That’s a problem because these random number generaters are used to make up passwords. So, malicious hackers potentially already know your password even before you know you need a password.Academic paper on this vulnerability here, Slashdot report with other links here.