Comment by ikeboy

If they're going to use random numbers to enhance security, they should make sure that at worst, if the numbers are predictable and controlled by an attacker, it's no worse than the current security.

Does anyone know if their protocol does that?