsake · · Score: 1

      Replying to the wrong post again..? You're the dumbfuck!

    4. Re:finite state machine by jhunsake · · Score: 1

      Alright someone is using my account. Wonderful!

    5. Re:finite state machine by jhunsake · · Score: 1

      No one is using your account, schizo!

    6. Re:finite state machine by shird · · Score: 1

      No, I wasn't trolling. My point was, existing RNG are implemented using IO, which can only be done at ring 0. Hence, a driver plus common API etc would be required to use it in an application.

      By having a ring 3 'user space' instruction, any application can use it. A pure ring 3 application is possible to be determinstic/finite because interfacing to anything arbritrary wasn't previously possible. All instructions other than IO were previously deterministic/finite (including memory access), and IO calls are privleged instructions. Now, there is a ring 3 instruction which doesn't exhibit this behaviour.

      --
      I.O.U One Sig.
    7. Re:finite state machine by be-fan · · Score: 1

      Um there are lots of indeterministic things in ring3. The TSC (Timestamp counter) calls, for example. Timing between external interrupts. Hell, even the IO port instructions can run in ring 3. Otherwise, X wouldn't work.

      --
      A deep unwavering belief is a sure sign you're missing something...
    8. Re:finite state machine by p3d0 · · Score: 1

      I guess you've never worked with an SMP?

      --
      Patrick Doyle
      I mod down every jackass who puts his moderation policy in his sig. Oh, wait a sec....
  19. Beware this by WetCat · · Score: 2, Funny

    1. A good hardware built-in RNG introduced
    2. Everybody starts using it
    3. Some guys in a CPU company change it to not so good
    hardware RNG (for example f(x)=exp(sin(x)) etc)
    4. ...
    5. Profit?!

    1. Re:Beware this by Steven+Blanchley · · Score: 1

      I somewhat doubt that would lead to profit. But is it really a security concern? I would imagine that if you are generating random numbers for crypto, you at least know what CPU you are using and can be sure it's not a cheapo knockoff with a crap PRNG.

  20. Random Numbers? by blitzoid · · Score: 2, Funny

    I've got your random number RIGHT HERE...

    5,246,549!

    --
    I am a filthy pirate.
  21. They should hire my girlfriend by mao+che+minh · · Score: 4, Funny

    Despite my best efforts at randomly naming folders and subfolders, and randomly placing permissions on them, and then randomly naimg the files without any type of extension on them, my girlfriend is able to quickly locate and identify my porn - even though she barely knows how to operate a computer in general, let alone Linux. She is a natural at breaking encryption.

    1. Re:They should hire my girlfriend by YetAnotherDave · · Score: 4, Funny

      um, try actually encrypting it (lots of solid encrypted loopback FS options these days).
      If she can crack that, DON'T LET HER GET AWAY, she will make you both very wealthy...

    2. Re:They should hire my girlfriend by radish · · Score: 1

      Just goes to show - Security through Obscurity doesn't work!

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    3. Re:They should hire my girlfriend by be-fan · · Score: 1

      Did you go and do something stupid like give your girlfriend root?

      PS> Now that I think of it. That kinda sounds like a venereal disease...

      --
      A deep unwavering belief is a sure sign you're missing something...
    4. Re:They should hire my girlfriend by Mignon · · Score: 1
      Security through Obscurity doesn't work

      This makes me wonder if the creators of feckfeck, as referenced in Anger as a Software Design Philosophy were thinking of implementing security through obscenity, though it sounds like this fellow is looking for security for obscenity.

  22. 42 by SHEENmaster · · Score: 1

    I don't know if this is logical or psychological, but I notice 20+ occurences of the integer 42 daily. 9/10 that I look at my watch it's xx:xx:42, the lunch bell rings at xx:42:xx, it shows up in my Physics 2 book, etc.

    Just to keep this on topic, what's the difference between /dev/random and /dev/urandom aside from timing? Is one more secure? Does one use more possible bitvalues while the other sticks to text ones? Is one present in more unix flavors?

    --
    You can't judge a book by the way it wears its hair.
    1. Re:42 by gordyf · · Score: 1

      As far as I know, /dev/random gathers real entropy data from events occuring around the system - incoming network activity, keyboard strokes, mouse movement, etc... /dev/urandom, however, is a traditional prng, and not actually random. This allows it to be much faster, but /dev/random would supposedly be truly random.

      You'd use /dev/random for generating random data for, say, generating a key.. but /dev/urandom would suffice (and be far, far faster) for wiping data off a drive (cat /dev/urandom > /dev/hda).

    2. Re:42 by jhunsake · · Score: 1

      No, /dev/random blocks when it doesn't have enough entropy. /dev/urandom doesn't block when it runs out of entropy, it just switches to an algorithm.

      Speed has nothing to do with it.

    3. Re:42 by jhunsake · · Score: 1

      2 seconds on a unix box: man random

    4. Re:42 by maelstrom · · Score: 1

      Actually the network activity is not used as an attacker could control that. However there is a patch that allows you to optionally add that feature, so you weren't entirely off base.

      --
      The more you know, the less you understand.
    5. Re:42 by packeteer · · Score: 1

      I tend to see 69 all over the place. Does that mean im a pervert or do the hairy palms already give it away.

      --
      unzip; strip; touch; finger; mount; fsck; more; yes; unmount; sleep
    6. Re:42 by Ralph+Wiggam · · Score: 1

      You've seen 20 instances of 42 because you've been looking for the number 42. It's like numerology, you disregard the other thousands of numbers you see every day and focus on the ones you want. When you look at your watch, you see it count :39, :40, :41, then :42 and say to yourself "Damn, there's another 42."

      -B

  23. Take a look a HotBits by Styx · · Score: 3, Informative

    John Walker, the founder of Autodesk, has made a system like that, from which offers random bits:

    HotBits
    --
    /Styx
    1. Re:Take a look a HotBits by 1984 · · Score: 1

      It's paranoid to point it out, but you'd be very, very silly to use an untrusted source of random numbers in any cryptographic application.

      'Course this might be dead handy for other things.

  24. External hardware RNG by starman97 · · Score: 2, Informative

    Atom-Age made a hardware box that produced 64K of random numbers with
    every character entered in the serial port. They spent a lot of time
    isolating each stage to ensure no noise got to the thermal noise
    generator /amplifier. There was no whitening or other tricks played
    to make the numbers 'more random' There were 3 sets of batteries,
    a 9V for the noise source, C Cells for the microprocessor, and D cells
    to run the serial interface. The whole thing was encased in a steel box
    with sheilding around the connector and indicator lights. Analysis of
    the numbers showed very good randomness.

    Unfortunatly at $200 it never really sold well.
    They did release the code in the processor for inspection,
    I'm not sure about the schematics, probably not.

    --
    Starman97@Gmail.com (bring it on spammers)
  25. Random yes, but by jasonditz · · Score: 1

    When will Microsoft support this chip feature in Quickbasic?

    I'm tired of RANDOMIZE TIMER ing, dammit!

  26. coin tossing by wattersa · · Score: 1

    Perhaps you are referring to "Benford's Law". I'm not quite sure of the link between his theorem and coin tossing, but it's interesting nonetheless. The strangest thing is the number of triples, quadruples, and even higher strings that can be expected from a 200 flip session. I remember this in the context of the SAT, because apparently they purposely avoid have multiple strings of the same answer precisely so people have one less way of guessing the right answer. If I were to fake a coin toss session, I would put in at least one string of six, two strings of five, several strings of four, a bunch of strings of three, and many strings of two.

  27. 32! 98! 43! 12! 0! 3! 453! by stratjakt · · Score: 2, Funny

    392! 3892! 7489!

    feel free to use any of those if you're short on cash and cant upgrade just yet.

    THEY ARE ALL OPEN SOURCE - FREE AS IN I'LL SUE YOU WHEN YOU GOT MONEY TO PAY!

    --
    I don't need no instructions to know how to rock!!!!
  28. A Cheaper System by plover · · Score: 3, Informative
    They're probably using electrical noise for both performance and cost reasons. The rate of decay of a safe amount of radioactive sample is quite slow compared to the amount of entropy you might be able to derive from it. (If the sample were decaying at the rate you suggest in your posting, you'd probably want to be wearing a lead codpiece if you were to sit in front of it. :-)

    This VIA chip is producing 30-50 million bits per second.

    Also, each radiological decay event would have more potential to cause bit rot in your normal CPU, memory or other chipset's operations.

    John Walker is already doing exactly this, producing random bits with a system he calls HotBits. Take a look at this page for his system and a good explanation. Of course I also think it may help to live in a castle with a 1-meter-thick-concrete-lined cistern located three-basement-levels-down to stick your Krypton-85 source in...

    And while using nuclear decay would raise the geek factor so high as to be measurable on a geiger counter, the manufacturing and disposal licensing and other handling problems that would accompany any usage of nuclear materials would be more than onerous for any company that had an economical alternative.

    --
    John
  29. Is it really so new? by stj · · Score: 5, Funny

    I remember when Cyrix had it's 100MHz CPUs with huge fans and everybody tweaked them to 133MHz, every long-term calculation on that involving FPU would give random numbers as the result...
    So, where is the novelty? ;-)

    --
    iThink iHate iMod
    1. Re: Is it really so new? by Black+Parrot · · Score: 1


      > I remember when Cyrix had it's 100MHz CPUs with huge fans and everybody tweaked them to 133MHz, every long-term calculation on that involving FPU would give random numbers as the result...

      Bah, the early Pentiums would do it without the need for overclocking.

      --
      Sheesh, evil *and* a jerk. -- Jade
  30. "OT" (quote, unquote) by scotch · · Score: 4, Funny
    Isn't it interesting how much importance we place on quote unquote "true" randomness of numbers?

    You know, when you're able to use quote marks (" for example) in a written medium, you really don't need to spell out quote unquote as well. It really just doesn't make any sense - we can see the quote marks you used, spelling that idiom out doesn't add anything. People sometimes say "quote unquote" because you can't see the quote marks in their speech. Even this practice is ill-advised as it makes one sound like a drooling marketdroid (e.g. "At the end of the day, we need to quote unquote actualize profits by exceeding expenses with net income in order to meet quote-unquote business objective. Take an action quote-unquote item").

    This is the most bizarre thing I've seen all day. Please don't do it again. Thank you.

    --
    XML causes global warming.
    1. Re:"OT" (quote, unquote) by infiniti99 · · Score: 1

      Interesting, just last week I was writing a post and came across this issue. As I was saying the content in my head while writing it out, I stumbled on "quote unquote". You see, in my head I was saying those words, but since it surely wouldn't look right as text, I type real quotes.

      Problem is, reading back the text that had real quotes just didn't have the same kind of flow as a spoken message using the silly "quote unquote" substitute. They each come across in a slightly different way. I couldn't find a way to represent the flow I wanted, so I ended up canning the idea of quoted text entirely, and wrote around it.

    2. Re:"OT" (quote, unquote) by cluke · · Score: 1

      Same sort of thing with hand-written smilies. I was writing a note and was about to end on a colon-hypen-bracket smiley when I realised I could just draw an actual smiley face.

      But I could not do that either - it looked too damn gay.

    3. Re:"OT" (quote, unquote) by be-fan · · Score: 1

      Thinking that hard? For a Slashdot post?

      --
      A deep unwavering belief is a sure sign you're missing something...
    4. Re:"OT" (quote, unquote) by jovlinger · · Score: 1

      shouldn't that be "Take an action quote-item-unquote, Suzy"?

      Otherwise you're quoting the space in front of the word. Alternatively, you'd need to provide a counter, so you could disambiguate "Take an action quote-unquote-one item, suzy" which quotes only item as opposed to quoting item susy (quote-unquote-two)? Since you're now using quote-unquote as one terminal, you might as well drop one of them, and just use quote-two.

      Don't even get me started on making little Rabbit-Ears with your fingers when you talk. Makes me violent just thinking about it.

    5. Re:"OT" (quote, unquote) by jovlinger · · Score: 1

      Oh wait, my counting version only works with atomic numbers. A statement like "I'd like quote-unquote-one thousand items..." leaves it ambigious whether you mean to quote the next 1000 words, starting with "items" or whether you want to quote "thousand".

      Oh bother. I propose we move to a fully parenthesized prefix syntax.

  31. Re:Cool but... by rrkap · · Score: 1

    It's the Ezra core that has a 1/3 speed coprocessor. The newer core doesn't have this feature. Besides, if you aren't running CAD or playing 3D games, you don't use the math co that much.

    --
    I like my beverages with warning labels!
  32. The artist formerly known as Palladium? by DarkVein · · Score: 1

    A good RNG sounds nice and all, and there's no doubt good crypographic benefits to these features.

    I can read the good features well enough. I mislike parts of the language, however...

    Does this impliment any of the subversive elements of the architecture formerly known as Palladium? [now called "next-generation secure computing base", because "Palladium" is far too easy to get a linguisticly-controlled mental handle on]

    The C3 processor has had my interests in the form of EPIA. However, I'd sooner burn in hell than put a Canadian penny towards Palladium, as proposed by the TCPI and Microsoft.

    In more particular words, I've been unable disect from the market-lingo if this architecture contains the "protected execution space" and such features that could deny cryptographically unsigned activity, instead of giving me the tools of verification.

    --

    I'm as mimsy as the next borogove but your mome raths are completely outgrabe.

    1. Re:The artist formerly known as Palladium? by DarkVein · · Score: 1

      s/TCPI/TCPA

      --

      I'm as mimsy as the next borogove but your mome raths are completely outgrabe.

  33. In the interest of national safety: by CoolGuySteve · · Score: 3, Funny

    Everyone should use the same random number.

    I think 23 is a good one, nice an prime, and close to 21 too!

  34. Re:Cool but... by TheMidget · · Score: 4, Funny

    Actually, the random number generator is the math coprocessor. And they are not even the first to think about this: such techniques were pioneered by Intel in the first Pentiums

  35. Is that a typo? by A+nonymous+Coward · · Score: 1

    Surely you meant 5,246,594.

  36. Re:Finally (OT: Ti-83 Rand) by cymen · · Score: 1

    You have a fridge, right? Chuck it in there or the freezer (not too long with that LCD) and see how it works after a good cooling.

  37. Quick test... by MarkusQ · · Score: 1

    If you're using KDE, click on the little gear icon (generally in the lower left corner). Then selected the item "Recent Documents."

    Do you suppose that might be how she does it?

    -- MarkusQ

  38. USELESS by Anonymous Coward · · Score: 1, Informative

    It's too bad that, outside of a few people in the scientific community (such as those running Monte Carlo simulations and statistical thermodynamics calculations), no one uses random number generators (RNGs).

    And the worst thing is, the aforementioned people who do use RNGs undoubtedly will want to run their own generator that is most likely superior.

    For example, I run Monte Carlo simulations of polymer networks. The algorithm I use is the Mersenne Twister algorithm, which has an enormous period of 2^19937 - 1. This is much superior to VIA's built in RNG, and much faster than the standard rand() function in C.

    So I'm sorry, but I fail to see the utility of VIA's RNG. It's a cool little toy, and I'm sure it's going to get VIA some publicity, but I'm betting that it will be a hard sell to most people.

    1. Re:USELESS by viega · · Score: 4, Informative

      Is this a troll? Nevertheless, it is stupid, for a few reasons: 1) The Mersenne Twister is not cryptographically secure. 2) Even if it were, it would still need to be seeded with entropy, such as the kind provided by the VIA generator. 3) There's a big difference between entropy and pseudo-random numbers, anyway. 4) Entropy is crucial in many security-related applications. Of course, given sufficient entropy, you can stretch it out with a good cryptographic PRNG.

    2. Re:USELESS by stanmann · · Score: 1

      Yes, and inside of a few people in the scientific community it is too dark.

      Seriously though, Except for stuffed suits who add numbers in a column, a RNG is used by anyone who uses certain forms of encryption and by everyone who plays any sort of game with any level of AI, at least in a game with any level of replayability. The problem is that VIA being mostly a walmart and homebrew processor, games won't necessarily be coded to take advantage of this.

      --
      Food not Bombs is a nice platitude but it breaks down when you notice that the Bombees are usually well fed
    3. Re:USELESS by mattwolfewvu · · Score: 1
      Looks like someone's never played DnD (or any other dice rolling rpg).

      Surely you know that "Random Number Generator" is the uber-geek term for a D6!

      --
      "I think that when you become a Republican, you don't get to score any more." -- Butt-head
  39. Paul Kocher is one of the experts by billstewart · · Score: 1

    Paul Kocher is one of the well-known experts in the practical crypto field. As you can see from his web site, he's done some innovative mean nasty approaches to cracking cryptosystems (mathematical proofs are a fine thing, but if you can figure out the state of the CPU by measuring its response time or detecting the power consumption, your system isn't as secure as you thought :-)

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  40. Nehemiah core on EPIA boards by Stormie · · Score: 2, Interesting

    Does anyone know when VIA intend to release an EPIA MiniITX motherboard with a Nehemiah-cored C3 CPU? Apparently the M10000 they released recently was supposed to be so equipped, but turned out to only have a 1GHz version of the older Ezra-T C3 core. Since the Nehemiah core has a lot of improvements, this random number generator amongst them, I'd rather hang out for it than buy an M10000 now.. but how long must I hang?

    1. Re:Nehemiah core on EPIA boards by cymen · · Score: 1

      Mini-ITX.com keeps me informed of changes in the mITX world. Their front page has a link to a review of the Nehemiah core C3 by SilentPCReview. Hopefully the new core will be out soon if review sites have it in hand.

  41. Wolfram by mindpixel · · Score: 1

    Someone should ask Wolfram how the universe generates random numbers...

    1. Re:Wolfram by rockola · · Score: 1

      Einstein was right, God does not play dice with the universe. However, the universe plays dice with God.

      --
      Those who don't know Lisp are doomed to reimplement it.
  42. more random number generators: by geekoid · · Score: 4, Funny

    The Beatle random number generator:
    number 9
    number 9
    number 9

    The monty python random number generator:
    6, no 8...AAAAaaahhhhhhh

    the ask a person to guess a number between 1-10 random number generator

    7
    3

    the Slashdot random number generator
    3.14, 1701, 2001, 69, 1337

    The Microsoft Random number generator
    7,7,7,7 yes its random, says so in the eula

    the pepsi random number generator:
    1

    the buffy random number generator:
    "you dare insult buffy? you are stupid AND you suck."wait, that was the "angery buffy fan response to a minor critque of the show generator"... my bad.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    1. Re:more random number generators: by ralmeida · · Score: 1

      The ultimate RNG: 42

      --
      This space left intentionally blank.
    2. Re:more random number generators: by be-fan · · Score: 1

      I feel kinda stupid asking this...what's 1701 mean?

      --
      A deep unwavering belief is a sure sign you're missing something...
  43. Where does noise come from? by mindpixel · · Score: 4, Interesting

    I remmeber going to the university science library when I was 14 to try to find out how to write a program to generate random numbers...found a big yellow book about pseudo-random number generators and thought, no, I want a real random number generator...of course I opened the book and discovered that it is impossible inside a deterministic system...you have to stick an antenna into an external universe...then I thought where the fuck did the universe get noise? Why isn't the universe one big symmetric crystal?

    Now I sit here looking at a 2 billion year-old hypernova and no one here can answer this question (There are at least 5 cosmoligists within spitting distance of me right now)...

    1. Re:Where does noise come from? by Anonymous Coward · · Score: 2, Informative

      Because of quantum uncertainty. If there had been no quantum uncertainty then after the big bang every particle would have had perfectly equal forces on it and thus the Universe would have settled into a perfectly homogenous soup (or maybe a big symmetric crystal), quantum uncertainty caused minute vartiations in density, forces etc, which allowed clumps to form and hence stars, planets and everything else.

    2. Re:Where does noise come from? by kinnell · · Score: 2, Interesting
      where the fuck did the universe get noise?

      I think there are several conclusions you could come to:

      1. The book (or mathematics) is wrong
      2. The universe is not a deterministic system
      3. Random numbers do not exist

      I would lean towards 2 - aren't quantum processes such as radioactive decay non-deterministic? This seems to be a matter of opinion, even among great physicists. If, however you hold that the universe is deterministic, I suppose you would have to come to the conclusion that nothing is entirely random.

      As a side not, noise does not imply non-determinism: gaussian white noise, for example, is entirely deterministic (depending on the above ;-) ), and is generated in a system where a large number of "random" events summed together contribute to the whole. For example chaotic movements of electrons in a hot conductor giving rise to electrical noise. In such a case, the noise is in practice unpredictable, so is treated as non-deterministic.

      --
      If I seem short sighted, it is because I stand on the shoulders of midgets
    3. Re:Where does noise come from? by Anonymous Coward · · Score: 1
      As a side note, noise does not imply non-determinism: gaussian white noise, for example, is entirely deterministic

      Gaussian white noise, in general is not deterministic, the particularly example you cite of electrons in a hot conductor may be, but that is because in this case the gaussian white noise is only an approximation to underlying deterministic process (which may be in fact be non-deterministic due to quantum effects)
    4. Re:Where does noise come from? by ryanvm · · Score: 1

      Maybe they would answer you if you'd stop spitting on them.

    5. Re:Where does noise come from? by data1 · · Score: 1

      The Culprit: Quantum Fuzz.
      Werner Heisenberg's uincertainty principle (1927)effectively eliminates the possibility of getting some sort of accurate measurment of a number as a result of physical influence, since you are in effect tampering with the measurment medium.

      Hmmm... my brain is tickled, now i wont be able to work the rest of the day - time for some thought experiments!

    6. Re:Where does noise come from? by mindpixel · · Score: 1

      Someone has to bath them.

  44. Let me put this another way by Sevn · · Score: 1

    We have electron microscopes. The technology will
    get more refined. We'll eventually be able to track
    the movements of an atom and find a pattern in
    relation to what's going on around it.

    Ok, fast forward 100 years. At this point computers
    are a ridiculous combination of DNA, and some sort
    of fastening mechanism that attaches it to your
    body for either voice or (hopefully) some sort of
    direct thought connection. This is the computer
    you can plug into the machine that blasts an
    enormous amount of some particle that passes
    through matter into a collection sensor on the
    other side that looks for the subatomic equivalent
    of doppler shift, then charts the path of every
    particle in that substance. Something powerful
    enough to translate the slight change in that
    particle passing through the substance into an
    interception vector and plot speed and movement.
    All this outputed to a 3d model that you can
    zoom in on and automatically record to some
    sort of database for more thorough data analysis.

    --
    For every annoying gentoo user, are three even more annoying anti-gentoo crybabies. Take Yosh from #Gimp for example.
  45. Humans vs. Machines by dstone · · Score: 2

    In fact, if you ask a human being for 3 random numbers, odds are very good that they will give you at least two sequential ones...such as 7 6 2...or 5 9 8...

    What do you mean by "very good" odds? If you ask a TRNG (true random number generator) for 3 random numbers, odds are quite good (40%) that it will give you at least two sequential ones. This is just rough math (supplied upon request) off the top of my head with the assumption that 9 and 0 are considered to be adjacent; odds would be slightly lower if we reject this. My point is that your example has fairly significant odds, even by a TRNG.

    But with random numbers...a human couldn't do it even remotely as well a computer can, so why is it considered such a weakness of computers?

    Humans can toss a coin or roll a die or spin a wheel. Those are actually decent ways to generate numbers. It's an ability to interface with entropy that humans have (and computers don't, unless you want to stuff a natural/mechanical/chaotic process into a hardware RNG). And the sequences generated by humans in those ways are not easily recreated or predicted and a seed value doesn't really exist to weaken the scheme either (as it does with software RNGs). Assuming you give the wheel/die/coin a really good spin!

  46. Finally! by AvengerXP · · Score: 1

    I can stop getting 10 times Undead in a row when playing Random in Warcraft III!

    --
    Trolls dont like to be Flamebait, because they burn so well. Protect our Troll heritage!
  47. You are an ingnorant, pompous fuckrod by Anonymous Coward · · Score: 1, Informative

    And you are wrong. Uncertainty principle holds with just a single particle. You clearly have no idea what you are talking about. If you know the position 100% accurately, you don't know the speed, and vice versa. This is a simple, provable, and unescapable rule of the universe.

  48. Turing - nothing new under the sun... by AYeomans · · Score: 1

    So what's new?

    Alan Turing designed the random number generator instruction for the Ferranti Mark 1 around 1950.

    (Or is this an entry for the oldest Slashdot reposting competition, just 53 years late?)

    --
    Andrew Yeomans
  49. Why shouldn't there be noise? by Kalani · · Score: 2, Informative

    Consider a deterministic pseudorandom number generator that's highly sensitive to its initial conditions. Maybe that's the universe and we don't know it because we can't determine the initial conditions with absolute certainty nor can we even determine its current state with sufficient accuracy.

    What if space and time are discrete (Ed Fredkin and so on)? Of course, space couldn't be a rigidly even lattice (it could be a network of loosely connected nodes), but in this sense you have a rigorous foundation for modelling the evolution of the universe from one state to the next ... a computational process that defines how the universe operates. This process is only (universally) taking us toward increasing entropy, so it's a randomizing process by nature. Really I think that order is the oddity ... not randomness.

    --
    ___
    The ends are ape-chosen, only the means are man's. -- Aldous Huxley
  50. He already answered that by Kalani · · Score: 1

    If a discrete dynamical system as simple as (2 state, 1 dimensional, 1 nearest neighbor) Rule 30 can generate 'pseudo'random numbers, it's not hard to believe that the universe can too. Fredkin has also answered this at his digital physics website.

    --
    ___
    The ends are ape-chosen, only the means are man's. -- Aldous Huxley
  51. Mmm.. thermal noise by Scorchio · · Score: 2, Interesting

    Similar to what Douglas Adams suggested as a random number generator, 25 years or so ago, I guess. This implementation is a little more convenient - although slightly less tasty - than a fresh really hot cup of tea.

  52. Re:here you go by borgdows · · Score: 1

    I'm sure you're so dumb that you posted this by hand instead of using the new VIA processor!

  53. The Law of Seven by ihatewinXP · · Score: 1

    That was the other half of my joke. Not only does the prototype suck but being a human all he ever does is give you "Seven." Glad to see a few people picked up on the not-so-random number generator.

    --
    ---- The real Slashdot is still here. You just have to browse at -1 to read the comments.
  54. Re:Ok so I've read (most) of the posts here and by GodSpiral · · Score: 1

    without knowing the algorithm or source code used, the problem with software RNGs is that they all cycle. So if you use one to generate its full list of output, you can predict any program's random number stream after just a few samples.

    Your mathematician annecdote sounds a little far fetched. There is only a few widely used algorithms for software RNGs, so I guess it is possible to guess at the core algorithm, guess at straightforward software manipulations of the RNGs, and then test against the stream of keno numbers to find where in the cycle it is.

  55. And the the findings of this reviewer... by Junior+J.+Junior+III · · Score: 1

    I rate this random number generator a... (rolls dice) 4 out of a possible 10!

    --
    You see? You see? Your stupid minds! Stupid! Stupid!
  56. Indeed by Styx · · Score: 1

    He says so himself:

    Of course, if you're using the random data for cryptography or other security-related applications, you can't be certain I'm not squirreling away a copy. But I'm not, really.

    Even if he isn't, what's to stop anyone of the route between you and him, from saving a copy, or altering the numbers enroute?

    But if you need numbers you can really trust, he also shows you how to build your own.

    --
    /Styx
  57. It isn't like this is the first lull we've had by Sevn · · Score: 1

    in progress. Your limited thinking is common. I
    think it's ludicrous to think we'll hit a glass
    ceiling at any point. Most of the arguments against
    my way of seeing this is the uncertainty principle
    example of an electron being shot at a plate with
    two holes in it and going through both at the same
    time. That's great but an electron isn't the only
    particle. Think about that. I'd be more inclined
    to believe that our current science is fundementally
    flawed like it turns out to be every hundred years
    or so than to think we won't eventually be able
    to find patterns and signatures in everything.
    From the shape of the chambered nautilus to the
    orbits of atoms and galaxies. Something leads to
    something else and it gets unraveled and
    understood with increasing levels of certainty.
    Cause and effect. If you think that any science
    we have now will be applicable in a thousand
    years, you are kidding yourself. I'll put my
    money on time.

    --
    For every annoying gentoo user, are three even more annoying anti-gentoo crybabies. Take Yosh from #Gimp for example.
  58. OT: quote-unquote "your sig" by sig+cop · · Score: 1

    Love the sig.

  59. My analysis by AnotherBlackHat · · Score: 1

    Further discussion is bound to appear on sci.crypt.random-numbers before too long.
    First, the best paper I've been able to find is this one;
    http://www.via.com.tw/en/viac3/via_c3_padlock_ev al uation.pdf

    This HRNG is based on sampling a high speed oscillator with a low speed oscillators XORed together.
    The output is run through a "von Neumann
    Corrector Register" before finally being output.
    (The corrector can be bipassed.)
    Both oscillators and Von Neumann's method of correcting for bias have a bad history in HRNG,
    so this particular HRNG doesn't give me that warm glowy feeling of having been designed by someone who knew what they were doing.

    The output of this generator is biased, even in the "corrected" mode.
    This isn't damning by itself, but it shows that as usual,
    the raw bits are not independant, so the Von Neumann corrector doesn't, and it's IMO overall a waste.
    Not a big waste, it has some good properties,
    but there are much better things that could have been built out of the realestate.

    The interdependance of the bits is typical of an oscillator design,
    and we can expect all the usual failures.
    In particular, if they ever do a shrink of this chip, they need to redesign the oscillator portions.

    Although I'm not particular impressed with this design, and the output needs to be processed before being used,
    it's still way better than nothing.
    With a raw output of over 3 megabytes a second,
    what it lacks in unbiasedness can be more than made up with oversampling.
    In the processed mode, it's only 1/8 the speed
    so it wouldn't be an acceptable replacement for statistical programs even if the output were acceptably unbiased.
    Despite the claims of the paper of .85-.99 bits of entropy per bit,
    Clearly the amount of entropy in the raw mode is far less than .5, probably closer to .3.
    (If it were as high as claimed, then the corrector wouldn't be as slow as it is.)
    The bad entropy estimate is really a failure of the paper though, not the HRNG.
    Many HRNG designs produce less than .1 e-bits/per bit so .3 isn't bad.

    -- this is not a .sig

  60. Cooler RND by Cybrr · · Score: 1
    --
    Why did GEAR crush RDP?
  61. Re:Ok so I've read (most) of the posts here and by rev063 · · Score: 1
    The anecdote isn't as farfetched as you might think. (IAAS -- I am a statistician -- so I can speak from experience here.) Physical systems, like casino wheels, are terribly hard to predict. But there are ways ...

    I know of one story where an wily engineer exploted an imbalance in a casino roulette wheel. Basically, an error in the alignment meant that one side of the casino wheel came up more often than the other. It still wasn't possible to predict any one number coming up, but you could say, *statistically*, that certain numbers came up more often than the odds paid for betting on them. If you make enough bets, then after a while the difference will result in profit. Casinos actually *encourage* the punters to write down the past numbers, but without some heavy-duty analytic software to back it up, this won't help anyone -- and you can't bring your PC into the casino, that's for sure. This engineer has some kind of transmission system built into his shoe, as I recall. But roulette wheels are regularly checked for balance for exactly this reason, so don't try this at home, kids.

    When RNGs are used instead of physical systems, there are other ways to exploit the system. I remember one time when the government of my home state in Australia introduced an early form of on-line gambling: a Keno system (like lotto -- draw 10 numbered balls from 100, and try and guess all 10) with drawings every five minutes. It was all computer-controlled, with displays in pubs and bars around the state. You could place bets at an online terminal at the bar. The government got a statistical consulting business I was involved with to help set the odds and work out what the expected payoff would be (so they'd have enough mony to cover winnings in the early days -- the jackpot was a significant amount -- early payoffs were to be backed by insurance).

    Unfortunately, the jackpot was won on the first game of day three, which caused some embarassment all round. (They'd predicted a miniscule chance of it being won within a month -- there was a chance of this, of course, but the insurance premium paid didn't cover this eventuality.) A bit of investigation revealed what had happened though. On the first drawing of day 1, the numbers were (say) 16 19 22 27 30 49 58 65 74 97. On the first drawing of day 2, the numbers were again, 16 19 22 27 30 49 58 65 74 97. Someone noticed this and placed a bet for the same numbers for the first game of day 3, and won the jackpot. As it turns out, the programmer had reset the "FOR day IN ..." loop, meaning the first results of each day were the same. (The RNG was used between games in the ticket issuing process, so it didn't affect later days, which was why it wasn't noticed in development.) Just goes to show the importance of good QA when dealing with RNGs.

  62. Re: Ok so I've read (most) of the posts here and by Black+Parrot · · Score: 1


    > Someone noticed this and placed a bet for the same numbers for the first game of day 3, and won the jackpot. As it turns out, the programmer had reset the "FOR day IN ..." loop, meaning the first results of each day were the same.

    Were "someone" and "the programmer" by chance the same person?

    --
    Sheesh, evil *and* a jerk. -- Jade
  63. Re: Ok so I've read (most) of the posts here and by rev063 · · Score: 1
    This was looked into during the police investigation and enquiry, but no connection was found. It was just some observant schmuck, writing down the numbers trying to predict them. (Shouldn't have worked, but there ya go.)

    BTW, I meant to say: "the programmer had reset the RANDOM SEED WITHIN THE "FOR day IN ..." loop ...

  64. Ultimate source for randomness by Anonymous Coward · · Score: 1, Funny

    MS Word
    you try to do the same thing
    at different times and get a different result each time :)

  65. seemingly random events not so random?? by d0ggi3 · · Score: 1

    www.princeton.edu/~pear

    i found this research to be quite shocking. the jist of the research is that your conscious thoughts can influence truly random events.

  66. re: rabbit ears by sacrilicious · · Score: 1
    Don't even get me started on making little Rabbit-Ears with your fingers

    Agreed. I hate those so-called "Rabbit Ears". (reader invited to visualize fingers making rabbit ear gesticulations during previous sentence's quote marks.)

    --
    - First they ignore you, then they laugh at you, then ???, then profit.
  67. I don't count it by SHEENmaster · · Score: 1

    if I wait for 42 to come up.

    Do you really think that the Hitchiker's Guide contains 42 for no specific reason!?

    --
    You can't judge a book by the way it wears its hair.