How To Predict Random Numbers Generated By A Computer

SdĂ­let
VloĆŸit
  • čas pƙidĂĄn 13. 07. 2022
  • In this episode we'll break the Math.random method in JavaScript with z3.
    đŸ¶ Snyk is free forever. Sign up with my link snyk.co/pwnfunction
    ⭐ Randomness Predictor: github.com/PwnFunction/v8-ran...
    ⭐ Z3 Challenges: github.com/PwnFunction/learn-z3
    ✹ Info
    ➜ Tools used are: tools.pwnfunction.com/
    ➜ Video Production time(Research to Output): 100-ish hours.
    ➜ About 2L of Almond milk & 3.5L of Gatorade were consumed during the video creation.
    💬 Discord: / discord
    đŸ€ Twitter: / pwnfunction
    đŸŽ” Track: Lost Sky - Dreams
    NCS link: ‱ Lost Sky - Dreams | Tr...

Komentáƙe • 791

  • @PwnFunction
    @PwnFunction  Pƙed 2 lety +1742

    Should I do a tutorial on time travelling? It’s ez bruh, 88 mph.

    • @callumery119
      @callumery119 Pƙed 2 lety +47

      I JUST FINISHED THE EXERCISE!!!! NO WAY

    • @shotgunflamez5608
      @shotgunflamez5608 Pƙed 2 lety +6

      yes

    • @wakematta
      @wakematta Pƙed 2 lety +13

      42

    • @AntiAtheismIsUnstoppable
      @AntiAtheismIsUnstoppable Pƙed 2 lety +5

      So, what you could is, is built it into the computer itself just using analog instead. It is not precise until it is converted to digital, but the idea here is, it will always vary. Take for example, the battery status. It is never ever the same in analog. So, add that signal to other signals in analog and you have something that will always vary slightly when converted to digital.
      I wonder how you can make perfectly safe random number generators in digital, since everything in software has been filtered to make it digital?
      Can you get to the analog signal of the battery in software?

    • @zyansheep
      @zyansheep Pƙed 2 lety +2

      yeah its easy I do it all the time, some people can even do it faster than others. never heard of any kind of time travel that could predict the future tho.

  • @bertansadiki6794
    @bertansadiki6794 Pƙed 2 lety +643

    never thought id have to make trust issues with random number generators

    • @piolix0004
      @piolix0004 Pƙed 2 lety +37

      Well they're not random which is the reason why you shouldn't trust them

    • @bertansadiki6794
      @bertansadiki6794 Pƙed 2 lety +14

      @@piolix0004 my whole life was a lie smh

    • @N____er
      @N____er Pƙed 2 lety +1

      @@bertansadiki6794 You couldn't tell wouldn't be random??

    • @bertansadiki6794
      @bertansadiki6794 Pƙed 2 lety +2

      @@N____er jk bro i kinda knew its impossible for a computer to generate a truly random number

    • @boem231
      @boem231 Pƙed 2 lety +1

      If you want to use crypto where the number has to be not known by someone else you could use the crypto api

  • @bluesquare23
    @bluesquare23 Pƙed 2 lety +825

    What's really cool are the tool assisted speed runners who reverse engineer the games rng functions to pull off frame perfect runs.

  • @123_king_me9
    @123_king_me9 Pƙed 2 lety +1076

    Small correction:
    “There’s no way for a traditional computer to generate a true random number because the entire system is deterministic.”
    This actually isn’t true. Various systems within the computer chip generate entropy as they operate due to inefficiencies and heat generation and such. Computers can actually measure entropy generating hardware as a way of obtaining a true random number. These really are true random numbers since entropy is the randomness of the universe and is inherently unpredictable.
    All computers running on modern x86 architecture (64 bit intel chips or any AMD chip since 2015) can run the instruction RDSEED, which probes entropy generating hardware to generate a true random number. The instruction is computationally expensive and takes many clock cycles to perform, so it’s recommended to be used as the seed of a pseudo random number generator rather than as a random number generator itself, hence the name RDSEED.

    • @heisdivuzki
      @heisdivuzki Pƙed 2 lety +21

      Correct

    • @ALEET
      @ALEET Pƙed 2 lety +83

      It may seem random to YOU, but is it really random?

    • @aranyadutta297
      @aranyadutta297 Pƙed 2 lety +5

      Ok so just tell me the conclusion... should I believe in computer gen random numbers???

    • @w花b
      @w花b Pƙed 2 lety +9

      Yep, I did some research a while ago on the topic and It's right.

    • @silverywingsagain
      @silverywingsagain Pƙed 2 lety +79

      Going to add a correction to your correction, a computer can gain a finite amount of entropy from systems that are non-deterministic, like interrupt timings. The operating system stores a "pool" of entropy gained from these values, and then taps into that pool when RDSEED is called. It's an expensive instruction because it's reliant on software. If that pool has been exhausted or does not exist, the quality of these numbers drops from truly random, back to pseudo-random. Some organizations, like Cloudflare, need huge amounts of truly random numbers to generate millions of secure keys each day. To do this they use a physical system outside of the computer, in Cloudflare's case, its a webcam pointed at a wall of lava lamps.

  • @daleryanaldover6545
    @daleryanaldover6545 Pƙed 2 lety +1

    I always look forward for more of your content ever since finishing what you have in the channel. Every time you upload, I am always having a blast!

  • @purewaterruler
    @purewaterruler Pƙed rokem +43

    I would like to note that flipping a coin is not a chaotic system. A chaotic system is a system with high sensitivity to initial conditions, not that there are many initial conditions. A real example of a chaotic system is a double pendulum.

    • @swaw11
      @swaw11 Pƙed rokem

      Yeah.. or 3 body problem..

  • @thejuanpa88
    @thejuanpa88 Pƙed 2 lety +295

    Just a small semantic correction: It is incorrect to say that cryptography doesn't use pseudorandom generators, it absolutely does. No computable generator can be, by definition, absolutely random. They can be, however, observably random. That does not mean that the generator is not pseudorandom, it means that there is no known function that can discriminate that generator from a truly random one (always speaking in terms of polynomial time) . If this were not the case, symmetric key generation would be either an uncomputable problem, or and insecurely solvable one.

    • @somdudewillson
      @somdudewillson Pƙed 2 lety +32

      Hardware random number generators are a thing, and not uncommonly used in cryptography. Incomputable generators of random noise are fairly easy to make/use - just observe them.

    • @ultimatedude5686
      @ultimatedude5686 Pƙed 2 lety +1

      It seems like quantum computing could change that.

    • @thomasi.4981
      @thomasi.4981 Pƙed 2 lety +4

      He does conclude by saying "but you can use *cryptographically secure pseudo-random number generators*" at the end... Right after the bit where he said what you take issue with. Immediately after. So he's aware that they can be and do get used.

    • @chovnyk_pluve
      @chovnyk_pluve Pƙed 2 lety

      As author mentioned, nothing can be technically random :)

    • @Lucky10279
      @Lucky10279 Pƙed 2 lety +12

      @@ultimatedude5686 That depends on whether quantum mechanics is fundamentally random or not, which is an open question.

  • @Centori88
    @Centori88 Pƙed 2 lety +91

    This is probably one of the best approach to explaining an advanced concept in very simple terms and entertaining style.Thank you!Definitely following for more!

    • @rosiepone
      @rosiepone Pƙed 2 lety +1

      oh yeah totally, the best way to learn to program and solve problems is to take someone's solution, recreated it, break it to bits, and recreate it again in your own fashion lol

  • @codecaine
    @codecaine Pƙed rokem

    Your channel is full of excellent content. Keep up the excellent work!

  • @romanext921
    @romanext921 Pƙed 2 lety

    This is an amazing video. Very interesting info and perfect delivery. Thanks!

  • @twtrentrt
    @twtrentrt Pƙed 2 lety +22

    This goes along nice with Liveoverflow's latest video. Good job!

  • @SisirKumarPathy
    @SisirKumarPathy Pƙed 2 lety +23

    I had known about this that "It is impossible to create pure random numbers in computer science" but seeing it in practice as really cool. Your explanations are awesome. Keep it up.

    • @davidjohnston4240
      @davidjohnston4240 Pƙed rokem +7

      But it's an incorrect statement.

    • @user-dh8oi2mk4f
      @user-dh8oi2mk4f Pƙed rokem

      @@davidjohnston4240 how?

    • @davidjohnston4240
      @davidjohnston4240 Pƙed rokem +2

      Computers are made of electronics. All electronics have electrical noise which derives from quantum physics. That noise can be used to make nondeterministic random numbers. The entropy extraction algorithms can squish those random numbers into higher quality random numbers that are arbitrarily close to full uniform.

    • @JarppaGuru
      @JarppaGuru Pƙed 4 měsĂ­ci

      value1 = random.randrange(1,100000)
      d = random.randrange(0,6)
      value2 = random.randrange(1,100000)
      if d == 0:
      random = value1 + value2
      if d == 1:
      random = value1 - value2
      if d == 2:
      random = value2 - value1
      if d == 3:
      random = value1 * value2
      if d == 4:
      random = value1 / value2
      if d == 5:
      random = value2 / value1
      print(random) #now its ramdomish than just 1 random LOL

  • @f.fmaster200
    @f.fmaster200 Pƙed rokem

    Fantastic tutorial, keep up the great videos!

  • @DuniC0
    @DuniC0 Pƙed 2 lety +8

    If the risk were just in dependencies using Math.random, you could easily inject a mock/stub instead. The mock can throw an error if used, but it doesn't mean that it's used for the critical part. Also you can create a stub always returning 0 to see if the encryption libraries become predictable.

  • @UltimatePerfection
    @UltimatePerfection Pƙed rokem +13

    That's why we need a pseudorandom library that uses a variety of sources for seeding, other than the system clock. Stuff like current temperatures, microphone input (which is especially random in case of the cheap mics many people have that provide a lot of noise), mouse position at the time of setting up the seed, and any other sources of randomness you can think of. Also reseeding the generator every hour or so.

    • @legendgames128
      @legendgames128 Pƙed rokem

      Perhaps in the case of a game, player input, enemy velocity, collectibles, etc.

    • @UltimatePerfection
      @UltimatePerfection Pƙed rokem +1

      @@legendgames128 No, it's too easy to manipulate, just look at RNG manipulation in classic NES and GB titles (which didn't have a clock, unless one was provided on the cart and had to do seeding in the way you describe).
      Things like noises on the microphone or component temperatures are much harder to control. Basically, any analog input source is a good source of randomness.

    • @legendgames128
      @legendgames128 Pƙed rokem

      @@UltimatePerfection I was suggesting additional things as well as what you provided, but yes, the manipulation that could come of player input is very much not random. I guess if the player has any say in the RNG, then the RNG could be manipulated to do whatever the player desires (so long as the RNG directly affects it) so scratch that idea.

    • @zvxcvxcz
      @zvxcvxcz Pƙed rokem +1

      You can use hardware seeds, if you're looking for a good RNG library you should check our PCG32. The author has a great talk explaining why it better than other approaches as well.

  • @0xbro
    @0xbro Pƙed 2 lety +40

    I tried the "Time Travel" option running multiple sleep(-10) but it didn't work. Do someone manage to make it working?

    • @Zaary
      @Zaary Pƙed 2 lety +19

      python actually blocks negative values for time to make impossible for newbies to time-travel

    • @leogama3422
      @leogama3422 Pƙed 2 lety +7

      You just need to do:
      *from **___future___** import random_int*

  • @kyputer
    @kyputer Pƙed rokem

    Love your videos. Keep it up!

  • @aditya95sriram
    @aditya95sriram Pƙed 2 lety +11

    Woah! Would've never expected to see Z3 make an appearance here, it is indeed really cool! (I work with SAT/SMT solvers on a daily basis)

    • @Pietro-qz5tm
      @Pietro-qz5tm Pƙed 2 lety +1

      Interesting!
      I'm a graduate student in mathematics and I really like automated (and assisted) provers. But I don't really know about the application they have in industry.
      What is your line of work?

    • @aditya95sriram
      @aditya95sriram Pƙed 2 lety +1

      @@Pietro-qz5tm i don't have much experience with the automated proving part of things. I mostly use SAT solvers to efficiently (in practice) find solutions for NP-hard problems. You can think of it as a practical oracle

    • @Pietro-qz5tm
      @Pietro-qz5tm Pƙed 2 lety

      @@aditya95sriram yea that is what they are made for :D
      I just wanted to know what are the problems you use them for

    • @aditya95sriram
      @aditya95sriram Pƙed 2 lety

      @@Pietro-qz5tm Well I've used it for computing certain width measures for graphs (popular in the area of Parameterized Complexity, like treewidth, treedepth etc) and for computing the structure of Bayesian Networks. If you're still curious, you could check out the papers at ac(dot)tuwien(dot)ac(dot)at(slash)vaidyanathan

    • @animowany111
      @animowany111 Pƙed rokem +1

      @@aditya95sriram I have some experience with SAT solvers, and even wrote (a somewhat poor performing and non-proof producing) one.
      I believe there's a lot of ways in which incremental solvers could get better, I wrote a bunch of wrappers that iteratively call a SAT solver to simplify input formulas, or more specifically, to find all fixed units in the input formulas, and all fixed implications. This is *extremely* useful for some purposes, but is basically impossible without wrapping an IPASIR-like incremental solver and basically excluding similar solutions until UNSAT.
      I have used these solvers to find patterns in cellular automata that perform various things, like finding novel spaceships in new rules, finding patterns that implement (simple) logic circuits (going more complex would require a QBF solver and some forall constraints, but existing QBF solvers kinda suck).
      I've implemented various logic games (light-up, minesweeper, sudoku) in SAT-solver formulas, which allows for things like finding the simplest instance that is not solvable by some set of inference rules (which is useful if you can somehow assert the solution is unique), which you can do iteratively to do some fun stuff.

  • @user-ts3gr6ly4p
    @user-ts3gr6ly4p Pƙed rokem

    This was so helpful!! Thank you

  • @captainunknown2839
    @captainunknown2839 Pƙed 2 lety +4

    Exercise was so much fun & easy!

  • @ChrisContin
    @ChrisContin Pƙed 2 lety +2

    Great animation! Very entertaining to watch. Randomness is real, not artificial, and is the combination of two or more similar values into a confined space. “A and B are equal in size, but are forced equally to fit spot C, which is only big enough for one of them.” The value C at the conclusion is random, and not dependent on systemic error.
    An example is to count down to zero, but twice. The exact moment is indeterminate, because time keeps going, and no parts were favored. To compare why this is random, place two objects in-line on a track, and see who will come out ahead after many laps. The result is not inline, because each part is trying to win! The return of a function from time-dependency is called “seizing”, and can be implemented as an “LC-circuit”, or inductor-capacitor reforming array. Push energy into a capacitor, and see it try to escape at the earliest exact moment. When both arrays operate at the same time they’ll literally force on time to “let them pass”. The exact winner is therefore indeterminate, and this circuit produces a single bit of truly random information. Twenty bits will obliterate any form of computation developed by a mortal- you can crash the entire suite of any portal software: Windows, MacOS, Linus, Unix, etc. just by arranging those twenty bits somewhere on board. The operating system will find that electricity is too interested in a computation unrelated to the cpu-instructions and “hang”, or freeze, without any computation until a memory refresh takes place!
    See “particle assembly, physics” for more information about random numbers and why flow of information yields the need for a “break” every now and then! Long post, hope you enjoyed it!
    See Me for that information. I’ll find a way to help. Take care!

  • @marciello1366
    @marciello1366 Pƙed rokem

    Woah, great video mate!

  • @itzvoko1
    @itzvoko1 Pƙed 2 lety

    Well I learned a lot from this video because of the randomness and many new English words I didn't know before, thanks for you and for google translator too

  • @Crayfry
    @Crayfry Pƙed 2 lety

    Awesome video, really laid back, really likey

  • @yeez_pao
    @yeez_pao Pƙed rokem

    Woot! Thank goodness, I needed this back on my

  • @dimaswiki6550
    @dimaswiki6550 Pƙed 2 lety

    thx for the exercise, i learn a lot about z3 today!

  • @gokdenizvarol9892
    @gokdenizvarol9892 Pƙed rokem

    Thanks man!! You've earned my respect

  • @gregheth
    @gregheth Pƙed 2 lety +57

    it designed that way so programmers can rerun test cases. Use a value Seed on every call to get random

    • @w花b
      @w花b Pƙed 2 lety +14

      And in the Python documentation it's explicitly said that the random function isn't for security purposes

    • @zvxcvxcz
      @zvxcvxcz Pƙed rokem

      Sure, but since the next number is easy to predict from the current number, leaking some of the numbers even after use can let an attacker get ahead by knowing the upcoming numbers. The problem isn't just that it is deterministic, but that the determinism is easily figured out.

  • @HA7DN
    @HA7DN Pƙed 2 lety +2

    Solved a CTF challange 'bout a year ago with this. Some implementations have a stack of values generated that is re-filled sometimes, that complicates it a bit.

  • @TheDiamondMc88
    @TheDiamondMc88 Pƙed 23 dny

    Very useful video, thanks!

  • @howl2339
    @howl2339 Pƙed rokem

    WOW, this is the first time i look at one of your videos. YOU ARE AWESOME

  • @thecodingpress5970
    @thecodingpress5970 Pƙed 2 lety

    Yes! Another legendary video from a legendary legend!

  • @sdjhgfkshfswdfhskljh3360
    @sdjhgfkshfswdfhskljh3360 Pƙed 2 lety +11

    Electronics always produce noise. In most cases this effect is undesirable and computers are designed to reduce its impact on their operation. But it is possible to go other way and amplify the noise to make true random generator inside computer. And this is exactly what is done in latest CPUs.

    • @zvxcvxcz
      @zvxcvxcz Pƙed rokem

      Yup, but it is too slow when you need a lot of random numbers, so you seed with that and then depend of a good algorithm for the rest. Mersenne Twister should really be the bare minimum RNG algorithm but apparently things like this have been kept around for legacy code reasons (in the case of C++, I don't follow what goes on with Python). PCG32 is a good RNG library.

  • @lowlevelcodingch
    @lowlevelcodingch Pƙed 6 hodinami

    this vids gonna have the 2nd birthday in 4 days, and this was the first video ive watched from you!!

  • @piecaruso97
    @piecaruso97 Pƙed 2 lety

    I was just looking for the right occasion to use my brand new tardis, thank you.

  • @shishirjha
    @shishirjha Pƙed rokem

    Hi i really like your video style. Can you create one video on how you create videos? What is your production process overall? I think lots of people would be interested in that.

  • @Krzychu-bh4rl
    @Krzychu-bh4rl Pƙed rokem +2

    I have simple idea from analog synthesizer. Build analog noise generator, add ADC, and when application needs random value you simple have to sample momentarily voltage at the output of noise generator

  • @MirkoCrafter
    @MirkoCrafter Pƙed 2 lety +12

    And thats why cloudflare uses lava lamps (which are recorded by cameras) as their RNG :D

    • @nicholascurran1734
      @nicholascurran1734 Pƙed 2 lety +4

      Dude someone is gonna build a program to find the patterns of lava lamps now 😄

    • @brayyy846
      @brayyy846 Pƙed 2 lety +1

      Someone can predict the general movement of a lava lamp and how it reacts to changes in the variables around it (angle, temperature, etc
) but there is absolutely no way to accurately predict the exact placement of everything at a certain moment in time

    • @TheAechBomb
      @TheAechBomb Pƙed rokem +1

      @@brayyy846 also cameras are noisy, even if you could perfecrly predict the lamps,the camera sensors inject enough noise to make that useless

  • @PlayerPaul
    @PlayerPaul Pƙed rokem +2

    We've been told that computer generated random numbers are not actually random, back in 2nd or 3d grade in computer class. That is a really cool knowledge to have. And actually mega OP compared to all the other computer class knowledge we got, especially that early. Always wanted to find out actually how this algorithm works. Quite cool. Good vid actually.

    • @PlayerPaul
      @PlayerPaul Pƙed rokem

      @@maqp1492 yeah, I've read it from other comments already.

  • @rubix_44
    @rubix_44 Pƙed rokem

    I thought this is someone with hundreds of thousands of subs but then I checked and he only has 900 subs. That’s crazy he definitely puts a lot of effort in his videos and they are fantastic. He deserves more subs.

  • @bbstudiohungary4133
    @bbstudiohungary4133 Pƙed rokem

    It works! Thanks a lot.

  • @vaisakhkm783
    @vaisakhkm783 Pƙed 2 lety +1

    You convinced me to signup for snyk
    😂 well done...

  • @ARIELGOETA
    @ARIELGOETA Pƙed 2 lety

    Thank You For The Mind-Blowing!!!!!

  • @smithbakare5437
    @smithbakare5437 Pƙed 2 lety

    thank you man,it worked!

  • @subhankargogoi1260
    @subhankargogoi1260 Pƙed rokem

    works, chock-full thanks!

  • @mikepennington8088
    @mikepennington8088 Pƙed 2 lety +6

    Several observations. First, not all computers represent floating point as defined by IEEE 754. Yes, most that you are ever likely to encounter do but there are exceptions. Secondly, this video is based on the supposition that each random number generated is dependent upon the previous numbers. If that is not the case then the predictor does not work. To show this, change the generator to use a new seed each time. The seed can be the system time, the time between inputs to the program. or any other value obtained in a manner that is not deterministic.

    • @Pietro-qz5tm
      @Pietro-qz5tm Pƙed 2 lety +1

      Changing the seed does not solve the problems of predictability. It moves the problem: instead of generating random numbers you now have to generate random seeds for the number generator... those seeds are again random numbers. So if you have to change seed every time you need a random number then just use the new seed as the new random number

    • @mikepennington8088
      @mikepennington8088 Pƙed 2 lety +1

      @@Pietro-qz5tm You are correct. Just use what i was calling the seed. That solves the predictability problem. The whole point of the video appears to be that for any given seed, the same finite repeating sequence of pseudo-random numbers will be generated. The nth number of the sequence can then be predicted from a large enough sample of consecutively generated predecessors. Mathematically, there exists a pair of functions f and g with fn being the result of each execution of f such that g(f1, f2, f3, ..., fn) = fn+1. Just consider the expressions following f to be subscripts. Does that pretty much sum it up? I think that the point that you were trying to make is that pseudo-random numbers are not truely random but you got too tangled up in the prediction function and never really said that. My point is that there are methods available to produce truly random numbers from the computer's environment.

    • @Pietro-qz5tm
      @Pietro-qz5tm Pƙed 2 lety

      @@mikepennington8088 now it makes more sense. Let me just add two things, for clarity.
      An abstract computer (as a Turing machine, interpreter of lambda calculus, or whatever) does not have ways to generate nondeterministic random bits. But real ones can, as you said, collect random bits from the environment (just, please, don't use the time as a source of randomness, it is not a good one). Sometimes even real machines have problems. Just after boot for example, when environment entropy is low, or when a big quantity of random bits is required (that's why /dev/random is usually blocking in Linux).
      In theory given a deterministic prng a predictor exists, in practice such predictor may be very difficult to compute. That is the whole point of cryptographically secure prng: there are not known fast predictors. This was mentioned in the video and is, imho, a quite important distinction. z3 will never break a secure prng, it is a SAT solver but SAT problems are usually intractable.

    • @davidjohnston4240
      @davidjohnston4240 Pƙed 2 lety +1

      The MPFR library is popular when you need bigger floats than IEEE 754 offers. I use it all the time for cryptography work.

  • @yousafwazir3167
    @yousafwazir3167 Pƙed 2 lety +4

    That’s thumbnail cracked me up

  • @IceQub3
    @IceQub3 Pƙed 2 lety +18

    You can try build a "true" random number genrator using a giger counter and somthing radioactive like a banana.
    Also some TMP has quantum random number generator built in

    • @davidjohnston4240
      @davidjohnston4240 Pƙed 2 lety +5

      No need for radioactive sources. Just use electrical noise. It's a lot more abundant in electronics and comes with quantifiable entropy. That's how we do it in computers.

    • @loganiushere
      @loganiushere Pƙed 2 lety

      @@davidjohnston4240 yea but if you know exactly how every source of electrical noise works you could predict the output.
      But, radioactivity is truly random. We currently know of no way to predict when a radioactive element will decay.
      But, there’s no need to use a banana, you can just use yourself! You’re (slightly) radioactive!

    • @IceQub3
      @IceQub3 Pƙed 2 lety

      @@loganiushere the generator in many modern TPM is electrical, and is considered quantum random. If you use a too small transistor electrons will randomly tunnel between on the gate, you can mesure its and use it as a true enteopy source, the biggest problem with electrical sources is tempeture dependunce, unlike radioactive isotops, the tempeture will affect the distribution of electron creating a bias and in result decreasing entropy.

    • @DavidJohnston_deadhat
      @DavidJohnston_deadhat Pƙed 2 lety +1

      @@loganiushere Electrical noise arises from quantum interactions. The underlying nondeterminism of everything arises from quantum interactions.

    • @loganiushere
      @loganiushere Pƙed 2 lety

      @@IceQub3 huh, well that is not what I thought of when I heard “electrical noise,” but I guess that would be truly random!

  • @IAmMakingMusicOverHere
    @IAmMakingMusicOverHere Pƙed rokem

    If this was just a giant ad for snyk, it worked. Was totally sold on using it to detect insecure psuedorandomness by the end!

  • @nonatowebby4166
    @nonatowebby4166 Pƙed 2 lety

    pretty nice video, thanks for that. And pretty nice theme. I would appreciate if share the them you used for this video in your VSCODE.

    • @fresonn
      @fresonn Pƙed 2 lety

      + What is VS Code theme?

  • @anukulpandey8116
    @anukulpandey8116 Pƙed rokem +1

    Which software do you use to make videos?

  • @ocasoify
    @ocasoify Pƙed 2 lety

    this is su[er interesting , thanx for the video

  • @Furkanh66
    @Furkanh66 Pƙed 2 lety +1

    Real quality content

  • @nomadshiba
    @nomadshiba Pƙed rokem

    can you also make a videos on possible vulnerabilities to be aware of while writing solidity smart contracts

  • @BenRogersWPG
    @BenRogersWPG Pƙed 2 lety

    2:10 on first listen I thought you said here that the coin flip depends on "divorce" 😅
    Great video! Really good lesson!

  • @misikaro
    @misikaro Pƙed rokem

    That time traveling exercise was a tough one but eventually I managed it

  • @kushagrasaxena5202
    @kushagrasaxena5202 Pƙed rokem

    This z3 is pretty cool I should learn more about it

  • @codeaccepted5290
    @codeaccepted5290 Pƙed 2 lety

    Wow, cool explanation

  • @danieltoth714
    @danieltoth714 Pƙed 2 lety +1

    Great video! One feedback i'd have tho is please next time have more contrast in the python code examples in the console, its very hard to read

  • @paherbst524
    @paherbst524 Pƙed 2 lety

    Nice work

  • @aryn_rjpt
    @aryn_rjpt Pƙed 3 měsĂ­ci

    Hoyy youtube.. show me more of such videos, I am in love with it rn (tho i didn't understand it completely)

  • @koda_pop
    @koda_pop Pƙed rokem +2

    thats why you seed it, but theres a good reason why sequences are the same and it's for debugging or testing purposes.

  • @abogilovic
    @abogilovic Pƙed 2 lety

    keep up the good work.

  • @jaopredoramires
    @jaopredoramires Pƙed 2 lety

    your visuals are always so beautiful

  • @quihaola4210
    @quihaola4210 Pƙed rokem

    @PwnFunction the video is great, but the z3, struct I don't see in the github share. how can i have it. thank you

  • @winstonkemp9662
    @winstonkemp9662 Pƙed rokem

    Just for curiosity , would this be able to predict integers. 1 decimal point. if the random number to be generated is within a list of numbers?, eg 0,1,2,3,4,5,6,7,8,9,10,11,12 and those numbers are not in a chronological order?

  • @xWeQi
    @xWeQi Pƙed rokem

    Thank you SO MUCH

  • @zxuiji
    @zxuiji Pƙed 2 lety +15

    9:31, not the way I learned to do random numbers, I keep the output value separate from the seed, sure I still use the shift & xor method but I just fill a separate variable with 1 extracted bit in a loop, something like:
    bool lshr( int *seed ) { ... }
    int random( int *seed )
    {
    int val = 0;
    size_t i;
    for ( i = 0; i < bitsof(int); ++i )
    val |= lshr(seed)

    • @patfre
      @patfre Pƙed 2 lety +5

      I will just point out that your a maniac because of ++i do like a sane person and do i++

    • @zxuiji
      @zxuiji Pƙed 2 lety +10

      @@patfre The intent is to increment before the value is used, therefore I will NOT change it, only an insane person tries to use a value before they increment it to the one they actually want

    • @user-sl6gn1ss8p
      @user-sl6gn1ss8p Pƙed 2 lety +2

      I'm not sure what lshr does, but using the seed as a starting point for state and overwriting it is how the algorithm used works (and also a pretty standard thing as far as PRNGs go, as far as I know). Keeping the seed could be seen as keeping some fixed state during the run (but not necessarily between the runs), but in a sense having the seed be a initial condition does that too.

    • @zxuiji
      @zxuiji Pƙed 2 lety

      @@user-sl6gn1ss8p For the LSHR:
      czcams.com/video/Ks1pw1X22y4/video.html
      I think a way of making the random number more secure would be to use multiple seeds and perhaps select them using the result of a seed, for example if you're encrypting a file you could copy some bytes into your seed to replace it, use it for both whatever you were gonna do, get the next random number and modulo with the bytes done to select another set of bytes to overwrite the seed with, as long as you implement some means of decryption then it would make it just that bit harder to decrypt the file without the initial seed, which could be a password/passphrase, for speed each character the pw/pp could just multiply a float that starts at 1.0 before the float is then used as a seed (I'm to lazy to take a deep look at the code that was presented in the vid so forgive my ignorance if it happens to be the same as what I just said)

    • @gnpar
      @gnpar Pƙed 2 lety

      @@zxuiji yeeah... no, don't roll your own crypto. Just don't do it, really.
      If you need a cryptographycally secure prng go get a reputable and widely used cryptographycally secure prng. There's a lot of them, they're field tested and widely audited.
      Does it mean they'll never have bugs? Hell no, they will have them, but they'll be far more likely to be found, reported and fixed than on your obscure NIH-driven implementation

  • @PcimOlki
    @PcimOlki Pƙed rokem

    Just record noise from mic input audio card. If you set all levels to max you'll be able to record noise from semiconductor used in first stage of amplification.

  • @hikaru-live
    @hikaru-live Pƙed rokem +1

    I remember that the last time when I needed random numbers for a school project, my code ended up carrying a full implementation of D. J. Bernstein's ChaCha20 stream cipher so I can use its keystream as a high-quality pseudorandom number generator.

  • @nishantraj5171
    @nishantraj5171 Pƙed rokem

    Thank you!

  • @richardappow6770
    @richardappow6770 Pƙed rokem

    What fonts are you using in the video?

  • @steviousmusic
    @steviousmusic Pƙed 2 lety +3

    2:30 Laplace's demon talks about this topic, and it turns out that it is mathematically impossible to predict the outcome, no matter how much reference data you have. Pretty interesting.

  • @chethanb6406
    @chethanb6406 Pƙed rokem

    which vscode theme is that can someone please answer

  • @_Preacher_
    @_Preacher_ Pƙed rokem

    Does anyone knows, why my GMS soft soft is diffrent ?

  • @KropEz
    @KropEz Pƙed 9 měsĂ­ci

    I have a question.How can I change the code to get number in sequence numbers which got with for example math.floor(math.random() * ....).Like Im pasting 5 numbers those I got in [2353, 2497, 2281, 2400, 2184, 2208, 2472, 2448, 2232, 2257, 2305, 2160, 2329, 2424, 2376][Math.floor(Math.random() * 15)] It's giving me a empty answer.Can someone help me pls?

  • @user-fi8cg8ne3f
    @user-fi8cg8ne3f Pƙed rokem

    TNice tutorials tutorial is so good, tysm

  • @user-ix2ph7zh6h
    @user-ix2ph7zh6h Pƙed měsĂ­cem

    How we predicte aviator next round using this method?

  • @earthling_parth
    @earthling_parth Pƙed 7 měsĂ­ci +1

    What happened to this channel? I loved this.

  • @quihaola4210
    @quihaola4210 Pƙed rokem

    I did it, thank you very much to the author

  • @angelicagracemisa9886
    @angelicagracemisa9886 Pƙed rokem

    This is the best free software Ive seen. Respect.

  • @phonemelartanvongphab6239

    Hi bro how can I use math floor to generate next results?

  • @kaksisve4012
    @kaksisve4012 Pƙed rokem

    PwnFunction: Let's run the script.
    CZcams: * starts an ad *

  • @Welder.Tiki_Toko
    @Welder.Tiki_Toko Pƙed rokem

    Can this method be used to see the opportunity for numbers to appear in slot games?

  • @oglothenerd
    @oglothenerd Pƙed 2 lety +3

    Dude! I was interested in this vid, mainly because I notices that generating events due to math like making a random number 0 - 100 and an event is (if > 50)... gave me one a lot then the other a lot! Great vid!

    • @Oneiroclast
      @Oneiroclast Pƙed rokem +1

      That has nothing to do with pseudorandomness. Actual random numbers have more streaks than people intuitively think as well.

    • @oglothenerd
      @oglothenerd Pƙed rokem +1

      @@Oneiroclast I used the Python Random module.

    • @RadiusNightly
      @RadiusNightly Pƙed rokem +1

      You can make your own PRNG, something simple, that peoples may not break so easy as classic random module that everyone knows. But it all depends for what purpose you need random number. For example, PRNG in games will be different from gamble machines, or in security application.
      There are lots of problems creating PRNG. Do you need efficient or performance PRNG, do you need FPU or not, what if there is no FPU on some PC, or what if you wanna avoid division because its not efficient, what ranges of numbers do you need, do you need negative numbers, for how long you need it to generate without going into shift or repeat, do you need all generated numbers to pop up equally distributed, eg. you are generating number between 0 and 1, 1m times, in the end do you need 500k 0 and 500k 1 numbers happening equally across all generated numbers or you are fine with 80% happened to be 1 and 20% of numbers generated are 0, or you need 50%:50%, with numbers 1, 2, 3 and 4, maybe you need 25%:25%:25%:25% equally, or 60%:4%:25%:11%: equally across all generated numbers.
      For example in game, 20% critical chance sounds fine, by math it may happen every 20th hit, because of math, and math does not give or think, but humans will see 20% as 1 guarantee in 5 tries, right(?), same with dice rolls, 6 sides, 1:6 chance that you will get what you need, and yet after 20th retry you cannot get number 6, because dice doesnt give a thing about previous results, and to people it looks like black magic, or something shady, not fair, and such, thats why Blizzard implemented in Warcraft 3 back in 2000 PRG Distribution, and its still used today in games like DotA2 and LoL, so 20% 1st try, if fail, then it starts adding up, 2nd try 20%, if fail, 3rd try 40%, if fail, 4th try 60%, if fail, 5th try 80%, if fail, 6th try, 100% guarantee, each time when critical happened, distribution are restarted. But such logic does not provide money for the casino owner, so it all depends what you really need.
      True random can be generated with PC taking current heat of components, or speed up and shifting HDD and combining them to get greater possibilities, even its limited and narrow, its hard to predict because its changing all the time, and again its not suitable for 20% in a game, because it does not go by the human logic, and we hate it, but its fine for other things.
      As i understand you, with 100% with even >50% event you are most likely need something like PRNG with Distribution.
      Easy way to get equal 50%:50% results (as you are looking for) or 50% chance are with 0 and 1, equally distributed, using modulus, even or odd number, even goes one way (eg. giving high chance to become odd), odd number goes another way (eg. giving high chance to become even), you can avoid decimal calculations if you want, its one line of branchless code, once you get equal result, you can go for 0-100 range, because theres 50 odd and 50 even numbers, if >50 will be equally hit as

    • @oglothenerd
      @oglothenerd Pƙed rokem +1

      @@RadiusNightly Okay, thank you!

    • @mustafaamin561
      @mustafaamin561 Pƙed rokem

      please can you share source code for maken predictable random number between 0 - 100 ?

  • @IllIl
    @IllIl Pƙed 2 lety +1

    Would love a video on the cryptographically secure RNG

  • @grpnpraveen8765
    @grpnpraveen8765 Pƙed 2 lety +1

    As you said its too easy, I completed the exercise you gave. 👍

  • @TOn-fx2gr
    @TOn-fx2gr Pƙed 5 měsĂ­ci

    Wait , can we use it to predict totp ? Since we have the algorithm to generate one and we only need the linux time since epoch (and we can get that) and we need the secret key (this is unknown) , and we have the list of previously generated totp .

  • @bartosak
    @bartosak Pƙed rokem

    Rust bandit camp roulette I am coming for you :D - I think they are using Mersene Twister algo

  • @user-gl5hy8ep4z
    @user-gl5hy8ep4z Pƙed rokem

    please a video about making a server for testing websites for example recive logs of sending a payload

  • @kasparroosalu
    @kasparroosalu Pƙed 2 lety +2

    You can have true randomness that is not based on our ignorance of starting conditions. Use quantum processes like radioactive decay or tunneling in your RNG.

    • @AnEnderNon
      @AnEnderNon Pƙed 2 lety

      most chips have inbuilt true random number generator

  • @somerandomdude4588
    @somerandomdude4588 Pƙed rokem

    If I remember correctly, it’s basically, the number isn’t random, it’s generated by like time, mouse position etc. (Not specifically those things, they’re just examples)

  • @Kinyanjui_765
    @Kinyanjui_765 Pƙed 2 lety

    what theme do you use in vscode?

  • @itachahades1593
    @itachahades1593 Pƙed rokem

    Bro just me here trying to predict an outcome in an arcade game. Never thought that would bring me here

  • @alice20001
    @alice20001 Pƙed rokem

    Instructions unclear, went back in time, became my own grandfather, forgot to do the thing with the numbers.

  • @user-ts3gr6ly4p
    @user-ts3gr6ly4p Pƙed rokem

    merci beaucoup a toi :))

  • @jemrules835
    @jemrules835 Pƙed rokem +1

    Earth computer has a couple videos on him cracking random numbers in minecraft.

  • @topofeverything713
    @topofeverything713 Pƙed rokem

    Will it work on the website server based games?

  • @centreonbot8757
    @centreonbot8757 Pƙed 2 lety

    Wow that's mindblowing

  • @Fine_Mouche
    @Fine_Mouche Pƙed rokem

    what is the IDE you use ?