Anatomy of a pseudorandom number generator – visualising Cryptocat's buggy PRNG
I'm a complete noob when it comes to cryptography. I understand that having a PRNG that doesn't return numbers with even distribution across a range is bad. Extreme example would be something like <a href="http://xkcd.com/221/" rel="nofollow">http://xkcd.com/221/</a>.<p>But could someone explain how an attacker can take advantage of the fact that 0 is returned ~1% more often than other digits? It this flaw alone sufficient to break cryptocat? Or does it simply make brute forcing easier when combined with other crypto flaws?