Robert Thibadeau
2 min readMay 25, 2024

--

In the information security world, the most common password is "password". The reason is that when you read "password" in the blank people just type password and use it. I won't tell who we knew did that, but my equipment did make to the White House. So given you had to have an uppercase and number, guess what: Passw0rd.

In programming languages the built in function for a random number (like rnd()) gets used often by simply putting in a "0" as the variable as in rnd(0) so it will compile. Sadly programmers do not know these are not random numbers. The number that is actually random has to be the number given as a variable. So rnd(0) looks like a random number but it is usually always the same number. The first in an entirely predictable of numbers that look random. "rnd" is useful in "whitening" a real random seed that may take minutes to guarantee is random.

We caught this error once at Seagate. My design team required that we got the source code for all security on disk drives and sure enough, a programmer once (just once) thought the rnd() function gave random numbers to give hardware data erasure access to the code on millions of drives. We stopped it in time but it took me going to the CEO (immediately) to explain what had happened to halt production. Talk about a catastrophe that never happened because we had a team that watched over own engineering for such errors. Imagine 10,000,000 disk drives around the world being erased in minutes over the Internet. P.S. 100% of things that read and write data use ECC (error correction coding) in order to read and write with very low error rates. All such ECC is entirely dependent on their performance on using true random numbers to 'whiten' the ECC. So it isn't just some silly thing like encryption, but it is just as imporant for having machines read numbers and text right. There is every reason to believe the human brain is similarly dependent on random events to get our own memories and logic right. (e.g., your brain really sees the same thing many times in many ways to believe it sees the thing.)

Mendaciology teaches us that lies are as fundamental as truth in brain computation.

https://medium.com/liecatcher/proof-that-every-sentence-can-be-a-lie-ce9fef20d351

--

--

Robert Thibadeau

Carnegie Mellon University since 1979 — Cognitive Science, AI, Machine Learning, one of the founding Directors of the Robotics Institute. rht@brightplaza.com