Firefox 3.5 generates random numbers for…
Firefox 3.5 generates random numbers for security purposes using another browser’s cache and the Windows temp directory. For one user, due to the reading bottlenecks of the hard disk, Firefox took 30 seconds to startup. The user complains here:
That is, if you’re on the NSS team. In the outside world, things are a tad different. You see, Firefox v3.5 reads the Internet Explorer Cache and the central Windows temp folder in your user profile, through its NSS subsystem. Not only is it, in my humble opinion, not done to read another application’s caches or temp folders, it’s also amazingly ignorant towards the real bottlenecks of our modern computers: hard-drives. If you’re using a virus-scanner which is set to paranoia mode, this whole temp folder traversal by NSS will be even slower because every file accessed will be scanned by the virus scanner. Over and over and over again. And what happens if the user doesn’t do anything else but browse with Firefox, so these temp folders will not change (or are empty)? Isn’t using file reading the worst way to obtain a seed for randomization?
Source: Frans Bouma
