I don&#x27;t know of any published attacks on XorShift128+, which is used in most browsers for Math.random. What I know is that it&#x27;s not a cryptographically secure PRNG, though, so all you have to do is sit and wait for one ;-)