autonomys / auto-mobile

Auto Typescript SDK
MIT License
0 stars 2 forks source link

Insecure RNG warning #6

Open abhi3700 opened 12 months ago

abhi3700 commented 12 months ago

Description

There is a warning shown on Android/iOS platforms (tested on emulator). It looks like this:

Image

Need to look into this.

SethY8s commented 11 months ago

Hey @abhi3700 I have a decent amount of experience with Android and IOS emulators and could give it my best shot. Have you made any progress on the warning yet?

I found this StackOverflow response, and it might be what you are looking for, but the warning seems slightly different than what you have.

https://stackoverflow.com/questions/73392452/secure-random-number-generation-is-not-supported-by-this-browser

abhi3700 commented 11 months ago

@SethY8s This issue persists as of now. It would be really helpful if you get a chance to fix this. You can contribute.

SethY8s commented 11 months ago

@abhi3700

Awesome, I will give it a closer look this weekend once I have more time. Would you mind outlining all the important system preferences of your machine and the exact methodology you used to get the warning? Pretty much I need your node, pnpm, xcode version, and where the warning is appearing.

I only ask this because I forked the repo and ran it on my local machine and did not see this warning. I am using node 20.9.0 and pnpm 8.12.1. The only functionality I saw in the app was a button that read 'generate recovery' so I clicked it and it generated some sort of key. While I did all this I saw no warning, so I am wondering if this is an issue with the node/pnpm version.

abhi3700 commented 11 months ago

@abhi3700

Awesome, I will give it a closer look this weekend once I have more time. Would you mind outlining all the important system preferences of your machine and the exact methodology you used to get the warning? Pretty much I need your node, pnpm, xcode version, and where the warning is appearing.

I only ask this because I forked the repo and ran it on my local machine and did not see this warning. I am using node 20.9.0 and pnpm 8.12.1. The only functionality I saw in the app was a button that read 'generate recovery' so I clicked it and it generated some sort of key. While I did all this I saw no warning, so I am wondering if this is an issue with the node/pnpm version.

Although @soufDev would be able to detail out, as he is working on the Frontend side of this PoC.

P.S. I am more concentrated on the backend/blockchain side of it. backend.

I think the issue was viewed on emulator (iOS & Android) and also the real device, I guess.