Post #2553674
2025-11-11 19:11 UTC
@dotstdy@mastodon.social @josh@social.joshtriplett.org @esoterra@hachyderm.io The twist there is, if you use secure APIs to get the seed, then deterministic environments will see the import of a secure API, and might not be able to run the code, because they don't know that it's ok to make it deterministic.
Replies (1)
-
@dotstdy@mastodon.social 2025-11-11 19:16
@sunfish@hachyderm.io @josh@social.joshtriplett.org @esoterra@hachyderm.io Yeah, you would never want to downgrade a csprng, for sure, but I just don't see much value in providing an api to something you get by default with any off-the-shelf prng. I guess my point is that reproducibility only matters over the boundary, things inside are already reproducible. So doing xorshiro or pcg inside wasm is already reproducible out of the box, and doesn't need any interposition. I wouldn't want to introduce a boundary for something I already have.