Homepage I am no security expert and I do not know anything about the attack vectors that he claims, so maybe I should not say too much, but I do know this: TFA mentions that the PRNG is used for such fields as DNS transaction IDs and IP header fragment IDs, and these fields were never even meant to be random from the beginning.