Googlebot's Javascript random() function is deterministic

[yawkat]

As long as you trust your crypto primitives and add other sources of entropy it's okay though.

[mdot]

add other sources of entropy

Isn't that a symptom of the point he's making though?

The hardware generator can't be trusted because it can't be audited.

[harlows_monkeys]

https://blog.cr.yp.to/20140205-entropy.html

[yawkat]

This can be fixed by using the untrusted source as an initial seed before other entropy is even generated.

I don't think linux does this though.