Smolt database is broken

Mike McGrath mmcgrath at redhat.com
Tue Nov 20 19:25:47 UTC 2007


Alan Cox wrote:
> On Mon, Nov 19, 2007 at 11:32:03PM -0500, Yaakov Nemoy wrote:
>   
>> That is in fact a possibility.  It uses the output from
>> /proc/sys/kernel/random/uuid to work.  Is there a flaw with this
>> method that we know nothing about?  Should we use another?
>>     
>
> Well libuuid is the other alternative. I'm a bit concerned about reports
> the kernel uuid generator isn't as random as it should be. I'd like to know
> more - such as what uuids come up a lot and chase that further.
>   

Here's the top 5:

    266 28caf2c3-9766-4fe1-9e4c-d6b0ba8a0132
    336 810e7126-1c69-4aff-b8b1-9db0fa8aa15a
    402 c8dbb9d3-a9bd-4ba6-b92e-4a294ba5a95f
    884 06e84493-e024-44b1-9b32-32d78af04039
    931 e2b67e1d-e325-4740-b938-795addb45280


The left number is times this month someone has submitted a profile with 
that UUID.  If we take the last one as an example has come from over 800 
IP's in the last 20 days.  It seems very unlikely that one person would 
find his way to 800 different IP's this month.  Let me know if you'd 
like more.

    -Mike




More information about the fedora-devel-list mailing list