What random number generator are you using? I'm a little curious because most will produce the same set of "random" values with the same seed value which could leave the program open to exploit of the user can influence the seed value.
For what you're doing, it may not make much difference, but the pseudo-random number generator that IBM ships with the Crypto Access Provider LICPGM is much better when the random number really needs to be random.
Matt
-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Nathan Andelin
Sent: Monday, September 08, 2008 1:04 PM
To: web400@xxxxxxxxxxxx
Subject: [WEB400] Random String Generator
Last week's discussion on CAPTCHA made me curious about random number
and random string generation because random codes are harder to break
than say a fixed collection of codes or derived images.
So I set about to write a couple RPG procedures that could be used for
random number and random string generation. For example, the following
screen shows a program for generating random strings of 4-8 characters
based on the lower-case English alphabet.
http://www.radile.com/rdweb/temp/random.html
I found that with even a limited alphabet, the procedure can generate
thousands of unique strings of 4-8 characters. It was just interesting;
A curiosity.
I don't have an immediate use for something like this, but I think it
will come in handy sometime in a toolkit.
Nathan.
midrange.com
