people's actions have been proven to be useful for multi-factor authentication. also, studies have shown that pseudo random numbers can sometimes be predicted. this becomes more difficult when in small amounts.