)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":9107,"name":"Victor Stinner","email":"vstinner@redhat.com","username":"haypo"},"change_message_id":"d45df6504d6593a20cc260e9e54e77ae28c115a5","unresolved":false,"context_lines":[{"line_number":9,"context_line":"One of the bandit checks is to attempt to use the system random"},{"line_number":10,"context_line":"library (which is better at producing randomness) vs using the"},{"line_number":11,"context_line":"default random class, this change moves to using system random"},{"line_number":12,"context_line":"where applicable."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"See: https://wiki.openstack.org/wiki/Security/Projects/Bandit"},{"line_number":15,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"3a29b11f_42a7c3a9","line":12,"updated":"2015-10-22 10:58:42.000000000","message":"Hum, I\u0027m not sure that it\u0027s worth it. SystemRandom requires syscalls to generate bytes, whereas random uses Mersenne Twisted which runs in userland and is faster.\n\nDoes taskflow really require secure random numbers?","commit_id":"34ef0c12c2f5783e6797eb8a353c73bd83a0b7d8"},{"author":{"_account_id":9648,"name":"Greg Hill","email":"greg.hill@rackspace.com","username":"jimbobhickville"},"change_message_id":"b240882510f3458f1fa82e76e5883765c6933794","unresolved":false,"context_lines":[{"line_number":9,"context_line":"One of the bandit checks is to attempt to use the system random"},{"line_number":10,"context_line":"library (which is better at producing randomness) vs using the"},{"line_number":11,"context_line":"default random class, this change moves to using system random"},{"line_number":12,"context_line":"where applicable."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"See: https://wiki.openstack.org/wiki/Security/Projects/Bandit"},{"line_number":15,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"ba8a016a_b87b0429","line":12,"in_reply_to":"3a29b11f_42a7c3a9","updated":"2015-11-20 19:14:07.000000000","message":"I tend to agree.  Josh, was this a requirement from openstack or something?  Just curious the motivation here.  Picking a slightly less random worker isn\u0027t really a security threat afaict.","commit_id":"34ef0c12c2f5783e6797eb8a353c73bd83a0b7d8"}]}