Fix weak random seed

tylerjl · Apr 4, 2014 · 6e5cd6c62e45dfcb77745bf8087112ad264b8024 · 6e5cd6c · jjarmoc · Apr 6, 2014
1 parent 929e6e5
commit 6e5cd6c62e45dfcb77745bf8087112ad264b8024
Unified Split

Showing with 2 additions and 2 deletions.

+2 −2 scoreserver.rb
diff --git a/scoreserver.rb b/scoreserver.rb
@@ -1,7 +1,7 @@
 #!/usr/bin/ruby
 require 'rubygems'
 require 'sinatra'
-require 'digest/sha1'
+require 'securerandom'
 
 SCORESERVER_VERSION = "0.0.2"
 
@@ -11,7 +11,7 @@
   # create default config.rb
   open('./config.rb', "w+") {|f|
     f.puts <<-"EOS"
-COOKIE_SECRET   = "#{Digest::SHA1.hexdigest(Time.now.to_s)}"
+COOKIE_SECRET   = "#{SecureRandom.hex(20)}"
 ADMIN_PASS_SHA1 = "08a567fa1a826eeb981c6762a40576f14d724849" #ctfadmin
 STYLE_SHEET = "/style.css"
 HTML_TITLE = "scoreserver.rb CTF"