From: "Theo de Raadt" <deraadt@openbsd.org>
Subject: Re: [Maintainer Update] archivers/zpaqfranz-65.8
To: "Stuart Lamble" <openbsd@stuart.lamble.id.au>
Cc: tux0r <tux0r@rosaelefanten.org>, "ports@openbsd.org" <ports@openbsd.org>
Date: Tue, 06 Oct 2026 17:01:43 -0600

Stuart Lamble <openbsd@stuart.lamble.id.au> wrote:

> On Wed, Oct 7, 2026, at 09:25, Theo de Raadt wrote:
> > warning: rand() may return deterministic values, is that what
> >    you want?
> >
> > In this day and age, wow.
> 
> It also comes out when compiling Kea. I haven’t had the time to look into it and figure out if it’s a concern.

The existance of rand() in a binary is always a concern, unless it has been
reviewed and declared OK.  It is almost never OK.  Using it is never required,
those days are gone.

I think you are saying it backwards.  If it exists in a binary, it is bad and
wrong.