fixes in sandbox (thx to /dev/random)