Open WebUI Windows installer generates low-entropy master key
The Open WebUI Windows installer uses only the installation second as entropy for its master secret key that signs session tokens.
Stories per day · 30 days
Relatedciphertext1cryptography1hypothesis-testing1ics1ieee-7541installer1iot1nist1openwebui1stl1trng1windows1zener1
8 stories, newest first · one card per story
Stories tagged #entropy
Zener Avalanche Noise TRNG Entropy Characterized for NIST Compliance
Paper evaluates op-amp Zener TRNG across gain settings and capacitors, identifying optimal config for NIST SP 800-22/SP 800-90B compliance and low-cost ICS use.
Global and Local Entropy Tests for STL Files Under IEEE-754 Validity Constraints
Researchers derive STL-specific entropy thresholds so valid ciphertexts are not falsely rejected.
Quantum random numbers can pass the tests and still leak clues to attackers
ETSI guidance warns quantum RNGs can pass statistical tests yet still leak predictable clues.
Surprising Success, Repeated Failure: Entropy-Guided Credit Assignment for Exploration in LLM Reasoning
EAPO uses policy entropy to reinforce surprising successes and penalize repeated failures in LLM reasoning.
Rethinking Token Reweighting for SFT: Suppress, Reverse, and Extrapolate Learned Features
SCALE gates frozen SFT features with entropy-trained controls, improving math and code scores on three Qwen models.
Empirical Analysis of Randomness Quality in Differential Privacy Mechanisms
Empirical study using IBM DiffPrivLib shows differential privacy mechanisms detect manipulated entropy when roughly 1 in 8-16 bits is biased or correlated.
Rare Not Random Using Token Efficiency for Secrets Scanning
Researcher proposes token efficiency (string length divided by BPE token count) as a better post-regex filter than entropy for secrets scanning, validated on CredData.
2