{"action":"opened","issue":{"url":"https://api.github.com/repos/ChristianRiesen/otp/issues/3","labels_url":"https://api.github.com/repos/ChristianRiesen/otp/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/ChristianRiesen/otp/issues/3/comments","events_url":"https://api.github.com/repos/ChristianRiesen/otp/issues/3/events","html_url":"https://github.com/ChristianRiesen/otp/issues/3","id":69595248,"number":3,"title":"Don't use rand()","user":{"login":"tomdxw","id":2256130,"avatar_url":"https://avatars.githubusercontent.com/u/2256130?v=3","gravatar_id":"","url":"https://api.github.com/users/tomdxw","html_url":"https://github.com/tomdxw","followers_url":"https://api.github.com/users/tomdxw/followers","following_url":"https://api.github.com/users/tomdxw/following{/other_user}","gists_url":"https://api.github.com/users/tomdxw/gists{/gist_id}","starred_url":"https://api.github.com/users/tomdxw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tomdxw/subscriptions","organizations_url":"https://api.github.com/users/tomdxw/orgs","repos_url":"https://api.github.com/users/tomdxw/repos","events_url":"https://api.github.com/users/tomdxw/events{/privacy}","received_events_url":"https://api.github.com/users/tomdxw/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-20T14:09:04Z","updated_at":"2015-04-20T14:09:04Z","closed_at":null,"body":"Bug is here: https://github.com/ChristianRiesen/otp/blob/7b1c92e964a440d3059c13cff2d18453ff2a2a4a/src/Otp/GoogleAuthenticator.php#L154\r\n\r\nrand() isn't a CSPRNG - even the PHP team caution against treating it as such: http://php.net/rand#refsect1-function.rand-notes"}}